Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/0bgbW_14csm44AGVrYDh2QzA9ak.roa
File: 0bgbW_14csm44AGVrYDh2QzA9ak.roa (raw, json)
Hash identifier: Fpoc/uzwpCAWHTmyyCGb2WORERuZRa+7gYsAddHIHcc=
Subject key identifier: D1:B8:1B:5B:FD:78:72:C9:B8:E0:01:95:AD:80:E1:D9:0C:C0:F5:A9
Certificate issuer: /CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Certificate serial: 0A0D3D44
Authority key identifier: 4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/0bgbW_14csm44AGVrYDh2QzA9ak.roa
Signing time: Sat 01 Jan 2022 05:54:07 +0000
ROA not before: Sat 01 Jan 2022 05:54:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203929
IP address blocks: 185.124.33.0/24 maxlen: 24
185.124.34.0/24 maxlen: 24
185.124.35.0/24 maxlen: 24
89.37.56.0/24 maxlen: 24
2a0b:2cc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168639812 (0xa0d3d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c31cf6268bd24cce5f2931ccd76b91705e6c961
Validity
Not Before: Jan 1 05:54:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1b81b5bfd7872c9b8e00195ad80e1d90cc0f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:c9:f7:c2:29:1a:24:a8:92:43:ff:d7:98:
60:45:0f:2a:56:fd:5c:5e:bf:65:6f:04:3b:40:78:
54:11:82:1b:a5:22:0e:d1:c9:a6:4f:00:bf:e2:ca:
d8:0a:cb:97:d9:66:7b:51:78:eb:d5:47:85:bb:da:
9b:63:1e:ef:36:26:2d:0a:5a:60:cc:61:de:dd:9e:
c1:7f:59:9a:96:20:da:57:11:17:e1:08:09:76:c7:
67:95:6c:df:9e:38:82:07:46:43:d4:4a:14:d3:1a:
c6:5f:63:3b:bb:33:02:9d:d3:28:6b:92:c7:1b:da:
d7:98:9f:5e:ef:04:a4:9f:e2:19:38:f9:cc:54:6b:
62:82:6b:66:b3:8b:8f:da:c0:53:ee:13:d4:d7:d0:
27:4f:c4:28:68:db:fa:6d:9d:df:71:ac:0c:91:f1:
ea:82:8b:60:58:b1:c2:93:4a:12:47:2d:ad:1a:28:
2e:70:62:f8:f6:b8:bb:f9:74:d8:71:70:b0:33:7e:
9e:6e:5c:26:ca:33:75:73:e4:4e:9c:da:16:0f:aa:
cc:3c:50:f3:3a:d6:4b:92:12:0a:96:0d:72:aa:47:
7d:5c:d0:b5:af:f0:4b:42:f6:41:62:ac:34:d3:f1:
b6:41:99:dd:d8:ba:88:66:ee:c8:9c:42:89:1d:cd:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:1B:5B:FD:78:72:C9:B8:E0:01:95:AD:80:E1:D9:0C:C0:F5:A9
X509v3 Authority Key Identifier:
keyid:4C:31:CF:62:68:BD:24:CC:E5:F2:93:1C:CD:76:B9:17:05:E6:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDHPYmi9JMzl8pMczXa5FwXmyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/0bgbW_14csm44AGVrYDh2QzA9ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/549941-5dc1-4bf5-ae8d-4f766d8d46d7/1/TDHPYmi9JMzl8pMczXa5FwXmyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.56.0/24
185.124.33.0-185.124.35.255
IPv6:
2a0b:2cc0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:c8:8c:83:3f:a6:7f:6d:bd:67:ef:e3:b8:e0:39:8c:02:1f:
82:5c:34:ac:22:52:27:0d:53:64:79:14:9b:36:00:b2:c9:95:
9b:0b:e5:b3:35:60:8a:a4:34:a8:0c:06:9e:e9:15:dd:90:52:
bc:c9:99:f1:b5:95:43:ed:f6:2c:40:36:59:35:11:92:46:cd:
9f:3d:b6:b7:8c:40:d7:fd:73:6d:f6:a7:23:24:d2:49:12:a0:
3f:fe:a9:b4:e4:2a:93:3e:e6:26:2b:f4:0c:da:89:d7:64:4f:
92:67:62:9e:dd:5a:25:bb:a6:fe:03:90:4c:68:21:ae:35:4c:
8b:c8:87:76:21:e8:d6:f2:2c:3a:c0:fe:19:a5:4c:70:75:5c:
10:6e:34:07:7c:7a:c3:8e:2c:0e:9e:68:74:2e:40:f1:aa:3d:
b1:06:eb:4e:df:6d:08:c5:f8:2b:8e:35:68:12:9a:5c:ad:bc:
6e:ff:bf:76:58:e4:13:4c:b0:b0:17:3a:3e:86:97:4a:a8:5c:
1e:a7:24:71:c5:b3:d6:cf:6c:41:86:09:0d:e2:15:2d:55:b3:
13:a3:48:3e:94:fe:2f:42:df:b6:da:bf:59:50:34:59:96:3e:
10:dc:89:0b:53:90:ff:b2:ea:a1:46:fc:1e:36:9a:ba:d2:e9:
b2:86:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:53:44 2025 by rpki-client