Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/nI_8YGf_KIt8612GRNYpw062gLo.roa
File: nI_8YGf_KIt8612GRNYpw062gLo.roa (raw, json)
Hash identifier: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=
Subject key identifier: 9C:8F:FC:60:67:FF:28:8B:7C:EB:5D:86:44:D6:29:C3:4E:B6:80:BA
Certificate issuer: /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial: 019420683B7043F370E112664AD6B4AEE09F
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/nI_8YGf_KIt8612GRNYpw062gLo.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204403
IP address blocks: 185.250.16.0/22 maxlen: 24
2a0b:c700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3b:70:43:f3:70:e1:12:66:4a:d6:b4:ae:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8ffc6067ff288b7ceb5d8644d629c34eb680ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:88:56:a9:28:b7:34:59:ee:0b:ee:48:17:
cc:24:1b:1a:5f:4b:cc:5c:ff:85:eb:81:27:c2:25:
c4:91:f2:87:05:c4:7d:bc:1f:34:c1:6d:a6:41:36:
2e:17:58:e2:b5:bb:ff:58:77:37:3e:ab:9c:c4:33:
06:88:34:2b:d6:c8:4c:13:e4:9d:af:f7:70:50:22:
a3:4e:8e:00:8f:58:15:05:fe:bf:1e:b0:4a:7f:9c:
2b:c5:31:c2:d0:0b:a6:00:ef:19:9a:65:a3:83:23:
b5:e6:04:8e:74:9d:e0:0d:e5:1b:81:86:4d:62:d5:
f0:ea:7b:7b:3b:cf:58:29:07:9e:67:ed:8b:93:de:
24:a4:3e:47:4c:31:1c:d0:ce:d5:80:2f:3d:c9:09:
b0:3f:45:7e:78:11:33:25:b5:99:64:11:0a:1c:bd:
f3:05:4d:2b:22:8d:71:d1:2f:29:ed:0d:2f:54:1f:
f6:e7:56:a7:44:24:0f:20:77:ab:a4:16:75:05:27:
01:93:c9:11:38:6b:a5:96:a0:2f:61:60:ac:05:72:
c0:b9:53:9a:81:e1:c1:c2:a3:22:b2:e3:da:4a:ff:
eb:fb:f2:d4:94:fc:4c:9d:c3:2f:30:b3:6e:43:12:
c9:85:94:55:ff:ed:7a:87:34:f2:e3:93:42:86:26:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:FC:60:67:FF:28:8B:7C:EB:5D:86:44:D6:29:C3:4E:B6:80:BA
X509v3 Authority Key Identifier:
keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/nI_8YGf_KIt8612GRNYpw062gLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.16.0/22
IPv6:
2a0b:c700::/29
Signature Algorithm: sha256WithRSAEncryption
0e:c5:ce:ef:0c:78:c4:ee:ad:85:6e:68:6d:90:e3:9d:cb:bb:
d6:34:58:9b:b1:25:f9:98:cc:a0:5b:26:e3:d4:00:2a:d8:ef:
ff:37:1a:b4:d7:f1:aa:83:89:2e:ad:39:c8:77:b5:5b:74:34:
70:43:41:7d:23:55:6b:23:d2:8d:86:ef:95:05:02:ba:ae:97:
b3:7d:2a:4d:0e:47:4c:a4:f7:5e:46:b4:fd:a4:48:75:06:47:
37:21:a4:0b:96:8d:c9:59:0e:57:2b:33:83:f3:9b:74:40:e2:
ec:b3:4d:59:c9:9c:ac:b2:d0:40:6e:54:aa:c6:04:27:7b:37:
e7:74:5e:a5:12:23:6f:f5:15:ff:61:ff:b8:62:bd:8a:65:69:
54:45:72:f2:e6:29:69:a8:46:9e:3d:37:72:a2:c5:ff:8d:e0:
e3:d6:55:6b:14:8d:08:18:21:f5:7e:5a:40:39:bd:65:af:79:
3d:3f:a1:88:0b:00:95:a5:f2:8e:08:f2:b0:e4:ca:c2:2a:0b:
4c:47:1f:10:5f:94:bd:71:73:0e:84:59:11:ef:d5:d4:a2:9e:
c7:d9:db:8e:c4:c4:76:1e:df:12:43:26:7f:53:67:13:b1:b0:
b8:49:b2:9e:e2:9e:79:72:80:5e:f8:74:24:c4:4e:98:b9:57:
22:52:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:50 2025 by rpki-client