Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/6BkAjCciZdkVim2iQSRHdt1sfiU.roa
File: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (raw, json)
Hash identifier: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=
Subject key identifier: E8:19:00:8C:27:22:65:D9:15:8A:6D:A2:41:24:47:76:DD:6C:7E:25
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 019422FBEBEB7C5727774D999833A7C2284F
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/6BkAjCciZdkVim2iQSRHdt1sfiU.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39568
IP address blocks: 185.230.204.0/22 maxlen: 22
185.230.204.0/24 maxlen: 24
185.230.205.0/24 maxlen: 24
185.230.206.0/24 maxlen: 24
185.230.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:eb:eb:7c:57:27:77:4d:99:98:33:a7:c2:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e819008c272265d9158a6da241244776dd6c7e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:ea:fe:85:54:e0:50:7f:49:09:91:4c:7a:
db:42:39:b5:a2:fe:82:05:99:d0:18:19:e9:62:ae:
0a:12:ff:59:5b:0a:a0:13:6c:3c:c3:bd:a0:a8:9f:
2f:d7:64:34:3c:bf:e8:98:3d:a8:a9:fb:d3:6b:49:
53:1f:5f:b4:20:32:45:17:4d:5f:f6:8a:af:09:48:
3c:65:ff:2e:a3:dd:be:b0:69:a1:e8:11:83:ef:a8:
c8:d4:66:bf:26:4f:a1:0e:40:88:93:d4:d8:4d:1d:
bf:27:82:0d:34:7f:4a:04:28:c1:16:e2:42:de:37:
8a:c5:55:c3:bc:40:3a:d6:ab:29:bf:02:fc:5d:43:
ea:f6:12:aa:04:56:d3:f2:99:fe:e6:43:e5:c7:a6:
91:c5:4e:e8:08:5c:33:01:9b:c7:3d:d0:0e:32:2d:
0a:2e:33:4f:b6:c0:86:65:3f:18:fe:6b:a6:57:b7:
96:dd:b1:db:66:a5:aa:97:5f:ff:b1:15:0c:5b:dd:
dc:0d:13:a4:bc:42:5d:5f:7e:0a:1d:18:12:8c:b9:
80:1f:49:2a:a1:36:7c:a7:fb:2b:f3:2d:5a:b2:b7:
39:bb:04:6a:dd:f9:ed:e6:8d:4e:60:93:1e:be:be:
70:50:2e:a0:43:c5:39:38:a9:44:7e:fd:24:e4:a0:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:00:8C:27:22:65:D9:15:8A:6D:A2:41:24:47:76:DD:6C:7E:25
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/6BkAjCciZdkVim2iQSRHdt1sfiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.204.0/22
Signature Algorithm: sha256WithRSAEncryption
db:9f:3d:f0:7e:f3:54:47:77:f8:a9:6a:a2:5c:d2:93:42:5f:
65:9e:c8:e2:3f:30:1c:5f:98:d4:f2:2e:2c:aa:92:fd:a1:98:
2b:9a:cd:76:b9:7e:63:d0:36:b2:5f:5f:eb:07:1b:d5:7e:1c:
50:3f:32:7a:d5:8e:e3:cc:0f:93:74:a2:03:4e:10:dc:1e:e9:
36:ac:f8:c2:94:0f:40:2b:d7:cb:8f:f2:7f:c0:3e:c8:5a:df:
7e:b4:d8:2e:4a:56:c8:e9:5e:2e:75:d3:b5:8e:26:ee:cb:7f:
2c:45:7b:d1:ca:59:48:93:ba:05:f5:3c:ce:4f:c6:28:99:12:
fd:7b:d3:95:61:e0:c3:da:6f:9d:42:90:21:01:72:f5:78:8f:
a0:64:2a:23:c7:70:3f:c7:3f:a8:43:54:a5:1e:19:56:7c:88:
7e:cf:c2:da:1b:68:c8:3c:8a:2b:ea:95:8f:a5:36:56:77:3e:
d4:b7:c2:07:4e:70:67:7d:8a:c8:3b:d5:fd:ec:75:9a:2f:31:
5d:f1:2a:7e:12:e6:7e:1a:d8:08:6e:f6:34:52:7b:a7:6a:40:
dc:fe:8a:5c:48:27:09:ef:91:62:62:65:64:00:ef:a3:4a:7c:
76:0e:6a:89:5a:bc:9e:ca:47:f3:53:2d:a5:18:1e:ae:6f:e6:
34:aa:ba:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:40 2025 by rpki-client