Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/biowetcg3ehch8_ZT-Bjgdr3xVQ.roa
File: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (raw, json)
Hash identifier: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=
Subject key identifier: 6E:2A:30:7A:D7:20:DD:E8:5C:87:CF:D9:4F:E0:63:81:DA:F7:C5:54
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E288C52805ABA6EC66F802FD1C0B6
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/biowetcg3ehch8_ZT-Bjgdr3xVQ.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60588
IP address blocks: 77.74.224.0/24 maxlen: 24
77.74.226.0/24 maxlen: 24
77.74.227.0/24 maxlen: 24
109.105.200.0/24 maxlen: 24
109.105.201.0/24 maxlen: 24
109.105.202.0/24 maxlen: 24
109.105.203.0/24 maxlen: 24
109.105.204.0/24 maxlen: 24
109.105.205.0/24 maxlen: 24
109.105.206.0/24 maxlen: 24
109.105.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:28:8c:52:80:5a:ba:6e:c6:6f:80:2f:d1:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2a307ad720dde85c87cfd94fe06381daf7c554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:8f:84:7f:b4:01:0c:bb:a2:6d:e3:a8:4a:
71:3b:a1:30:40:21:1e:41:41:5e:1e:4d:b1:ee:ce:
af:a3:11:d7:7f:db:1b:a4:c5:51:1e:3f:b5:98:ad:
82:86:13:e0:53:f0:0a:aa:81:5c:c1:54:61:a0:69:
ae:bf:3d:36:96:e7:cd:73:b6:44:a5:1b:98:ef:68:
f6:3f:e8:07:7c:02:c9:8b:36:df:7d:c3:5e:c2:9c:
b5:7c:f3:b1:92:d6:4a:f1:d3:9a:92:26:17:1e:27:
f6:a9:56:0b:05:ba:8d:8c:5f:eb:a4:b3:3d:5e:4b:
b3:88:8b:ff:99:89:0d:5d:d3:f6:06:61:ee:49:18:
68:93:d4:4d:61:61:86:d8:d5:3c:ba:b4:d9:90:c7:
f8:e1:b8:a7:09:62:e3:12:7c:8e:31:c3:db:5e:9b:
dd:b5:6e:5f:da:3b:16:3d:01:e8:5d:46:77:b0:b7:
f7:ad:41:5a:a4:20:f5:4d:73:2a:53:ed:18:63:f1:
d0:7e:98:70:b8:50:34:e5:23:38:01:78:b2:9d:af:
cc:b4:72:2c:c1:16:3d:48:03:3c:8b:2c:33:d8:b7:
41:c7:6b:14:18:08:f3:f6:ea:d3:67:c7:c0:95:82:
1b:13:39:fa:ff:76:ef:55:1b:57:ce:90:08:34:bc:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:30:7A:D7:20:DD:E8:5C:87:CF:D9:4F:E0:63:81:DA:F7:C5:54
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/biowetcg3ehch8_ZT-Bjgdr3xVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.224.0/24
77.74.226.0/23
109.105.200.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:cd:5c:63:b4:9c:2a:e6:58:2d:75:db:ab:c2:56:d1:d7:6b:
39:30:99:97:75:03:24:8f:ac:38:3a:4c:02:24:ff:4f:49:81:
e5:a7:b9:47:5d:70:91:66:95:66:8f:19:7c:ca:fc:5c:5a:27:
eb:49:43:53:f3:d4:73:78:79:47:c4:44:77:30:c7:4e:56:ca:
c2:63:37:2b:cb:3a:34:44:99:d1:ba:ad:d7:8c:db:3c:04:44:
0a:9f:d9:63:b4:9c:ab:b4:12:c8:91:49:46:de:d1:fc:10:87:
8c:5b:fb:c0:60:fb:2f:02:4f:ef:5d:30:08:91:04:4f:2e:55:
07:8d:9a:91:98:78:0c:68:0b:7d:27:49:44:46:d1:b6:1f:94:
54:76:9e:11:f7:d1:12:5d:20:6d:f2:b3:aa:38:d4:de:ad:8d:
4c:a6:52:88:23:15:88:64:c1:63:f0:0b:a3:2f:17:8d:11:51:
ce:e9:1c:8e:81:d2:91:01:48:5c:20:7b:8e:ac:e8:cd:d8:42:
75:d3:81:59:19:bb:88:25:7b:e0:13:f9:ad:31:5f:95:a0:e6:
61:b5:65:33:67:27:19:c3:a5:d2:08:5d:84:99:ac:58:85:88:
ca:71:80:55:d6:83:a1:36:b5:ff:83:c6:da:b2:cc:ef:50:17:
b7:ce:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:25 2025 by rpki-client