Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/Bo0sjUUJ6SeO1YNejNLFCWV6usc.roa
File: Bo0sjUUJ6SeO1YNejNLFCWV6usc.roa (raw, json)
Hash identifier: EB5tj+ZFW3NAFusur6y5F0+I93TWvg5c3J6NJWtHAm4=
Subject key identifier: 06:8D:2C:8D:45:09:E9:27:8E:D5:83:5E:8C:D2:C5:09:65:7A:BA:C7
Certificate issuer: /CN=a6b85a06afde354535a1d82b985be27832d3df95
Certificate serial: 0ADF4A67
Authority key identifier: A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/Bo0sjUUJ6SeO1YNejNLFCWV6usc.roa
Signing time: Sat 01 Jan 2022 06:57:15 +0000
ROA not before: Sat 01 Jan 2022 06:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39651
IP address blocks: 83.248.0.0/13 maxlen: 13
85.194.0.0/18 maxlen: 18
193.150.192.0/18 maxlen: 18
178.218.152.0/22 maxlen: 22
80.216.0.0/15 maxlen: 15
213.200.128.0/18 maxlen: 18
151.177.0.0/16 maxlen: 16
213.89.0.0/16 maxlen: 16
2a04:ae00::/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182405735 (0xadf4a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b85a06afde354535a1d82b985be27832d3df95
Validity
Not Before: Jan 1 06:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068d2c8d4509e9278ed5835e8cd2c509657abac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:52:f9:cb:03:34:54:a7:30:69:c2:42:fe:
83:57:92:74:95:b5:73:e5:b6:a1:8a:fd:bb:a5:ac:
5f:5b:36:95:d3:cf:63:24:03:9b:a4:0d:b9:78:bb:
29:31:64:45:8e:95:09:09:6e:01:db:b5:6a:ba:4b:
1d:19:cc:8c:29:28:79:18:3e:79:4a:a4:f3:4f:cf:
dd:2f:50:4f:f5:2a:d0:e5:51:3a:8e:58:a6:a8:78:
fa:5f:d4:0f:6f:32:2e:d6:b9:fe:e4:83:77:65:ba:
0a:ea:1a:49:2f:4b:1a:9b:14:64:13:3f:e2:53:2e:
a1:f8:1c:26:52:4b:8c:50:1e:7b:e8:15:2d:d2:7e:
fc:36:96:1f:b4:37:68:54:9b:71:9e:78:74:48:60:
52:87:de:04:a6:c7:1a:a3:65:20:17:71:77:9f:5d:
4d:4f:e8:76:8a:a9:4d:63:03:4f:ae:31:9b:f4:0d:
89:a9:24:03:5d:9a:c0:28:a8:18:de:aa:30:f3:19:
84:8a:b3:9b:c8:52:14:0c:70:92:44:85:66:ae:66:
03:05:1c:a0:45:ba:40:8a:59:08:0c:14:3c:52:23:
11:21:27:b4:1c:09:50:df:08:fa:c3:c8:bc:7d:88:
e1:90:6f:4a:5a:6c:96:0e:10:47:e3:d3:10:58:88:
38:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:2C:8D:45:09:E9:27:8E:D5:83:5E:8C:D2:C5:09:65:7A:BA:C7
X509v3 Authority Key Identifier:
keyid:A6:B8:5A:06:AF:DE:35:45:35:A1:D8:2B:98:5B:E2:78:32:D3:DF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prhaBq_eNUU1odgrmFvieDLT35U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/Bo0sjUUJ6SeO1YNejNLFCWV6usc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/605113-38b9-418e-b146-63548c3b59cc/1/prhaBq_eNUU1odgrmFvieDLT35U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.216.0.0/15
83.248.0.0/13
85.194.0.0/18
151.177.0.0/16
178.218.152.0/22
193.150.192.0/18
213.89.0.0/16
213.200.128.0/18
IPv6:
2a04:ae00::/26
Signature Algorithm: sha256WithRSAEncryption
73:de:3a:3d:4c:76:5a:3c:f1:fe:72:20:72:a6:a7:82:46:37:
f9:f4:dc:45:c3:9e:5d:f1:3b:b4:e2:1d:c3:4d:a6:30:a8:1b:
e3:29:54:7f:0d:75:ca:76:f1:34:1e:c9:85:1a:40:35:9c:9f:
6e:e7:d5:70:a0:a3:f6:91:16:e0:76:5e:63:fd:09:73:ca:1c:
4e:8f:91:40:e3:2a:6b:65:81:82:d9:c6:d9:c5:6c:90:94:20:
39:df:87:b9:05:90:93:93:ae:84:47:56:ed:dc:59:6b:74:a7:
95:c4:e4:2e:5e:02:8d:8d:33:19:88:93:1c:42:3b:52:f1:cc:
51:22:3e:25:45:25:39:15:7b:18:3f:64:0b:5c:57:fb:89:81:
3d:f2:cd:67:88:29:fa:00:d7:74:7f:9c:75:b1:52:15:3b:b0:
41:95:c6:a4:a4:9d:cc:ff:3f:c2:22:8c:a7:37:0e:4c:c5:25:
c2:2e:df:e1:5b:e2:ce:9f:2a:55:8c:e7:2e:7c:a6:80:24:f3:
de:3c:41:51:81:8d:c1:cc:ae:1c:f0:0b:ff:9d:04:f7:e2:a1:
be:b7:1c:79:1c:0e:34:17:93:d4:f0:da:e1:42:e4:b0:dd:54:
b7:2c:74:74:c1:4b:b9:9c:7a:4e:3b:d5:0c:81:86:4a:28:75:
ff:e3:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:45 2025 by rpki-client