Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/CboN5GI28SiyUWI4MOyyBBarnSE.roa
File: CboN5GI28SiyUWI4MOyyBBarnSE.roa (raw, json)
Hash identifier: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=
Subject key identifier: 09:BA:0D:E4:62:36:F1:28:B2:51:62:38:30:EC:B2:04:16:AB:9D:21
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 019424457431804214A7AE251F8A300F5D45
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/CboN5GI28SiyUWI4MOyyBBarnSE.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29061
IP address blocks: 92.62.64.0/20 maxlen: 24
92.62.64.0/21 maxlen: 24
92.62.65.0/24 maxlen: 24
92.62.66.0/23 maxlen: 24
95.87.72.0/21 maxlen: 24
95.87.72.0/22 maxlen: 24
95.87.76.0/22 maxlen: 24
95.87.80.0/21 maxlen: 24
95.87.88.0/23 maxlen: 24
95.87.92.0/22 maxlen: 24
95.87.92.0/24 maxlen: 24
95.87.93.0/24 maxlen: 24
95.87.94.0/24 maxlen: 24
95.87.95.0/24 maxlen: 24
185.53.228.0/22 maxlen: 24
185.53.228.0/24 maxlen: 24
185.53.229.0/24 maxlen: 24
185.53.230.0/24 maxlen: 24
185.53.231.0/24 maxlen: 24
217.29.16.0/20 maxlen: 24
217.29.16.0/21 maxlen: 24
217.29.16.0/24 maxlen: 24
217.29.17.0/24 maxlen: 24
217.29.18.0/24 maxlen: 24
217.29.19.0/24 maxlen: 24
217.29.20.0/24 maxlen: 24
217.29.21.0/24 maxlen: 24
217.29.22.0/24 maxlen: 24
217.29.23.0/24 maxlen: 24
217.29.24.0/21 maxlen: 24
217.29.24.0/24 maxlen: 24
217.29.25.0/24 maxlen: 24
217.29.26.0/24 maxlen: 24
217.29.27.0/24 maxlen: 24
217.29.28.0/24 maxlen: 24
217.29.31.0/24 maxlen: 24
2a02:820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:74:31:80:42:14:a7:ae:25:1f:8a:30:0f:5d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ba0de46236f128b251623830ecb20416ab9d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:bf:fc:4d:c1:c4:bb:e4:a2:5a:1c:3a:2c:
a3:62:7f:0e:12:b0:5e:d7:c8:7b:14:2e:72:32:e7:
93:df:99:12:c2:58:4f:d8:b5:3e:bc:02:f7:22:72:
17:02:ab:70:d0:6e:d5:21:b2:48:6e:fe:bc:4b:d1:
12:2a:10:23:f8:ea:af:05:58:72:92:41:8a:17:26:
de:9c:a5:b5:a6:8b:50:95:5b:df:2f:0f:5d:02:b2:
5e:f6:7b:1b:80:74:68:ff:d1:a9:e8:20:e8:13:bf:
0e:6d:39:18:eb:0d:3a:19:1d:8b:fa:38:2e:64:7a:
ce:5f:7b:cc:d6:a2:ac:35:6a:48:f1:64:df:3b:83:
46:55:59:62:30:63:76:8f:c9:b4:02:6f:9c:c4:ba:
39:07:e7:02:0c:b8:26:02:e3:e8:b3:b7:92:20:ee:
a8:36:dc:3b:a0:bf:9b:b7:71:ed:17:0d:5b:f7:88:
13:c3:8e:50:ea:cb:f1:90:55:02:08:c9:f1:fd:1f:
66:69:5c:e6:36:04:30:54:3b:fe:42:3b:0b:23:96:
35:aa:89:d2:9e:80:7b:46:79:65:d5:83:64:00:1f:
25:b7:72:68:33:04:1a:70:1a:06:62:74:3f:75:20:
55:1b:68:80:a0:44:80:31:b6:d8:20:8f:ac:35:9c:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BA:0D:E4:62:36:F1:28:B2:51:62:38:30:EC:B2:04:16:AB:9D:21
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/CboN5GI28SiyUWI4MOyyBBarnSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.64.0/20
95.87.72.0-95.87.89.255
95.87.92.0/22
185.53.228.0/22
217.29.16.0/20
IPv6:
2a02:820::/32
Signature Algorithm: sha256WithRSAEncryption
a8:fd:f1:a8:72:de:d6:c7:5f:b2:09:7f:08:d4:0a:9a:01:4a:
69:fd:79:79:f7:91:6b:36:8d:b0:b3:96:a8:bd:17:f2:5d:e7:
82:0f:af:11:c0:d5:24:ee:68:42:19:01:e2:cd:74:3e:ec:6b:
72:45:63:db:b0:95:9f:1d:6f:11:8f:3a:7f:1a:36:0b:9e:46:
20:18:3f:83:05:7f:3f:12:20:62:40:03:61:af:5b:90:2d:20:
0e:c2:3a:d5:8c:62:5f:d3:bc:3e:a4:5d:4d:b4:b1:b2:31:bb:
ce:e5:90:22:0b:05:2c:f3:7c:04:f6:7e:2d:2f:4f:23:b2:d0:
46:51:56:5e:cd:48:2e:4b:4f:fa:d1:a3:18:56:b9:e7:61:10:
1b:81:43:8b:64:fa:bb:b2:92:be:75:c9:5f:22:15:14:1b:6a:
d1:94:f4:75:4d:c2:81:50:7a:8c:b9:4e:f1:87:3e:62:2e:31:
ee:3c:72:11:e5:bb:5c:bf:9b:26:e4:f7:8d:6a:10:b0:b2:52:
ca:db:77:4e:79:b9:78:d0:19:2f:60:c2:c2:3f:80:31:91:20:
3d:28:72:79:38:ca:ad:da:8e:cb:30:20:23:69:26:97:67:b5:
6a:b3:e4:22:47:00:6b:51:9b:b8:d0:6b:62:d3:d3:fc:d8:fc:
55:3d:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:23 2025 by rpki-client