Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa
File: B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa (raw, json)
Hash identifier: gyaIKII6sdza0Xvl0rqRN4WgM4TU/WIjbt0SjsyjCnk=
Subject key identifier: 07:AC:3F:06:9B:9C:EB:FC:F9:E6:B3:65:84:F9:8E:D5:8B:8B:0B:3A
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 019427B4F0150FA1DBE0A33AE9EBF5CDD1F4
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa
Signing time: Thu 02 Jan 2025 15:49:16 +0000
ROA not before: Thu 02 Jan 2025 15:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212650
IP address blocks: 92.61.168.0/21 maxlen: 24
92.61.172.0/22 maxlen: 24
185.190.88.0/24 maxlen: 24
2a10:6540::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f0:15:0f:a1:db:e0:a3:3a:e9:eb:f5:cd:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Jan 2 15:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ac3f069b9cebfcf9e6b36584f98ed58b8b0b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:5d:9e:0f:b9:83:b7:b3:ca:63:f5:4a:5f:
fe:25:83:7d:f6:ba:21:5c:8b:1c:97:f3:58:c7:c5:
5f:26:68:4d:12:63:63:00:49:a7:6b:00:73:d8:b4:
bb:55:b3:7c:36:96:fd:6b:b5:09:b2:e7:be:9e:e6:
76:94:3a:97:4e:d9:6a:7f:a1:e7:da:1d:e7:81:be:
ff:c7:98:99:aa:bf:af:d5:8f:3d:8c:47:69:e8:7c:
6b:5c:80:a1:23:e3:77:1c:65:f4:3f:cf:04:cc:81:
5b:9d:20:94:d1:ec:81:cc:f6:aa:c7:65:e2:05:e5:
57:53:32:5c:27:7e:c1:b6:70:9d:38:72:bb:1e:d0:
c2:19:bf:44:8d:12:d2:7e:d1:28:92:44:68:ec:06:
76:2e:15:72:ff:74:62:b4:f2:e5:c8:59:7d:a0:ad:
4b:9c:83:65:64:f8:9c:f8:a2:67:01:9d:67:b6:70:
c5:26:62:1f:82:1e:08:70:48:8e:5f:68:8e:67:f1:
d6:b5:a1:e6:37:92:9e:36:7d:c5:10:8b:a2:1e:49:
a9:78:85:6f:0d:70:f5:0e:19:09:d3:cc:14:09:50:
e1:95:35:84:6f:ca:c3:e4:c3:0e:41:cc:0c:41:3a:
66:d8:81:b5:e5:af:04:0b:3f:0c:cf:dd:68:f0:99:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:3F:06:9B:9C:EB:FC:F9:E6:B3:65:84:F9:8E:D5:8B:8B:0B:3A
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/B6w_Bpuc6_z55rNlhPmO1YuLCzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
27:04:1d:a1:96:2e:76:b1:13:70:ec:94:74:63:41:1b:98:dd:
f8:17:04:62:8b:74:47:ac:53:9f:e8:19:df:7a:03:f4:14:5b:
7b:8f:54:81:2e:41:d7:7a:c9:cc:1c:4b:95:63:06:ac:2c:a0:
1a:65:24:d2:c6:65:79:f5:f5:cf:87:a8:6d:4a:72:c1:d2:e3:
73:44:f5:ef:66:bc:fa:58:0b:c8:49:75:88:46:68:9a:93:02:
23:d7:42:5a:18:e6:01:ad:a5:4d:c7:b0:86:fa:c4:99:fe:0a:
d2:f2:48:ca:b8:cf:03:b4:ca:15:07:2f:1c:b6:45:84:3c:94:
fc:aa:b5:c8:7a:f6:c6:b4:24:81:99:70:ce:0f:ea:2e:ec:3a:
48:d7:5c:4e:90:17:2f:f1:cc:38:02:84:41:b1:60:7a:f5:6e:
98:97:4d:54:c0:e2:f9:5e:2f:53:b6:6f:f3:6e:16:61:30:8c:
dc:7d:0d:5f:8e:86:91:46:fc:21:0f:1b:08:37:49:4c:2b:c7:
e3:58:e2:26:64:31:cd:24:8b:c2:5a:69:d3:c9:09:13:ae:55:
d4:c8:36:bc:a0:16:df:13:9e:fe:b3:b7:e4:6f:63:04:b5:ed:
da:21:e6:18:ab:bf:5a:b5:fb:99:dc:f8:c3:8d:f3:ab:d4:13:
53:4d:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:11:59 2025 by rpki-client