Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bbmenZqkY_bNQyceoK-fLvwWxdc.roa
File: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (raw, json)
Hash identifier: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=
Subject key identifier: 6D:B9:9E:9D:9A:A4:63:F6:CD:43:27:1E:A0:AF:9F:2E:FC:16:C5:D7
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58F0C453709C142690549EF407ABE
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bbmenZqkY_bNQyceoK-fLvwWxdc.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206776
IP address blocks: 185.165.154.0/24 maxlen: 24
185.196.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8f:0c:45:37:09:c1:42:69:05:49:ef:40:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6db99e9d9aa463f6cd43271ea0af9f2efc16c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:72:e4:98:c3:06:4b:e1:6b:ef:32:8a:1f:
23:69:f5:e3:d1:fe:d4:d2:cb:28:a0:88:f9:1d:50:
3a:20:60:83:94:0a:80:63:f5:93:75:94:fc:55:5b:
5d:08:a1:4b:a7:68:e1:d0:06:1c:e0:f8:a0:70:ea:
ff:c3:34:ba:b8:23:80:6b:bd:94:0d:d6:39:9b:9a:
fc:70:ca:6e:d1:a1:46:a8:9b:13:b7:6e:69:80:38:
2e:2c:3d:3c:fe:93:04:0e:07:0c:a8:4c:97:7b:62:
d6:b9:80:6f:66:8e:37:f0:1d:02:41:ab:3e:27:c3:
f5:be:8c:a9:2f:ea:1e:98:c6:59:2d:9c:e8:5a:8e:
35:4b:3c:15:5e:6c:82:ed:00:1b:fb:53:02:75:79:
c2:47:92:17:b0:76:17:e4:9b:0e:e5:4b:57:46:64:
7a:ed:0e:49:00:25:db:3a:76:6d:b2:cb:17:5a:c2:
eb:12:02:50:5b:92:09:5f:37:51:36:db:94:7a:63:
07:1d:19:ec:e5:ff:69:74:6e:dd:91:04:be:d9:74:
5b:2c:a8:9f:1e:cd:bf:a1:40:3c:df:75:7d:14:94:
3d:09:0d:d7:b3:6f:2b:e8:98:a8:c9:e7:a1:56:a9:
10:19:80:7c:90:d0:9c:56:47:f3:68:11:76:35:f1:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:9E:9D:9A:A4:63:F6:CD:43:27:1E:A0:AF:9F:2E:FC:16:C5:D7
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bbmenZqkY_bNQyceoK-fLvwWxdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.154.0/24
185.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:10:a6:b0:4e:ca:cc:5f:a8:f6:e1:2a:bd:0e:5c:33:81:67:
76:9f:22:96:ab:cd:ff:ce:6b:4b:e3:d7:59:81:6e:b0:27:99:
16:6f:92:9f:71:11:e8:58:b1:48:e6:be:44:35:f7:62:aa:8a:
11:7c:81:44:cb:79:65:0a:0e:97:f2:5e:b6:fa:90:20:38:f1:
2b:68:17:8b:dd:da:b2:f2:61:85:29:38:4c:46:89:97:e6:82:
3b:32:f8:49:ed:12:10:79:d0:5a:3d:93:cc:4a:17:52:48:1e:
f2:38:77:6f:87:9b:02:64:8b:63:20:04:21:39:d2:a8:f6:e9:
dc:64:d1:8a:12:40:34:49:31:af:66:bd:ce:ef:73:56:05:24:
33:da:5e:41:75:17:21:d9:3c:85:27:64:67:3c:f7:6a:c2:eb:
87:38:39:23:1e:60:20:f1:06:48:dd:c1:be:91:0d:67:e7:92:
ab:30:40:9d:8a:a1:c2:36:76:ba:04:a8:32:58:bf:04:11:20:
df:fb:76:b2:ce:d1:56:57:1b:ae:8a:56:5a:79:74:b3:dc:8b:
6b:12:2a:20:9a:04:f9:1e:9f:a3:b2:3d:be:ad:fc:88:3a:ae:
06:19:6f:0d:aa:b6:e2:09:9e:b6:a4:73:a0:a3:73:4e:02:99:
58:c4:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net