Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/biOeaqt66YofWg0mow6Jxv3K8ws.roa
File: biOeaqt66YofWg0mow6Jxv3K8ws.roa (raw, json)
Hash identifier: A9jSEM5NSD5Y33BMqtpHf1stxyQb0Q2EUqbmDHGD+4E=
Subject key identifier: 6E:23:9E:6A:AB:7A:E9:8A:1F:5A:0D:26:A3:0E:89:C6:FD:CA:F3:0B
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019470F6719D04A5A8913093BAD6888C9C48
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/biOeaqt66YofWg0mow6Jxv3K8ws.roa
Signing time: Thu 16 Jan 2025 21:13:06 +0000
ROA not before: Thu 16 Jan 2025 21:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 86.106.80.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:f6:71:9d:04:a5:a8:91:30:93:ba:d6:88:8c:9c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 16 21:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e239e6aab7ae98a1f5a0d26a30e89c6fdcaf30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:78:de:24:12:b8:ac:a4:4e:64:db:3e:2c:
ae:e4:c0:81:9b:d6:4f:58:8c:f5:d1:17:df:f2:1f:
61:90:65:cb:25:eb:9c:7d:22:eb:ef:e7:7f:56:a6:
56:cc:1c:c2:34:e1:06:3f:df:c5:a8:80:d3:b7:04:
03:bd:93:31:46:53:58:93:da:23:9f:b6:f7:bb:13:
53:56:e1:4f:ef:a1:fa:d5:ad:1f:41:8c:55:42:85:
cd:31:ee:4e:d1:ba:43:6a:5e:2c:f9:ce:4d:d2:0e:
91:fa:75:e6:17:22:9d:fe:ae:97:9f:a9:c3:30:8b:
ce:af:37:9e:ec:c9:af:4e:62:f7:4f:e4:d2:45:f6:
b3:0a:d2:1a:10:4b:70:84:b3:f4:d5:c8:05:23:83:
50:d0:d0:0d:9a:20:a6:5a:07:2a:2a:fa:23:ee:c2:
57:c9:ba:fe:e6:c5:a3:57:f8:27:59:4c:3c:bc:f1:
6e:fe:9f:c9:54:83:f0:54:73:85:05:5a:92:e9:02:
8c:b4:2c:fd:9e:9c:84:7d:21:04:09:22:7c:32:14:
a4:48:80:f6:d7:fb:44:09:0c:04:99:d7:b2:e5:c7:
ae:6c:eb:a3:b3:fc:1a:c3:13:61:90:02:0f:97:cf:
9d:5f:80:a0:d4:91:a3:45:0e:f6:91:c5:2f:4e:86:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:9E:6A:AB:7A:E9:8A:1F:5A:0D:26:A3:0E:89:C6:FD:CA:F3:0B
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/biOeaqt66YofWg0mow6Jxv3K8ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.80.0/24
89.45.34.0/24
93.114.187.0/24
188.215.72.0/24
188.215.95.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:b0:67:3b:80:62:87:2b:d8:73:1a:98:86:4d:d6:47:5e:26:
01:5c:e7:73:f4:6a:f4:7f:13:78:f3:9b:bb:87:ba:16:ca:d4:
52:7a:22:ad:b2:ae:80:9b:0f:ee:5d:3d:b2:1f:e5:d7:4c:59:
86:fb:ef:1b:7a:48:75:14:5b:4f:b6:56:c6:48:0e:83:d5:84:
91:04:9a:83:88:21:e8:6a:4f:4f:40:b3:81:73:f0:54:aa:d1:
94:ec:96:2c:1b:82:42:60:5b:cb:f7:df:aa:a0:06:cb:78:77:
17:20:85:3e:f9:43:11:ef:8e:34:12:2b:54:bc:28:ef:e3:27:
ed:79:9b:0a:e1:c1:fe:26:26:69:79:25:b1:95:9a:90:c2:83:
8f:fa:c0:21:3d:4e:7f:df:3b:a5:13:67:cd:d5:11:7c:d8:05:
91:c7:9e:84:11:7c:df:d0:28:66:e6:e4:56:db:f7:b3:97:11:
17:a1:1c:81:6a:65:6a:96:cd:b1:cd:1e:c3:9e:44:dc:55:7e:
e8:91:77:a2:cb:36:10:5f:d2:34:12:3d:da:a5:78:34:e9:ca:
68:5f:0d:a1:1c:57:bd:1e:1a:71:f0:b1:fd:f4:4d:4a:64:fb:
50:23:01:03:1c:1d:2f:f0:36:a9:83:cf:9d:21:6f:e1:8f:b8:
55:9e:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:06:29 2025 by rpki-client