Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/by6raZCZNNtEi9tbGKEvnYOsqYE.roa
File: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (raw, json)
Hash identifier: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=
Subject key identifier: 6F:2E:AB:69:90:99:34:DB:44:8B:DB:5B:18:A1:2F:9D:83:AC:A9:81
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 01942826342F5CF27B4BD7ADD8671B563608
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/by6raZCZNNtEi9tbGKEvnYOsqYE.roa
Signing time: Thu 02 Jan 2025 17:52:59 +0000
ROA not before: Thu 02 Jan 2025 17:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211678
IP address blocks: 5.145.178.0/23 maxlen: 23
193.239.202.0/24 maxlen: 24
2a10:a8c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:34:2f:5c:f2:7b:4b:d7:ad:d8:67:1b:56:36:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jan 2 17:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f2eab69909934db448bdb5b18a12f9d83aca981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:20:c9:89:6b:31:8c:2a:00:dd:dc:0b:64:
5d:b3:3e:bf:c5:b1:5a:56:9c:3f:f9:94:c2:44:93:
82:8c:35:e3:8d:b9:bd:22:25:c9:3b:ae:36:64:b1:
dc:36:26:bb:6c:94:6c:80:db:8e:bd:c4:d6:9e:04:
c1:e1:8f:4c:aa:9c:be:09:3c:f9:33:dd:d9:e4:55:
a5:5d:e2:13:a6:00:2f:c1:35:35:8b:8d:eb:46:a9:
01:b8:ce:6a:eb:46:ae:ab:25:87:ab:62:76:ac:e3:
78:17:b7:4b:f8:1f:26:02:74:2a:db:09:ad:09:49:
42:d8:27:40:c5:02:a6:b1:4d:2a:41:5f:cc:dc:74:
e4:06:2f:7e:b5:37:f9:e1:ef:0f:c7:70:03:38:3f:
24:f1:55:76:84:5a:1e:48:87:b5:ec:e6:3c:92:73:
40:48:d0:8c:e0:f3:c1:6b:0f:98:fe:01:6d:48:fb:
3c:1d:52:e1:08:42:2b:b0:c0:ca:b1:95:97:63:64:
57:c6:f1:dc:db:79:46:55:a7:23:5d:e1:5a:79:bc:
e4:af:a7:b6:12:da:b2:d9:5d:19:4e:39:1c:00:66:
46:77:23:e5:e5:41:7e:ee:e6:37:5a:d1:2b:8e:d2:
1d:a9:ee:ee:c1:63:6c:4f:b8:08:71:25:c5:4c:6a:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2E:AB:69:90:99:34:DB:44:8B:DB:5B:18:A1:2F:9D:83:AC:A9:81
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/by6raZCZNNtEi9tbGKEvnYOsqYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.178.0/23
193.239.202.0/24
IPv6:
2a10:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:8b:55:74:ea:50:98:f5:82:69:d0:dc:57:d7:42:8b:e8:06:
58:6e:d7:d4:e8:70:a1:86:26:28:ba:74:1f:42:3a:92:1e:34:
fc:6c:d1:6b:1a:fc:6e:fa:e1:fd:dc:89:c4:ea:68:1a:df:2f:
fd:5b:4f:e3:e2:d0:1a:2e:38:6f:47:5b:98:aa:93:81:7c:ab:
5d:ab:2f:1e:d6:41:ab:7a:84:eb:fc:5b:db:5f:8f:1f:4a:5d:
6e:9e:10:bf:95:77:12:bf:d7:2c:24:e6:a8:12:dc:af:6d:fc:
f4:e8:55:99:4e:28:73:81:1c:ed:e5:99:f5:0d:17:f6:b1:44:
af:ce:5e:46:4d:ad:3e:69:06:a6:12:be:2f:fa:e4:5b:ba:2e:
f8:6a:6a:fa:3e:44:c4:d1:00:b1:7b:05:e3:48:0a:7d:45:03:
7e:46:54:7d:51:6a:d3:22:be:6f:3e:16:c8:6d:fa:53:1f:e4:
f0:7a:67:fc:2a:88:a5:d5:60:17:a4:96:0a:4d:e9:66:36:c1:
22:b4:ca:07:cb:78:98:67:e6:f1:07:75:39:87:3f:dd:89:49:
ea:d8:26:4d:65:c7:cc:af:4a:ea:70:0d:8e:37:c0:3b:a2:4c:
39:09:35:54:00:dc:67:20:31:6f:71:1a:cc:40:59:0b:0e:02:
1c:92:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:29 2025 by rpki-client