Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/bth8nL17vmRfjOgOkE44hcyUW-U.roa
File: bth8nL17vmRfjOgOkE44hcyUW-U.roa (raw, json)
Hash identifier: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=
Subject key identifier: 6E:D8:7C:9C:BD:7B:BE:64:5F:8C:E8:0E:90:4E:38:85:CC:94:5B:E5
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 019423D6E4BD05C66A52788F34E57536E2DB
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/bth8nL17vmRfjOgOkE44hcyUW-U.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57588
IP address blocks: 176.241.80.0/20 maxlen: 20
176.241.80.0/22 maxlen: 22
176.241.80.0/24 maxlen: 24
176.241.81.0/24 maxlen: 24
176.241.82.0/24 maxlen: 24
176.241.83.0/24 maxlen: 24
176.241.84.0/23 maxlen: 23
176.241.84.0/24 maxlen: 24
176.241.85.0/24 maxlen: 24
176.241.86.0/24 maxlen: 24
176.241.87.0/24 maxlen: 24
176.241.88.0/22 maxlen: 22
176.241.88.0/24 maxlen: 24
176.241.89.0/24 maxlen: 24
176.241.90.0/24 maxlen: 24
176.241.91.0/24 maxlen: 24
176.241.92.0/22 maxlen: 22
176.241.92.0/24 maxlen: 24
176.241.93.0/24 maxlen: 24
176.241.94.0/24 maxlen: 24
176.241.95.0/24 maxlen: 24
185.129.4.0/22 maxlen: 22
185.129.4.0/23 maxlen: 23
185.129.4.0/24 maxlen: 24
185.129.5.0/24 maxlen: 24
185.129.6.0/23 maxlen: 23
185.129.6.0/24 maxlen: 24
185.129.7.0/24 maxlen: 24
2a0d:d680::/29 maxlen: 29
2a0d:d680::/48 maxlen: 48
2a0d:d680:1::/48 maxlen: 48
2a0d:d680:a::/48 maxlen: 48
2a0d:d680:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e4:bd:05:c6:6a:52:78:8f:34:e5:75:36:e2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ed87c9cbd7bbe645f8ce80e904e3885cc945be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:e0:32:5b:be:d4:60:ef:a2:15:c9:4b:be:
48:c7:7f:eb:9d:45:33:55:8d:f1:4f:ad:b2:66:a2:
d5:7d:11:c7:75:66:59:72:e7:c1:ff:a2:8f:37:4f:
f1:69:3b:a5:f0:93:7f:3d:72:32:e2:5f:0c:82:af:
b9:25:c7:56:c4:21:5b:4e:be:3c:1c:f6:4d:12:c5:
f7:80:fc:60:9a:a8:38:48:1d:c1:96:e9:75:9e:7c:
d4:3d:64:7c:45:ea:15:c6:fd:4a:aa:99:e0:67:22:
1b:3c:2f:7b:76:f6:94:51:a0:17:62:56:e7:bd:97:
7f:b2:89:22:66:68:9e:d7:7f:f2:69:c7:55:9e:8a:
c2:7e:2b:2d:9b:de:21:61:f2:96:88:e1:e7:69:7d:
d2:7e:6f:d2:c8:85:d0:21:14:51:ae:37:34:ac:dc:
2b:ed:41:44:b5:af:f1:27:69:2e:0e:e6:c9:e3:80:
13:90:b6:77:69:de:4d:0a:08:24:04:d2:25:6f:b0:
a1:ad:3a:8c:1d:eb:ad:f3:13:cd:83:21:24:ef:e1:
2e:50:1f:aa:fe:d6:23:cc:60:d3:5e:34:b9:93:c8:
61:56:42:08:37:96:87:0d:00:4b:00:21:63:e1:81:
4d:2d:a9:1c:75:96:08:9e:16:28:cd:a9:10:12:7e:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:7C:9C:BD:7B:BE:64:5F:8C:E8:0E:90:4E:38:85:CC:94:5B:E5
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/bth8nL17vmRfjOgOkE44hcyUW-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.80.0/20
185.129.4.0/22
IPv6:
2a0d:d680::/29
Signature Algorithm: sha256WithRSAEncryption
6a:a1:30:95:70:3e:28:d3:b9:a5:f8:6a:4e:ce:57:81:98:07:
7a:19:99:ed:5a:d0:ed:4b:1b:08:d0:70:a3:53:bf:aa:d9:03:
5e:87:4a:10:63:8d:a2:7e:94:14:b5:f8:9e:cb:6d:08:26:15:
0c:ed:77:69:84:bf:f5:7e:ca:7a:22:27:4f:5d:7d:db:1a:51:
c1:81:3d:c5:c7:ec:8b:2b:c8:7d:96:39:ab:40:93:8d:e2:29:
b9:a1:d1:60:ad:16:5b:66:a4:31:29:6d:30:3f:34:c1:55:1f:
98:d4:b5:7f:e4:cd:ac:f5:d7:e2:c8:7c:3a:da:bb:cc:17:49:
df:d5:8f:7c:55:81:f6:53:58:63:3c:f8:98:3b:a3:6a:e9:c6:
8e:6d:cd:0c:d7:e7:c9:c4:f9:29:c8:6d:7e:b0:ef:db:60:36:
30:c3:ca:81:21:89:ae:20:48:ca:c2:fb:0e:4a:65:10:ba:cf:
19:a8:e3:3c:d5:14:d8:ed:36:a5:0e:14:f0:b1:c2:5a:28:1e:
2f:98:8d:38:2d:07:40:ed:c3:ac:2c:59:98:09:6d:b9:c4:df:
98:ca:73:6a:ef:e3:69:2c:a9:44:90:97:05:32:1b:37:5e:0d:
47:b2:0a:31:45:9a:cc:ad:cf:2a:28:cd:db:64:1e:90:83:90:
0d:7c:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:21 2025 by rpki-client