Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa
File: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (raw, json)
Hash identifier: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=
Subject key identifier: E8:13:9F:79:0A:B2:F4:85:19:DF:A0:CD:C6:87:62:19:2E:F0:06:84
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 019426D973ABF9C0A20D1D367D7AF22D2C3B
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52102
IP address blocks: 5.102.136.0/23 maxlen: 23
5.102.136.0/24 maxlen: 24
5.102.137.0/24 maxlen: 24
5.102.138.0/23 maxlen: 23
5.102.138.0/24 maxlen: 24
5.102.139.0/24 maxlen: 24
5.102.140.0/23 maxlen: 23
5.102.140.0/24 maxlen: 24
5.102.141.0/24 maxlen: 24
5.102.142.0/23 maxlen: 23
5.102.142.0/24 maxlen: 24
5.102.143.0/24 maxlen: 24
91.221.230.0/23 maxlen: 24
91.221.230.0/24 maxlen: 24
91.221.231.0/24 maxlen: 24
2a04:8880::/32 maxlen: 32
2a04:8881::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:73:ab:f9:c0:a2:0d:1d:36:7d:7a:f2:2d:2c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8139f790ab2f48519dfa0cdc68762192ef00684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:2e:bc:7d:5b:03:8a:d1:32:9e:d8:ac:3a:
87:a5:4a:ac:90:16:3b:6e:b0:49:a6:2f:72:c3:6a:
92:4c:9e:2b:11:03:9f:99:02:84:d9:ae:cc:69:db:
3e:62:36:3f:60:79:18:bd:69:42:53:2b:d8:68:f2:
c8:2c:c8:de:72:f0:fb:92:a6:04:69:44:cf:50:ed:
b6:e3:9b:50:35:2b:3a:36:f3:01:91:32:d3:ae:52:
ca:15:57:24:ec:be:62:d1:d5:f9:ab:ea:1e:9f:32:
66:6c:7d:96:08:2b:00:fa:00:8d:3b:54:a8:66:42:
69:7a:dd:86:16:45:70:76:3f:4b:0b:f0:62:f6:9c:
e8:f3:e2:89:2d:d1:e8:d6:4b:ac:83:c2:a0:bb:44:
d3:02:12:94:5b:67:21:39:5c:f0:38:09:36:a2:06:
f5:d8:d3:9f:41:df:78:47:e0:19:84:eb:8d:50:d4:
bb:b3:6c:92:67:0c:6a:c3:f8:db:b5:a0:ef:6b:12:
63:16:b9:01:56:ba:ae:a2:7c:96:4a:11:5a:33:6f:
98:f9:99:8b:c6:07:fb:12:7a:70:5d:fa:34:fe:25:
b2:9f:06:bc:52:7d:33:51:fa:c3:23:36:9b:69:76:
f8:83:81:a2:fd:23:53:af:a6:1e:46:dc:c4:6d:dd:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:13:9F:79:0A:B2:F4:85:19:DF:A0:CD:C6:87:62:19:2E:F0:06:84
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.136.0/21
91.221.230.0/23
IPv6:
2a04:8880::/31
Signature Algorithm: sha256WithRSAEncryption
71:65:63:f4:d3:19:41:03:4b:23:ff:42:c0:3e:10:32:8c:5b:
31:8e:de:9b:4d:71:8b:58:4f:b1:14:fa:90:ae:89:00:8e:e1:
f3:69:f2:cd:ba:e2:48:5c:11:7d:54:1a:ce:a9:8e:2e:a2:0d:
0e:18:57:5d:de:f9:d5:3e:43:42:f0:4b:8d:c1:bc:be:94:b4:
da:2e:cf:26:59:44:a3:38:9d:ef:b0:6a:79:3f:0b:4b:f1:50:
c7:0a:33:46:c2:e1:7d:22:aa:4c:a9:0c:30:38:2d:69:a8:ec:
aa:b5:68:ea:7f:5c:c6:ae:06:0e:e5:0b:ac:09:1b:b8:5d:cc:
ff:cd:ac:22:da:99:ac:7f:82:29:05:1f:4b:af:07:b6:14:ce:
da:66:65:19:d2:0e:48:4a:09:cc:df:53:e8:25:ca:ae:07:63:
0c:e4:dd:cd:31:81:d3:a9:e6:92:48:2f:4b:66:eb:0e:06:34:
29:dc:3c:23:f6:10:60:89:2b:b9:04:3a:41:b7:d2:0b:86:2d:
24:ab:0e:0d:9f:d7:23:7f:8a:3c:4b:48:f6:b6:0a:f4:83:6f:
f1:e8:f7:b5:e2:f5:24:f3:a6:a5:c0:33:fe:54:bb:b1:76:ca:
51:fa:7f:00:1d:41:dd:09:06:d4:d2:3b:d5:03:d8:0e:f2:0e:
9f:33:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:58 2025 by rpki-client