Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bYEgSzmqXW_mSs7nHQQIzVpWpk4.roa
File: bYEgSzmqXW_mSs7nHQQIzVpWpk4.roa (raw, json)
Hash identifier: TRpCHaNz7gyIJXdavmEWEaDINMDSFagKjup6fNWWfYU=
Subject key identifier: 6D:81:20:4B:39:AA:5D:6F:E6:4A:CE:E7:1D:04:08:CD:5A:56:A6:4E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0194DA08A3B894A4263DE4DE8265ECB1C16B
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bYEgSzmqXW_mSs7nHQQIzVpWpk4.roa
Signing time: Thu 06 Feb 2025 06:53:06 +0000
ROA not before: Thu 06 Feb 2025 06:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:08:a3:b8:94:a4:26:3d:e4:de:82:65:ec:b1:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 6 06:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d81204b39aa5d6fe64acee71d0408cd5a56a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:21:f3:f8:f6:fe:d1:53:2f:5f:af:4f:c3:
32:d2:95:fb:9a:bb:33:7e:bf:46:ff:a9:d2:03:9a:
12:a8:ff:ca:f6:63:e7:2e:0f:7d:b1:3b:ab:a0:7c:
21:c3:71:24:92:68:e1:9d:ab:ed:40:5c:26:3e:8f:
af:54:00:77:33:87:12:72:b2:8d:8c:53:5e:d5:15:
b7:2d:53:ba:9c:cf:48:58:58:88:32:5a:85:17:d4:
bf:83:f7:b0:47:a7:4b:17:47:e7:b3:fd:87:82:0f:
c2:75:1b:37:20:a2:8c:b9:9d:ee:51:5d:af:26:fe:
f2:4f:25:14:ef:1b:a0:6a:69:5e:91:bd:01:0f:95:
b4:07:9d:af:d7:d9:4a:e7:1e:d9:c3:d4:68:c3:bb:
cc:90:cb:44:39:56:b8:46:fc:05:b1:b8:55:e8:73:
6a:5d:fb:32:c9:a7:87:b9:bd:b9:cb:09:63:52:7c:
b0:e5:98:83:49:68:75:a9:2a:df:11:46:29:d5:3f:
48:2a:58:5f:22:cb:d7:24:1f:2e:52:92:9c:32:b2:
c8:fa:78:af:8c:51:e3:f3:11:2f:b5:8f:b4:69:f0:
fa:2a:83:bd:4a:f4:40:06:a2:cc:c9:39:ee:89:6c:
9d:e0:0d:83:7c:ca:c5:83:d3:3d:3c:bb:7b:a0:a3:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:81:20:4B:39:AA:5D:6F:E6:4A:CE:E7:1D:04:08:CD:5A:56:A6:4E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bYEgSzmqXW_mSs7nHQQIzVpWpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
109.203.163.0/24
176.46.136.0/24
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.144.0/24
176.46.148.0-176.46.150.255
176.46.152.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
78:c8:6a:4a:81:58:a7:5f:fd:1c:76:96:99:ef:71:12:48:48:
4a:e5:86:2e:7f:48:ed:65:fb:58:9b:86:e1:58:ed:dd:f4:7f:
28:7f:54:cd:b6:13:32:ec:f9:19:61:e5:99:fc:60:07:8a:5e:
1f:56:f6:72:94:a8:3b:99:b8:bd:72:94:53:c8:82:ea:6a:65:
56:ff:96:29:66:0e:db:fd:5d:55:4a:2b:1b:69:ef:5e:2c:ca:
7e:59:cf:54:5c:80:20:00:b2:67:e0:6a:54:b3:e0:5f:a8:66:
2a:b6:74:48:20:bb:2c:b9:8c:8a:d4:4c:65:37:ab:ff:47:d9:
5a:d6:53:5f:0f:ba:c6:fc:fe:b7:f8:44:9f:9a:fe:4e:d4:09:
16:a3:04:a8:f0:41:ff:9c:24:e8:cd:cd:f5:9a:ce:87:c5:45:
5c:c3:0e:35:26:db:6f:73:0e:ec:12:c3:41:fb:25:c8:69:f9:
43:09:91:51:b6:4b:cc:47:72:6e:f6:e5:9a:ed:95:65:e6:1e:
e9:c4:d3:7f:6e:d0:22:50:31:e3:45:17:ac:e7:a5:c3:19:ca:
ae:5f:31:01:19:82:c4:09:30:ce:96:26:b4:dc:9f:d2:9d:ce:
1f:e5:0e:56:0a:04:0e:d3:5b:ad:5c:70:8d:18:77:99:1f:ba:
8c:61:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:56 2025 by rpki-client