Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/y6v6Fo06mBEtSFyi7UmNU9KjPB0.roa
File: y6v6Fo06mBEtSFyi7UmNU9KjPB0.roa (raw, json)
Hash identifier: hP3ectfcHuf0o1u7ckM5wVK7nS0/2ff9o2j41XK7vOs=
Subject key identifier: CB:AB:FA:16:8D:3A:98:11:2D:48:5C:A2:ED:49:8D:53:D2:A3:3C:1D
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 01868C811516DDB737A4EC477F9531CF426B
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/y6v6Fo06mBEtSFyi7UmNU9KjPB0.roa
Signing time: Sun 26 Feb 2023 06:55:15 +0000
ROA not before: Sun 26 Feb 2023 06:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44489
IP address blocks: 109.164.0.0/17 maxlen: 25
109.164.116.0/22 maxlen: 24
109.164.120.0/24 maxlen: 25
109.164.121.0/24 maxlen: 25
109.164.119.0/24 maxlen: 24
185.131.60.0/22 maxlen: 24
2a03:3a01::/32 maxlen: 56
2a03:3a00::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:81:15:16:dd:b7:37:a4:ec:47:7f:95:31:cf:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Feb 26 06:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbabfa168d3a98112d485ca2ed498d53d2a33c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:94:0d:97:7d:aa:84:fd:51:c2:07:f2:9a:
d1:a4:60:bd:b3:70:e9:b3:23:66:b9:96:b8:0a:0e:
a3:40:09:a4:8f:7e:87:dd:a4:0e:00:4d:28:8c:a3:
70:7e:2c:da:62:94:2c:08:d3:9f:e5:fe:50:38:a4:
d5:ce:d0:98:a3:db:21:49:93:5a:b8:1a:ac:cc:74:
c7:ad:f9:b9:7a:81:94:a5:1c:8a:57:29:7a:d2:3a:
e7:50:80:67:fc:6d:9e:c4:99:ee:84:5f:57:0b:59:
ba:4c:bc:cd:da:49:47:84:76:1f:91:eb:d7:32:67:
8d:fc:45:3f:28:f1:ea:ff:a5:5f:96:a7:97:39:b8:
68:dc:0a:b8:e4:cc:c3:4c:2f:d6:f4:8e:8c:7e:9f:
89:8a:6d:6d:5f:09:18:6a:28:97:f2:32:6d:ec:be:
61:68:d1:39:ff:11:bb:05:a8:95:46:d6:bf:10:47:
4c:ee:05:36:ae:dd:13:8f:b5:5f:76:eb:4d:ee:31:
36:94:77:93:5c:c6:08:c0:29:77:db:ff:12:e3:c2:
56:aa:bf:ea:a4:2d:6a:b2:38:e3:64:b3:b7:40:6d:
ee:15:88:c6:61:3b:64:5e:d5:12:d0:5d:06:3c:01:
95:6b:fc:06:94:1e:c1:13:b4:4e:50:30:21:de:25:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:FA:16:8D:3A:98:11:2D:48:5C:A2:ED:49:8D:53:D2:A3:3C:1D
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/y6v6Fo06mBEtSFyi7UmNU9KjPB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
185.131.60.0/22
IPv6:
2a03:3a00::/31
Signature Algorithm: sha256WithRSAEncryption
79:0e:f0:cf:1e:42:96:82:da:d5:04:32:6d:37:f5:19:62:e5:
15:e0:96:34:57:44:5a:43:ce:0a:fc:fd:11:60:b3:70:0e:f8:
2a:86:cf:5f:29:e3:a2:52:3b:78:8b:3e:3f:5b:0b:5b:27:be:
c6:36:44:c8:43:0b:ec:9c:db:ae:c4:1f:5d:81:1a:c2:93:55:
c7:54:9d:cf:c4:b5:c5:b1:c9:aa:8d:b1:80:90:22:46:0e:80:
c2:af:ca:97:fd:96:f0:d4:45:12:45:32:eb:2e:f4:00:e3:d4:
b1:d8:a5:27:19:93:18:ee:61:6d:e6:46:02:f1:be:84:8f:65:
dc:e7:99:72:e1:14:96:cc:9a:56:46:f2:83:7a:d5:80:6c:71:
dc:10:10:36:fc:ec:80:94:5f:79:75:4b:ad:57:60:aa:14:9d:
6c:52:3e:da:6e:c8:12:1b:e5:bc:c5:e5:7a:6d:e2:77:21:93:
18:af:d7:31:da:32:0e:5d:6e:9f:7e:30:e6:2b:b9:00:c2:12:
a0:88:de:36:2a:05:26:70:73:b7:66:7e:22:fb:fe:90:a9:25:
38:aa:c5:b7:19:c5:3e:b3:cd:16:44:22:90:46:8d:0a:f0:16:
25:2f:30:67:9c:b0:36:7e:9d:b3:7e:16:a1:59:b4:e5:ef:e7:
3f:69:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:33 2025 by rpki-client