Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/buQG-wtVNpUrPJ_2t7dekqYzUho.roa
File: buQG-wtVNpUrPJ_2t7dekqYzUho.roa (raw, json)
Hash identifier: AC4DBN7YxMjhR0VzHY+/cw0VJl+DFBoERdFnKk3z5Ac=
Subject key identifier: 6E:E4:06:FB:0B:55:36:95:2B:3C:9F:F6:B7:B7:5E:92:A6:33:52:1A
Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial: 0194266C22F3A5181D79ED4D97F2F4195CAB
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/buQG-wtVNpUrPJ_2t7dekqYzUho.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204488
IP address blocks: 185.175.63.0/24 maxlen: 24
185.247.168.0/24 maxlen: 24
185.247.169.0/24 maxlen: 24
185.247.170.0/24 maxlen: 24
185.247.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:22:f3:a5:18:1d:79:ed:4d:97:f2:f4:19:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee406fb0b5536952b3c9ff6b7b75e92a633521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:99:8c:a7:86:24:9b:62:0c:7c:af:d3:a6:
a6:3d:8a:8c:a9:b9:88:22:64:3b:65:74:09:1d:89:
d3:11:b3:bf:b8:95:c8:10:52:57:c4:6b:40:19:d2:
75:51:3b:9b:d2:8e:9b:0c:d4:be:f8:d8:9b:a4:1b:
f4:d9:6c:74:c6:c3:0a:0d:56:86:74:75:1d:42:71:
63:74:9a:2d:f3:df:65:ae:9c:a5:37:d9:10:0a:65:
64:ef:05:8e:f4:99:9c:6f:19:7c:df:39:d2:1b:5d:
7d:81:6b:a9:ef:11:b7:e0:3c:c6:a6:54:ef:fa:6d:
3e:ec:6c:c1:ac:5a:e0:91:5c:87:e4:72:a4:3a:0a:
1d:2b:6d:5a:17:6a:9d:e1:c7:be:62:21:f9:fa:0d:
56:df:59:af:b9:7d:73:2a:83:34:f9:5b:7b:f6:f5:
3f:fd:37:db:32:f5:12:38:43:3a:32:0b:a7:e1:43:
66:cf:ee:fc:f4:10:09:37:bc:25:e9:58:23:e7:99:
07:ea:32:13:a6:dc:f9:d7:76:4f:57:bb:07:5e:e7:
bb:4b:77:63:ad:71:68:4a:00:9b:ad:3d:d6:3e:f4:
c8:c1:aa:83:d7:71:cb:e8:5f:cc:af:36:14:b2:46:
1a:4f:b2:f9:14:d2:75:58:6c:94:44:20:10:ae:bd:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:06:FB:0B:55:36:95:2B:3C:9F:F6:B7:B7:5E:92:A6:33:52:1A
X509v3 Authority Key Identifier:
keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/buQG-wtVNpUrPJ_2t7dekqYzUho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.63.0/24
185.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
58:50:d4:30:45:6e:3e:60:f3:ba:d4:94:2c:a7:e7:d5:db:f3:
a7:e3:c9:ad:a6:95:ea:5f:70:1b:4c:b5:53:d8:b7:41:20:45:
68:76:8f:61:9b:12:4d:a5:de:87:d1:6a:79:ca:59:df:80:43:
4d:35:51:10:82:74:c0:94:97:b2:28:ed:f5:9a:d0:d7:88:bc:
58:c5:ad:58:f3:10:10:5f:6f:67:ac:f6:eb:c3:ec:d5:70:7b:
cf:7d:45:06:ab:70:2e:aa:a1:da:91:ec:d9:e0:09:c1:6d:ef:
f8:0e:b2:8a:3a:71:94:a7:b7:cb:ab:2d:c6:10:5d:44:c5:e4:
24:a1:1d:97:25:4b:03:c4:ba:3a:9c:01:d8:10:83:cd:8f:01:
e8:84:1e:3e:92:fa:81:a2:00:79:61:46:de:2f:4c:e1:98:0e:
b0:3a:68:98:c9:c8:7d:d8:59:b9:11:b9:27:1b:ef:5e:7b:67:
2d:e1:44:78:d6:68:59:c8:eb:a1:55:25:8d:0f:8c:a2:c8:95:
a1:c7:44:41:58:5e:df:a5:87:3c:f0:49:1e:e1:ce:d0:be:2d:
16:4b:ef:39:59:5f:67:d1:75:2c:f1:8e:d8:6d:c1:33:9a:9a:
14:8c:7c:d2:53:d6:10:f2:82:5b:e6:bf:eb:1d:20:85:86:f6:
4b:42:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:24 2025 by rpki-client