Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/BNeEiOHUayJyXpi2tC5Obe2jOeM.roa
File: BNeEiOHUayJyXpi2tC5Obe2jOeM.roa (raw, json)
Hash identifier: //+2wwG79w7O2rl4ZQX9lACwFuh8K2Z0F2p06BP/oFE=
Subject key identifier: 04:D7:84:88:E1:D4:6B:22:72:5E:98:B6:B4:2E:4E:6D:ED:A3:39:E3
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 0187E0AB6F1D2249225C4CDDEB85CD9EDBF8
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/BNeEiOHUayJyXpi2tC5Obe2jOeM.roa
Signing time: Wed 03 May 2023 08:12:24 +0000
ROA not before: Wed 03 May 2023 08:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20910
IP address blocks: 89.191.96.0/19 maxlen: 32
91.188.32.0/19 maxlen: 32
85.115.96.0/19 maxlen: 32
79.132.64.0/19 maxlen: 32
93.177.192.0/18 maxlen: 32
62.84.0.0/19 maxlen: 32
185.144.184.0/22 maxlen: 32
188.112.128.0/18 maxlen: 32
77.38.128.0/17 maxlen: 32
89.18.192.0/19 maxlen: 32
195.244.128.0/20 maxlen: 32
91.123.64.0/20 maxlen: 32
62.205.192.0/18 maxlen: 18
87.226.0.0/17 maxlen: 32
217.198.224.0/20 maxlen: 32
213.180.96.0/19 maxlen: 32
195.62.128.0/19 maxlen: 32
94.30.128.0/17 maxlen: 32
217.199.96.0/19 maxlen: 32
217.24.64.0/20 maxlen: 32
79.135.128.0/19 maxlen: 32
37.148.168.0/21 maxlen: 32
80.254.208.0/20 maxlen: 32
85.234.160.0/19 maxlen: 32
109.110.0.0/19 maxlen: 32
91.142.0.0/20 maxlen: 32
136.169.0.0/17 maxlen: 17
89.201.0.0/17 maxlen: 32
2a00:f4a0::/29 maxlen: 29
2a00:9000::/29 maxlen: 32
2a03:6740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:ab:6f:1d:22:49:22:5c:4c:dd:eb:85:cd:9e:db:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: May 3 08:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04d78488e1d46b22725e98b6b42e4e6deda339e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:22:5b:28:9f:57:90:d2:b6:f2:95:11:e5:
87:15:af:81:75:4d:58:54:ff:50:c0:ac:cc:94:90:
0e:59:69:5f:82:3e:b5:cd:53:e3:a3:b6:af:74:d2:
25:de:48:d2:db:8e:43:23:a2:8e:5f:c3:4b:0b:bf:
90:10:98:cf:c4:c5:af:34:35:f6:ff:53:27:c4:c7:
34:b9:59:af:3a:cc:8b:32:51:58:f3:f8:5d:ee:10:
25:96:64:ec:79:09:98:53:ac:da:b2:76:ce:e9:c8:
b3:9f:60:fd:e1:fe:1c:fa:da:5a:ad:f9:c3:4f:8c:
9c:ff:5f:fb:69:6b:b8:37:9c:40:55:90:31:40:47:
a2:04:85:87:10:04:50:49:c2:31:ab:f2:4c:4d:47:
6c:5f:84:06:32:98:59:a6:c1:b2:2f:42:48:7c:25:
a9:e3:82:c2:0d:e0:50:0c:a6:32:17:5b:03:dd:ea:
20:ea:73:60:a9:40:cc:b7:9d:e3:f1:09:51:c4:f1:
16:53:69:3d:0a:7e:c8:7c:a4:dd:a6:36:b8:62:7e:
52:d2:54:5a:d4:7d:c1:63:8c:35:ce:e2:ae:d1:f3:
08:8c:39:70:47:57:ba:72:eb:d5:e3:cd:2e:a7:64:
85:ff:89:66:12:e3:e2:fd:eb:6f:9a:9f:f2:42:44:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:84:88:E1:D4:6B:22:72:5E:98:B6:B4:2E:4E:6D:ED:A3:39:E3
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/BNeEiOHUayJyXpi2tC5Obe2jOeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.168.0/21
62.84.0.0/19
62.205.192.0/18
77.38.128.0/17
79.132.64.0/19
79.135.128.0/19
80.254.208.0/20
85.115.96.0/19
85.234.160.0/19
87.226.0.0/17
89.18.192.0/19
89.191.96.0/19
89.201.0.0/17
91.123.64.0/20
91.142.0.0/20
91.188.32.0/19
93.177.192.0/18
94.30.128.0/17
109.110.0.0/19
136.169.0.0/17
185.144.184.0/22
188.112.128.0/18
195.62.128.0/19
195.244.128.0/20
213.180.96.0/19
217.24.64.0/20
217.198.224.0/20
217.199.96.0/19
IPv6:
2a00:9000::/29
2a00:f4a0::/29
2a03:6740::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4f:30:d9:60:e9:53:3e:2b:0e:74:42:5e:42:52:c2:81:9b:
b5:32:c2:ba:fb:73:1f:f6:33:ed:01:03:e5:2a:51:a2:5c:84:
dd:91:f3:6d:ed:a2:0e:4b:f4:b0:65:29:78:c3:bc:b1:b9:4e:
a2:93:31:ca:c1:50:87:98:cb:e2:9f:a0:62:be:cc:a4:71:84:
17:13:6e:0f:41:3b:6a:71:e8:59:b8:50:18:b0:11:27:b1:be:
94:70:f2:71:2b:db:51:f1:27:17:65:90:54:7e:a3:7e:1b:95:
2b:56:a6:aa:31:e4:b3:47:40:f7:85:9a:0a:7f:14:c1:88:3e:
e9:56:41:21:1e:fd:69:ff:c9:3c:92:d9:ab:02:39:d6:7a:f5:
ec:ba:a5:f2:ab:ae:15:ce:81:95:f8:a8:7b:83:02:28:67:42:
eb:aa:8b:69:76:a3:6b:4a:78:4a:f2:7c:35:44:78:d1:91:e3:
d0:19:6a:5b:48:2f:ae:d4:fc:1a:d7:8b:2e:67:0d:59:25:73:
9d:ef:d3:81:79:e4:3b:57:23:c0:fd:e6:05:9b:52:1f:a3:ca:
a1:5b:8a:b0:22:7c:c8:2d:c5:2e:fe:b4:b0:a4:4b:96:6d:9d:
85:77:b1:b4:f9:96:e1:a6:4a:71:18:87:c0:62:aa:b7:ba:cd:
02:f7:89:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:18 2025 by rpki-client