Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/bioMAYKF1qqrZbXGWoBChN2Rwsg.roa
File: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (raw, json)
Hash identifier: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=
Subject key identifier: 6E:2A:0C:01:82:85:D6:AA:AB:65:B5:C6:5A:80:42:84:DD:91:C2:C8
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0194B243F8473F05C4DC64B9F3D4FB46BBB2
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/bioMAYKF1qqrZbXGWoBChN2Rwsg.roa
Signing time: Wed 29 Jan 2025 13:33:06 +0000
ROA not before: Wed 29 Jan 2025 13:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5607
IP address blocks: 185.110.178.0/23 maxlen: 23
2a01:f8c0::/29 maxlen: 29
2a01:f8c0::/32 maxlen: 32
2a01:f8c1::/32 maxlen: 32
2a01:f8c2::/32 maxlen: 32
2a01:f8c3::/32 maxlen: 32
2a01:f8c4::/32 maxlen: 32
2a01:f8c5::/32 maxlen: 32
2a01:f8c6::/32 maxlen: 32
2a01:f8c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:43:f8:47:3f:05:c4:dc:64:b9:f3:d4:fb:46:bb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jan 29 13:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2a0c018285d6aaab65b5c65a804284dd91c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:bd:a0:6f:09:ec:40:b0:80:12:f0:be:26:
88:33:9e:1d:45:1f:dd:1c:85:54:5d:6f:65:5b:2c:
97:1e:bf:77:ff:53:ac:26:56:0b:be:8e:b9:b8:90:
66:85:83:b1:06:97:fb:4a:48:68:91:22:69:75:d8:
77:7c:5f:3f:67:9e:0a:e3:79:d0:61:9a:3c:87:f0:
74:b3:e1:82:59:60:14:60:64:30:5e:1d:70:a5:6d:
8e:43:93:29:9e:df:13:b0:83:45:70:63:14:22:89:
c6:00:f5:cd:65:76:d0:d6:c6:fe:30:03:5d:b6:ae:
c8:28:d5:30:f9:96:c1:88:96:f1:ea:25:27:ee:2f:
b3:01:e8:ce:f7:de:60:76:40:41:bd:3f:1b:ee:11:
41:8a:d3:ba:81:f1:71:0f:bf:f2:7b:97:8b:56:32:
6d:5d:61:a9:03:ae:24:0a:cb:04:93:c6:2f:2b:cd:
17:38:ca:bf:4a:da:1b:e3:e0:98:b0:9e:41:5e:09:
fd:4a:f7:8f:99:6c:d1:b1:5e:e1:d5:a2:63:ce:95:
6d:7f:34:dd:79:b5:75:d5:83:51:0f:db:5e:78:95:
ab:d2:44:46:d0:86:4b:76:c3:db:27:01:9f:ae:06:
2e:ea:fa:7d:9b:aa:5c:22:c9:0d:6d:94:af:57:d9:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:0C:01:82:85:D6:AA:AB:65:B5:C6:5A:80:42:84:DD:91:C2:C8
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/bioMAYKF1qqrZbXGWoBChN2Rwsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.178.0/23
IPv6:
2a01:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:e4:d0:30:97:b3:fa:0e:16:33:ce:90:8a:d9:92:03:4b:10:
8a:25:5e:7c:c3:d8:a5:dc:a8:ed:6f:d0:03:1e:b2:fe:fc:08:
7c:4b:d9:41:59:64:47:54:f1:8d:ad:33:8e:89:c6:f9:61:c9:
73:3c:38:18:1f:ab:26:43:c0:e0:81:80:36:fe:77:2e:2d:1c:
4c:a5:39:45:e8:1c:aa:b2:0d:54:a2:06:e0:77:54:63:59:9d:
10:fa:23:f0:08:ed:2c:6e:83:01:57:93:6b:bf:86:bc:ad:b7:
fe:1c:92:b3:27:e2:25:e8:a6:d0:12:d5:3b:3b:13:82:6d:19:
8e:cf:01:91:dc:c8:b3:40:80:43:b7:f9:a2:62:55:6e:e4:d4:
6b:11:96:b0:e7:cd:1b:f6:fa:d3:f8:6c:5e:70:1d:d4:01:f8:
e6:f5:ff:20:b3:07:f8:f6:ea:f8:80:ff:08:5b:de:d5:e9:61:
0d:3d:5b:5c:2d:0c:99:e4:30:08:67:cb:a5:0b:8f:02:4a:0f:
b0:dc:3f:cc:68:d9:55:63:ef:0a:b5:1b:25:c3:90:7f:bb:16:
03:e6:ab:e9:b3:95:6f:1e:a3:1e:92:b9:6e:b5:7c:89:31:3b:
c9:83:c0:f0:d7:53:0f:e2:52:b4:fe:56:b9:d2:96:10:ac:ef:
f1:2d:88:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZSyQ/hHPwXE3GS589T7RruyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjQwMDg0MTVjYTE4NWI4ZWRkZWRjMmRjZGQ4ZDA5NDQx
YTc3OTQwHhcNMjUwMTI5MTMzMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTJhMGMwMTgyODVkNmFhYWI2NWI1YzY1YTgwNDI4NGRkOTFjMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdS9oG8J7ECwgBLwviaIM54dRR/d
HIVUXW9lWyyXHr93/1OsJlYLvo65uJBmhYOxBpf7SkhokSJpddh3fF8/Z54K43nQ
YZo8h/B0s+GCWWAUYGQwXh1wpW2OQ5Mpnt8TsINFcGMUIonGAPXNZXbQ1sb+MANd
tq7IKNUw+ZbBiJbx6iUn7i+zAejO995gdkBBvT8b7hFBitO6gfFxD7/ye5eLVjJt
XWGpA64kCssEk8YvK80XOMq/Stob4+CYsJ5BXgn9SvePmWzRsV7h1aJjzpVtfzTd
ebV11YNRD9teeJWr0kRG0IZLdsPbJwGfrgYu6vp9m6pcIskNbZSvV9nTnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG4qDAGChdaqq2W1xlqAQoTdkcLIMB8GA1UdIwQY
MBaAFBkkAIQVyhhbjt3twtzdjQlEGneUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQt
N2E4MGVkNjIxNzgxLzEvYmlvTUFZS0YxcXFyWmJYR1dvQkNoTjJSd3NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85YmQwOTgtMzgyMC00N2NlLTg2NzQtN2E4MGVkNjIxNzgx
LzEvR1NRQWhCWEtHRnVPM2UzQzNOMk5DVVFhZDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuW6yMA0E
AgACMAcDBQMqAfjAMA0GCSqGSIb3DQEBCwUAA4IBAQBH5NAwl7P6DhYzzpCK2ZID
SxCKJV58w9il3Kjtb9ADHrL+/Ah8S9lBWWRHVPGNrTOOicb5YclzPDgYH6smQ8Dg
gYA2/ncuLRxMpTlF6Byqsg1Uogbgd1RjWZ0Q+iPwCO0sboMBV5Nrv4a8rbf+HJKz
J+Il6KbQEtU7OxOCbRmOzwGR3MizQIBDt/miYlVu5NRrEZaw580b9vrT+GxecB3U
Afjm9f8gswf49ur4gP8IW97V6WENPVtcLQyZ5DAIZ8ulC48CSg+w3D/MaNlVY+8K
tRslw5B/uxYD5qvps5VvHqMekrlutXyJMTvJg8Dw11MP4lK0/la50pYQrO/xLYjn
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:50 2025 by rpki-client