Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/Bq43MW6bqq2vM6N_DNsfJJero4c.roa
File: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (raw, json)
Hash identifier: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=
Subject key identifier: 06:AE:37:31:6E:9B:AA:AD:AF:33:A3:7F:0C:DB:1F:24:97:AB:A3:87
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019422FB84C9B2B749A93C854B0429779740
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/Bq43MW6bqq2vM6N_DNsfJJero4c.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213122
IP address blocks: 5.252.165.0/24 maxlen: 24
5.252.166.0/24 maxlen: 24
5.252.167.0/24 maxlen: 24
31.216.59.0/24 maxlen: 24
45.87.60.0/24 maxlen: 24
45.87.61.0/24 maxlen: 24
45.87.62.0/24 maxlen: 24
45.87.63.0/24 maxlen: 24
45.130.152.0/24 maxlen: 24
45.130.153.0/24 maxlen: 24
45.130.154.0/24 maxlen: 24
45.130.155.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.145.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
89.36.230.0/24 maxlen: 24
89.37.100.0/24 maxlen: 24
89.46.43.0/24 maxlen: 24
103.104.248.0/24 maxlen: 24
103.104.249.0/24 maxlen: 24
103.104.250.0/24 maxlen: 24
103.104.251.0/24 maxlen: 24
103.202.52.0/24 maxlen: 24
103.202.53.0/24 maxlen: 24
103.202.54.0/24 maxlen: 24
103.202.55.0/24 maxlen: 24
185.162.74.0/24 maxlen: 24
185.162.75.0/24 maxlen: 24
188.210.236.0/24 maxlen: 24
194.49.68.0/24 maxlen: 24
194.49.69.0/24 maxlen: 24
194.49.78.0/24 maxlen: 24
194.49.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:84:c9:b2:b7:49:a9:3c:85:4b:04:29:77:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06ae37316e9baaadaf33a37f0cdb1f2497aba387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:85:e8:f1:82:ce:c1:ab:30:83:74:20:f3:
ac:31:ce:87:05:83:a3:17:13:f7:4e:dc:5b:03:5c:
4b:80:7d:9c:71:3a:f1:ca:13:de:4b:0a:9c:94:e8:
68:6c:0b:20:5b:aa:19:ac:a3:19:1e:74:c5:a4:4e:
5f:bc:0b:cb:41:50:00:06:56:f3:50:6e:37:c1:a7:
62:92:69:63:b3:6c:7d:a7:63:3b:19:75:a4:1a:f8:
10:f0:6a:4b:26:5b:20:fe:4d:f6:a4:5d:a6:31:9c:
4c:c4:6b:86:fc:f0:a1:04:91:e0:b2:50:e4:9f:77:
4a:54:f5:a3:7b:c0:ee:9b:2f:18:ea:97:71:37:69:
29:a4:05:37:51:ba:9c:2a:d1:4e:14:18:aa:f6:fa:
cf:aa:53:1a:37:68:ae:1b:66:53:b4:b0:06:d1:58:
1f:14:a1:08:f0:52:f8:78:a4:19:f0:9b:ce:56:e3:
f9:a2:cb:ff:6d:49:5b:8b:90:61:12:cb:1b:3b:64:
a3:92:0c:1c:e7:3e:d0:d5:70:3a:42:8f:81:1f:c0:
5d:5c:f7:78:db:dc:3d:08:14:e3:00:8a:35:5a:5f:
30:39:d6:36:ea:56:9c:e3:c6:5b:11:97:6b:01:cc:
89:e8:99:20:29:84:ee:3d:0c:82:9f:ff:d0:ae:bb:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:37:31:6E:9B:AA:AD:AF:33:A3:7F:0C:DB:1F:24:97:AB:A3:87
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/Bq43MW6bqq2vM6N_DNsfJJero4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.165.0-5.252.167.255
31.216.59.0/24
45.87.60.0/22
45.130.152.0/22
45.143.144.0/22
89.36.230.0/24
89.37.100.0/24
89.46.43.0/24
103.104.248.0/22
103.202.52.0/22
185.162.74.0/23
188.210.236.0/24
194.49.68.0/23
194.49.78.0/23
Signature Algorithm: sha256WithRSAEncryption
64:24:ee:85:51:28:ac:6a:f8:c5:c8:1e:14:f1:d5:d4:ab:b8:
09:53:7e:39:5a:30:e0:cb:b6:ee:d4:e8:9f:32:03:50:27:ed:
86:2d:ac:fd:34:76:9f:f0:9c:e7:cf:bb:6f:8b:4a:e7:82:6a:
d7:0a:8b:c5:82:0d:a3:ad:10:c4:5f:93:67:34:6c:39:63:b3:
8b:da:85:b9:7d:1b:7c:10:70:04:ca:ed:b2:5a:17:ed:ff:50:
cd:f7:f9:63:5f:96:34:a0:63:25:2f:08:da:a0:da:33:36:76:
ac:57:06:25:b4:9e:ee:d4:b0:2d:0c:70:cf:09:a8:ac:0c:1d:
45:cd:3b:68:a1:70:77:d6:34:4d:6d:6f:98:44:24:7a:47:78:
b2:46:c4:f1:36:5c:ec:cc:05:18:b5:69:11:f6:a6:4c:e5:73:
5c:24:3b:8a:cf:63:67:82:34:21:5c:c3:c1:e2:0f:ab:8c:28:
48:ee:de:f0:92:cb:d4:4c:a4:84:07:c7:70:8e:bd:95:19:fc:
54:a1:f3:f5:34:be:13:aa:92:0b:c4:ad:4c:5c:ad:b3:fd:2e:
df:be:ba:8a:4d:f2:3c:b0:86:85:fb:2d:d6:ce:22:87:bf:2e:
6e:ba:cb:ce:11:5a:a0:0c:bf:5e:b0:a5:1b:30:be:22:d5:73:
83:cf:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:22 2025 by rpki-client