Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa
File: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (raw, json)
Hash identifier: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=
Subject key identifier: 4B:A6:F3:1F:7B:D1:FB:DF:D9:F1:6D:FB:17:16:C6:63:F6:EC:49:12
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 019444ABD4158D0058FF683E4DDBBB7BDE6A
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa
Signing time: Wed 08 Jan 2025 06:48:19 +0000
ROA not before: Wed 08 Jan 2025 06:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20634
IP address blocks: 91.207.134.0/23 maxlen: 23
195.234.0.0/23 maxlen: 23
195.234.0.0/24 maxlen: 24
195.234.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:ab:d4:15:8d:00:58:ff:68:3e:4d:db:bb:7b:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 8 06:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba6f31f7bd1fbdfd9f16dfb1716c663f6ec4912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:36:19:08:57:79:ab:ff:22:fe:9a:34:79:
73:2f:e8:ec:69:cd:fb:ea:17:4a:bc:f6:a5:e5:db:
9d:c4:f2:88:e3:20:16:b0:44:b2:16:b2:1f:50:c6:
97:0b:2c:a2:9d:86:94:47:d1:2d:10:27:d3:ee:9b:
68:b8:05:95:e3:c0:83:e8:b6:da:1c:31:f0:55:08:
6a:6d:86:92:7e:51:ef:b0:6c:53:db:7f:9b:62:75:
4d:a6:db:68:6c:bb:69:6a:43:41:2b:d2:d0:5e:d5:
8f:f6:18:ff:90:6a:3b:27:c6:ee:76:33:ac:29:0c:
9d:e4:4a:92:54:ca:7d:28:36:9f:f6:f4:23:8d:1e:
d5:07:56:7e:c5:61:8a:bb:e6:be:45:9a:80:79:cb:
70:88:c4:5a:14:20:74:2f:8c:15:0a:b0:d5:76:11:
9b:68:d3:f2:b6:02:b4:0f:1e:9c:4f:4a:2e:64:ad:
ce:a4:0e:4c:3d:81:be:47:41:25:f2:3f:79:a0:1e:
bf:6e:43:a0:d9:c2:aa:93:65:51:07:db:4f:d1:4c:
3a:1f:7e:0f:39:c3:aa:95:2b:b4:7b:a5:f8:56:35:
ea:a4:4c:cb:96:64:a3:cc:35:c9:43:76:65:6b:f3:
d9:0a:c2:45:35:f3:07:b1:56:9c:06:cb:9d:5d:08:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:F3:1F:7B:D1:FB:DF:D9:F1:6D:FB:17:16:C6:63:F6:EC:49:12
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.134.0/23
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
32:50:65:1d:1a:44:9c:9b:ba:cc:04:86:c5:33:0a:db:dd:b2:
f7:22:4e:2b:28:07:aa:2c:ec:d0:42:a7:cc:10:72:3e:22:0f:
4c:23:70:4d:47:eb:4f:24:2c:b7:64:9d:a9:f5:d1:22:43:93:
f9:12:90:a6:ae:58:0b:4e:d1:70:79:1a:ea:39:e4:c0:8a:10:
f0:98:5f:bf:af:f2:0e:4d:7a:56:c8:32:fb:cb:c7:bf:5d:31:
1b:13:7b:4d:ed:60:e8:c8:10:72:b6:44:dc:58:03:09:32:70:
d2:ae:0e:ab:af:e7:ac:1e:d6:f7:23:e0:ed:15:43:fa:11:75:
d2:d7:11:3f:18:5f:e5:87:31:b2:9d:cf:79:d7:87:94:62:a6:
66:1d:21:21:8a:6a:fe:de:38:ae:f0:0f:5f:91:2c:ee:23:74:
11:fd:37:cb:2c:8e:68:76:3a:ad:be:fc:03:a5:0b:c4:77:89:
c5:6e:72:81:8f:05:ae:af:3e:d3:ee:85:cf:31:3a:ef:8a:af:
46:54:7e:e7:43:d5:4e:45:fb:81:99:c8:9a:a3:43:8f:31:3c:
bb:72:27:ef:b4:da:c9:82:5f:0d:40:44:9e:69:f1:92:aa:db:
db:0a:2a:09:ce:0a:b0:5b:a9:04:55:0a:d9:ef:25:d5:e2:a6:
6c:ae:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:37 2025 by rpki-client