Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa
File: bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa (raw, json)
Hash identifier: zO1ybKX/s2NCYeSrRX1xfvdOpXtR/b+YJZ3CodIb+Uw=
Subject key identifier: 6E:3B:63:E6:68:94:97:9B:87:B1:2F:CD:9B:6A:6A:98:6D:B7:22:64
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67B536AF9086AEF4DCD5583A5C4BF
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa
Signing time: Thu 02 Jan 2025 15:50:57 +0000
ROA not before: Thu 02 Jan 2025 15:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12222
IP address blocks: 2.16.36.0/24 maxlen: 24
2.16.37.0/24 maxlen: 24
2.22.60.0/24 maxlen: 24
2.22.226.0/24 maxlen: 24
2.22.227.0/24 maxlen: 24
80.67.64.0/24 maxlen: 24
80.67.65.0/24 maxlen: 24
80.67.70.0/24 maxlen: 24
80.67.73.0/24 maxlen: 24
88.221.208.0/24 maxlen: 24
88.221.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7b:53:6a:f9:08:6a:ef:4d:cd:55:83:a5:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e3b63e66894979b87b12fcd9b6a6a986db72264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:ce:c7:a6:72:d0:cd:7d:da:fd:d3:5d:74:
a2:7f:97:2f:8d:81:ac:8b:e9:dc:a7:14:c8:2c:1f:
0d:0b:3a:1b:c8:69:2f:ea:58:98:49:66:89:e1:00:
be:93:e8:08:cb:8c:d7:ec:42:4b:77:79:c3:02:67:
15:6a:5e:4c:65:20:c7:78:56:f4:bb:b0:83:27:42:
c6:53:bb:5f:ad:21:ac:53:0b:b1:aa:e7:59:cc:6c:
be:42:cb:a8:a7:d4:2d:15:9c:90:a4:da:cd:d1:5e:
91:01:59:2d:37:17:2e:6e:fe:1e:0e:fb:b4:6a:89:
e3:be:3f:49:86:76:cf:fe:92:50:46:8e:18:b6:25:
81:e6:06:f4:16:76:22:69:57:57:31:18:42:4a:4b:
4c:4a:c4:a1:24:57:78:2a:59:3e:39:cb:22:cd:64:
78:fa:ca:f3:f2:62:f1:cb:08:09:59:11:8f:92:5b:
ff:6a:16:2f:ac:ef:f3:df:f0:ca:05:a9:bb:a2:c1:
22:55:8f:77:ac:44:4f:61:6f:72:33:4a:0a:04:d6:
41:55:b9:9f:ea:eb:e4:c4:f3:54:77:94:15:3a:e4:
c4:48:7b:a8:e1:8f:4a:eb:31:66:77:ba:17:e2:e0:
a2:59:c8:4c:26:2f:d2:65:5f:65:8a:e1:25:0d:62:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:63:E6:68:94:97:9B:87:B1:2F:CD:9B:6A:6A:98:6D:B7:22:64
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bjtj5miUl5uHsS_Nm2pqmG23ImQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.36.0/23
2.22.60.0/24
2.22.226.0/23
80.67.64.0/23
80.67.70.0/24
80.67.73.0/24
88.221.208.0/23
Signature Algorithm: sha256WithRSAEncryption
43:2e:0b:45:75:65:aa:29:74:b0:81:9e:eb:71:5d:f8:b4:73:
34:9d:bd:19:39:bf:96:c3:dd:42:3d:1d:65:27:a1:21:2e:08:
77:ed:7e:94:5c:85:3a:6a:1f:b1:25:e8:f3:a1:6a:e6:c7:05:
8c:36:95:ec:f5:f3:6d:1a:d2:a8:ad:c1:04:e1:58:3d:12:bc:
5b:e3:b1:64:a7:2c:18:61:b7:2b:ce:04:41:74:24:20:40:6c:
6b:bc:7a:63:5f:2b:44:a7:99:c0:71:0f:40:06:78:d5:a8:05:
e4:01:83:0c:59:3a:e5:1b:67:b1:d5:c0:b2:79:5d:4c:92:f3:
2a:e3:e4:16:a3:11:b5:d7:1d:95:cf:1d:52:65:1e:7a:6f:c4:
ec:13:84:62:d6:04:04:4d:49:5f:5c:ed:b3:53:99:4b:bb:f5:
1d:37:f7:43:7a:16:a7:7e:9c:bd:5c:6f:2c:14:e2:a1:f5:92:
90:30:57:1c:14:40:6b:e4:55:c3:0a:23:5f:45:0b:74:60:1a:
8f:e7:ab:77:97:e0:ec:74:9a:31:74:1d:b4:20:76:6b:77:b8:
40:84:06:ae:6b:97:69:e9:96:f6:82:cc:aa:a0:5c:35:8c:f8:
1f:e6:98:a9:66:9f:99:56:f6:07:db:1f:ed:8d:6b:98:5f:7a:
bd:87:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:27 2025 by rpki-client