Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/biONEImAMQXdwbKKfVysPSKHchs.roa
File: biONEImAMQXdwbKKfVysPSKHchs.roa (raw, json)
Hash identifier: GCFnR2JKebUws9G9+DChE/qMKCwI0HWgzhNFTmx5bU8=
Subject key identifier: 6E:23:8D:10:89:80:31:05:DD:C1:B2:8A:7D:5C:AC:3D:22:87:72:1B
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 01877AFF429198B3C0B3776C8400899E73E0
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/biONEImAMQXdwbKKfVysPSKHchs.roa
Signing time: Thu 13 Apr 2023 14:22:41 +0000
ROA not before: Thu 13 Apr 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 185.250.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:ff:42:91:98:b3:c0:b3:77:6c:84:00:89:9e:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: Apr 13 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e238d1089803105ddc1b28a7d5cac3d2287721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:6c:9b:09:13:f4:70:73:cc:cc:b0:f8:af:
19:e0:e1:21:f2:0b:86:e8:cd:fa:9e:0a:11:73:4d:
0f:8e:57:8c:6e:34:fb:19:75:97:85:cb:b2:cb:03:
3d:5f:ad:1a:a7:e3:4b:f3:12:11:26:94:2b:28:64:
4a:7b:64:fb:ef:88:ba:c9:03:62:af:d1:c0:f4:16:
81:f3:d7:07:22:e1:a2:4d:99:f8:0b:d3:06:91:bf:
02:56:c0:64:43:a6:cd:cf:7b:1e:34:a0:75:86:2f:
65:23:f9:30:e1:37:bf:75:75:7d:78:12:3c:b1:86:
02:60:57:06:34:ac:fe:dd:4b:2f:09:e0:8f:32:18:
2e:d8:7e:4e:95:de:59:b9:55:cd:fd:e8:4b:45:da:
71:37:ae:80:85:78:7f:30:e6:dd:be:bb:9f:71:c8:
14:a7:36:13:61:11:7c:35:4a:5b:d7:c5:c5:a5:e7:
30:ce:c5:ac:ca:2f:44:12:65:f7:05:45:aa:92:92:
a2:c4:70:8a:46:98:12:d1:97:82:74:be:8a:c4:ed:
8a:71:08:90:43:5e:c4:90:2c:4f:7a:cf:8a:21:38:
60:ea:24:85:ff:ab:88:ad:ac:5d:79:df:ed:7c:61:
04:dc:3c:a4:a7:0e:4b:4b:21:0a:f0:45:d7:27:7c:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:8D:10:89:80:31:05:DD:C1:B2:8A:7D:5C:AC:3D:22:87:72:1B
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/biONEImAMQXdwbKKfVysPSKHchs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:7a:eb:95:f2:f2:f1:58:5e:d4:c4:66:95:68:3a:0f:13:76:
a5:fd:ee:13:ab:32:00:15:d7:86:12:7f:bb:ea:86:69:a9:6c:
62:64:48:ac:61:9c:f4:94:ce:b6:e6:9b:3a:2a:81:fe:37:cd:
83:79:88:71:a0:d7:a2:fa:9b:64:61:28:46:0a:4b:36:75:a5:
eb:6e:93:8c:d8:0e:fb:02:f3:18:a8:75:9a:10:da:31:99:4c:
b5:1a:76:b2:26:40:2d:26:93:8b:b2:5b:4e:ab:a5:c0:b8:90:
f7:c6:96:29:54:6f:50:e8:ca:c7:ee:94:66:c5:e2:9b:87:d1:
99:f0:5f:3e:f1:75:95:9d:a7:d9:7f:8d:c0:8d:b6:3f:fd:e3:
d5:8d:5d:ae:3d:86:2e:88:e2:f6:a7:31:b2:a7:90:f9:27:d7:
bb:70:a6:d5:ea:d3:3a:a3:42:64:56:5d:f9:29:d7:34:f5:f8:
00:f9:46:09:78:b4:47:c7:02:89:fc:df:f3:c8:ca:39:37:d5:
b3:8a:2e:f3:cc:63:71:2e:77:f5:56:e0:64:93:ef:41:6c:be:
5c:77:39:29:ac:65:cd:cb:b6:a6:da:a5:ed:7f:d9:ba:36:2d:
61:2b:57:a8:cf:8f:11:53:90:8b:7f:81:63:dc:4e:19:75:5c:
8b:3d:c3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:16 2025 by rpki-client