Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/BXSZYJBrkxCTId8MwQ-ZKF-lyaA.roa
File: BXSZYJBrkxCTId8MwQ-ZKF-lyaA.roa (raw, json)
Hash identifier: K/ehq7lqym6tZf2i4FjRalgaK0MPhMmRpzdIX0vLOk8=
Subject key identifier: 05:74:99:60:90:6B:93:10:93:21:DF:0C:C1:0F:99:28:5F:A5:C9:A0
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0194221F9714765155F19EA44BBB7269A5AF
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/BXSZYJBrkxCTId8MwQ-ZKF-lyaA.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 91.90.193.0/24 maxlen: 24
91.90.195.0/24 maxlen: 24
91.210.164.0/23 maxlen: 23
91.210.167.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
176.126.163.0/24 maxlen: 24
185.39.30.0/24 maxlen: 24
185.190.251.0/24 maxlen: 24
185.237.224.0/23 maxlen: 23
185.253.44.0/23 maxlen: 23
185.253.46.0/23 maxlen: 23
193.162.47.0/24 maxlen: 24
2a0a:8c41::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c44::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:97:14:76:51:55:f1:9e:a4:4b:bb:72:69:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05749960906b93109321df0cc10f99285fa5c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:23:4d:1c:fd:4f:73:43:96:6b:9d:ab:2c:
98:42:f0:5e:be:5a:82:5b:58:ac:38:05:e5:0c:7f:
b6:fa:aa:8a:2f:1f:21:70:21:6b:ae:3a:b9:51:e2:
3d:31:7b:49:34:92:0b:b8:b0:c2:79:50:08:dd:ae:
84:4c:5b:03:2d:ef:7c:ed:74:f8:9f:58:5c:50:5a:
ab:f1:6a:86:05:43:45:5e:23:bd:2c:03:f7:d0:55:
ea:98:0c:1b:3e:5c:01:97:7e:58:34:8d:39:78:00:
8e:88:bf:99:95:d6:ee:12:25:a1:52:2c:18:1c:2c:
51:d7:94:b3:3f:61:c8:5e:5e:fd:0b:c9:22:b3:52:
68:9e:ea:3c:22:24:34:24:17:77:02:fd:15:e9:a7:
0f:af:b7:90:a7:47:39:2f:a0:be:07:df:f0:06:c2:
55:83:d5:ec:4f:99:8a:50:ad:9c:39:b2:39:47:96:
19:b8:fe:db:31:c5:15:c8:25:46:e6:24:48:eb:f1:
96:de:db:7a:78:cc:ab:22:50:cb:11:85:71:3a:2c:
94:f3:27:a4:da:18:6a:26:68:46:9b:aa:3e:35:29:
a3:01:ce:f1:18:d8:66:d6:28:e0:06:74:d9:10:61:
4e:ca:32:14:0c:5d:b1:61:05:79:59:ad:51:36:f7:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:99:60:90:6B:93:10:93:21:DF:0C:C1:0F:99:28:5F:A5:C9:A0
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/BXSZYJBrkxCTId8MwQ-ZKF-lyaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.193.0/24
91.90.195.0/24
91.210.164.0/23
91.210.167.0/24
92.118.149.0-92.118.151.255
176.126.163.0/24
185.39.30.0/24
185.190.251.0/24
185.237.224.0/23
185.253.44.0/22
193.162.47.0/24
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
2a0a:8c47::/32
Signature Algorithm: sha256WithRSAEncryption
87:e7:6c:c1:a0:51:d6:e6:af:07:28:cd:da:31:de:b9:33:16:
c3:52:60:d0:39:de:62:62:75:1f:26:41:43:49:f6:1f:ef:9b:
83:40:e9:40:f4:ab:13:4f:a5:7d:e2:31:6c:ca:44:c1:4f:8d:
c5:d3:b8:9b:59:34:6d:66:f2:51:3a:43:c1:c5:8e:64:b6:bc:
37:29:15:fe:4c:a3:b6:02:e6:df:d2:49:8d:39:1e:1c:0b:0d:
29:f8:53:a7:e8:ff:47:fa:b0:97:f8:50:8e:43:ab:2e:a0:e4:
43:d0:3c:cc:2e:d6:15:dc:4c:54:59:e5:94:04:07:33:e5:c3:
68:f2:8a:89:71:f4:a4:1d:8b:ba:d7:9f:71:26:35:c2:4a:5e:
fb:15:97:46:b3:22:07:6c:6b:a0:d7:0d:b7:ad:fc:6f:b4:27:
06:93:7d:78:26:50:c0:33:7d:3f:e8:e3:f4:23:1c:a8:68:ba:
82:33:3c:de:dd:bd:9f:cd:45:ec:df:15:dd:e8:1c:7b:3a:fd:
c6:85:16:d7:e3:fb:ab:b3:04:b2:5b:c5:0e:d2:c6:5e:43:28:
91:4b:fb:57:1b:77:3a:34:5b:dd:20:0e:34:b8:20:cc:55:58:
ce:a7:a9:44:06:7a:7c:0b:e2:fc:ef:3b:fb:f5:82:41:40:b3:
ed:29:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:30 2025 by rpki-client