Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bQ_hDW3CFCEDwoE1OstRvKETtbc.roa
File: bQ_hDW3CFCEDwoE1OstRvKETtbc.roa (raw, json)
Hash identifier: ZMu9HCS1/BRrvsvlRmVezGc/35cGLC+T1nGXPiaS0kM=
Subject key identifier: 6D:0F:E1:0D:6D:C2:14:21:03:C2:81:35:3A:CB:51:BC:A1:13:B5:B7
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0194274775336A6258EA2B64EE3CEFD15EB8
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bQ_hDW3CFCEDwoE1OstRvKETtbc.roa
Signing time: Thu 02 Jan 2025 13:49:41 +0000
ROA not before: Thu 02 Jan 2025 13:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 94.228.162.0/23 maxlen: 23
94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:75:33:6a:62:58:ea:2b:64:ee:3c:ef:d1:5e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0fe10d6dc2142103c281353acb51bca113b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:ef:52:45:8b:d1:60:be:3c:01:ff:12:a6:
ba:7d:5a:81:6a:1b:06:74:17:ab:d0:59:55:e6:cc:
f0:42:95:06:26:fe:8c:c6:e6:dc:08:98:39:63:b1:
36:76:63:0c:a5:65:57:21:bb:3e:57:69:98:5f:59:
bf:13:cb:03:a7:2a:70:fd:7e:d5:84:79:40:c9:7b:
ca:6a:f7:25:6b:a9:69:a9:3e:90:c7:99:a4:ab:50:
77:77:86:6b:37:51:fb:12:0e:25:a9:8a:c7:9a:f7:
c9:cd:af:36:a3:16:88:62:0a:9d:90:72:d4:f2:b6:
0e:30:f5:70:37:d4:8d:f6:56:97:24:b6:2d:cb:9a:
c5:53:b2:db:8e:6c:c8:5c:27:f2:ca:03:9c:2a:5c:
ef:cd:15:2e:8d:0b:ed:06:b4:73:7f:d8:82:b6:58:
1e:be:98:eb:8a:d4:77:07:32:c4:47:f2:ff:63:6e:
cb:fe:fd:28:66:cc:02:11:7c:f4:6c:24:09:0e:80:
ad:c3:c6:62:4e:f1:a7:07:e7:d5:5d:fd:25:8e:34:
82:f7:9a:c2:7d:e6:a4:11:22:08:84:ca:be:a4:f5:
67:aa:92:a3:ad:18:89:59:fd:7a:20:a4:89:f7:0a:
99:e1:18:cd:cd:0e:bc:1f:51:85:55:8b:8a:5b:83:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:E1:0D:6D:C2:14:21:03:C2:81:35:3A:CB:51:BC:A1:13:B5:B7
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/bQ_hDW3CFCEDwoE1OstRvKETtbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0-94.228.170.255
178.236.244.0/24
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:47:2e:8d:02:64:85:74:8c:59:e1:74:4f:1a:ec:83:50:50:
42:2d:ed:ac:e9:61:8a:5d:d2:ae:2d:b6:3d:3a:42:0a:a1:66:
4e:4f:0e:36:74:9e:fb:0e:5a:fa:4e:c9:c1:c0:d0:87:3e:42:
3a:ea:88:05:bc:e9:63:f1:f2:ba:d4:a0:3f:af:ec:8d:f3:f7:
51:24:8b:15:dd:93:fa:bd:4c:7e:35:ac:9a:19:98:7f:6a:5a:
6b:7c:ce:a0:f7:cc:d8:36:69:9a:bc:81:08:b9:9d:aa:fc:2e:
1e:f8:df:8a:f7:3a:d2:52:13:b6:20:95:35:cd:24:db:16:fe:
63:78:c5:03:f4:f9:0b:b0:9e:78:57:89:55:56:6c:c3:50:58:
54:1c:7a:a9:1c:02:bd:ac:1d:46:75:4c:98:f1:d3:5a:6d:97:
39:e4:25:90:79:c6:10:45:17:0a:16:cb:cd:9f:7f:a7:94:b8:
3c:0b:d4:63:5e:e4:bd:b0:52:3b:46:48:bf:cf:db:a7:1b:a1:
de:ba:6c:0d:f9:96:e4:6e:fa:f0:80:3c:8d:af:04:fa:5d:fa:
6a:7a:d7:99:11:2e:63:74:4f:69:ca:69:bf:1c:74:af:48:19:
62:c7:8a:af:74:6c:7d:fe:b2:3d:81:9c:72:c2:05:e3:46:13:
e7:51:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:22 2025 by rpki-client