Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/BE6yuJYAbZhQluEFBiOAcmJcFog.roa
File: BE6yuJYAbZhQluEFBiOAcmJcFog.roa (raw, json)
Hash identifier: SxBaSnnbalpl6gCHFS6kZTlrCpsuyZ3nVXwqDns6XOw=
Subject key identifier: 04:4E:B2:B8:96:00:6D:98:50:96:E1:05:06:23:80:72:62:5C:16:88
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0184C91C880C35C4E147644BA4F71B3C6E27
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/BE6yuJYAbZhQluEFBiOAcmJcFog.roa
Signing time: Wed 30 Nov 2022 15:16:40 +0000
ROA not before: Wed 30 Nov 2022 15:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204007
IP address blocks: 185.194.12.0/24 maxlen: 24
185.190.89.0/24 maxlen: 24
185.185.216.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.185.218.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
2a10:64c0::/29 maxlen: 29
2a0b:6580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:1c:88:0c:35:c4:e1:47:64:4b:a4:f7:1b:3c:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Nov 30 15:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=044eb2b896006d985096e10506238072625c1688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:42:33:bf:4f:78:44:2a:78:8b:ef:b9:08:
97:90:02:7c:b6:3b:32:cb:61:2a:d0:49:b5:5b:aa:
3b:ef:4b:ca:d5:37:9a:55:ae:d0:dc:0b:f3:d6:80:
4f:5e:a9:b8:e1:1c:85:1e:07:0a:07:a2:aa:7c:6e:
80:5f:8d:c6:80:a4:79:20:13:bf:59:c7:ec:d8:11:
36:b6:f9:55:7d:9c:c5:21:27:f5:61:f5:5b:fb:02:
5e:82:1c:a9:de:39:bd:c4:a3:fc:c3:ae:46:76:cb:
fa:a8:24:49:16:e4:56:65:63:5c:d8:cf:ef:33:fd:
9c:4d:8c:49:5c:d8:05:44:30:19:ea:50:55:78:42:
5f:9e:b3:a6:17:a6:33:4a:e8:8c:a2:a4:d1:78:28:
02:19:c0:a4:00:b1:24:2c:d2:f8:a6:7e:11:ab:bf:
91:d1:99:bc:3f:12:2b:ef:56:07:95:df:7c:c9:98:
4d:eb:28:3f:79:7f:64:83:78:5e:47:eb:3a:2e:67:
6e:22:c0:c3:10:85:32:22:48:97:35:bc:e3:43:84:
55:eb:ed:ba:b7:78:5c:f0:81:39:5d:09:ed:c5:04:
81:9c:f1:a4:40:32:3f:4f:8c:7c:d4:66:d3:73:2d:
b1:bf:a0:db:2d:65:ba:27:bd:0e:cc:9f:05:80:f3:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4E:B2:B8:96:00:6D:98:50:96:E1:05:06:23:80:72:62:5C:16:88
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/BE6yuJYAbZhQluEFBiOAcmJcFog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
185.190.89.0/24
185.194.12.0/24
IPv6:
2a0b:6580::/29
2a10:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:c9:a0:45:ec:5d:b4:d3:79:74:cb:b8:04:c0:23:23:88:34:
e9:1b:08:94:41:bd:38:86:c5:af:3a:f7:25:61:5e:6e:37:d1:
d0:5b:5c:58:fb:8f:b4:4c:47:7b:99:d6:85:0b:08:53:c3:3d:
6d:b5:3b:4a:66:3f:78:83:6a:c6:d4:de:4f:2c:74:32:e7:f3:
7b:01:cf:ac:fb:8a:dc:cb:26:92:58:ba:91:8b:0e:37:3f:8c:
a1:4c:71:fb:b9:4f:bf:97:27:0a:41:7e:27:1d:3f:9e:2a:d1:
0a:1e:5b:00:4e:c9:ee:90:da:47:3a:c1:9d:04:93:8b:49:05:
2b:b4:c6:9a:3c:1b:9f:73:41:b8:a5:e8:ba:ee:cf:f6:ef:5a:
8f:36:b5:59:a2:cd:b3:4e:00:37:03:f4:ee:07:b8:fd:d0:5d:
a8:86:80:82:b4:75:80:c6:4f:b3:37:0e:90:1e:9e:17:62:a7:
fa:47:0b:8a:ab:10:66:f5:ee:98:5e:e7:5a:32:d6:71:48:0a:
89:3e:c2:a8:5d:7c:3b:2a:fc:7b:29:38:bb:33:7a:7f:98:3a:
0f:f1:58:70:aa:04:6a:6e:9c:fb:b3:d5:02:2c:14:4f:e2:3f:
e8:ed:0b:e5:a9:fc:46:66:2d:b8:ca:35:09:70:df:6b:45:25:
93:11:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:31 2025 by rpki-client