Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BvpS751y8vUXuWqwmfzJfn2h-Rk.roa
File: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (raw, json)
Hash identifier: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=
Subject key identifier: 06:FA:52:EF:9D:72:F2:F5:17:B9:6A:B0:99:FC:C9:7E:7D:A1:F9:19
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019421B18D96E353900CA07A0CBA15948532
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BvpS751y8vUXuWqwmfzJfn2h-Rk.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 84.247.90.0/24 maxlen: 24
84.247.91.0/24 maxlen: 24
84.247.92.0/24 maxlen: 24
84.247.93.0/24 maxlen: 24
84.247.94.0/24 maxlen: 24
84.247.95.0/24 maxlen: 24
84.247.96.0/24 maxlen: 24
84.247.97.0/24 maxlen: 24
84.247.98.0/24 maxlen: 24
84.247.99.0/24 maxlen: 24
84.247.100.0/24 maxlen: 24
84.247.101.0/24 maxlen: 24
84.247.102.0/24 maxlen: 24
84.247.103.0/24 maxlen: 24
188.240.10.0/24 maxlen: 24
188.240.11.0/24 maxlen: 24
188.240.216.0/24 maxlen: 24
188.240.217.0/24 maxlen: 24
188.240.218.0/24 maxlen: 24
188.240.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8d:96:e3:53:90:0c:a0:7a:0c:ba:15:94:85:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06fa52ef9d72f2f517b96ab099fcc97e7da1f919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:83:cd:47:6f:43:2a:a0:b7:c4:52:02:31:
a7:2b:1b:3b:8c:6f:1e:5c:c9:89:34:7c:81:f7:a1:
63:4c:0b:18:9d:7f:5a:ec:47:7f:e0:48:db:7c:d1:
7d:16:92:82:0c:7c:29:58:a8:c5:ff:d5:21:28:44:
2b:bd:d0:42:d7:3d:2e:6c:79:4a:86:f9:f0:76:04:
42:c4:e7:a3:4a:5b:c4:40:05:4d:2b:ed:f8:5c:ec:
d4:5e:41:1e:da:e5:bb:38:2e:4c:67:03:45:ca:a0:
13:9b:ef:7b:b5:a2:ab:cf:be:4a:4f:55:6c:c6:26:
7f:ee:a3:d5:7a:0a:2a:e7:84:b5:d6:53:76:a1:70:
09:51:8d:35:65:c0:76:34:35:d2:a3:ff:8c:bf:e3:
00:a5:72:f9:e7:23:c0:d7:66:65:29:a7:9b:5a:ec:
8d:a5:66:94:ff:66:14:6c:b1:d2:cc:4e:fa:47:a0:
da:ea:95:d6:4b:3f:1a:ba:f2:12:ae:26:da:94:1d:
3a:b1:6a:9c:94:46:a0:60:96:77:40:54:b6:26:06:
6e:81:61:64:34:76:e0:a2:41:9a:42:fd:c7:45:cc:
5f:54:02:e2:a9:a7:c3:30:5c:12:3a:31:75:07:bc:
da:7b:2e:80:da:1c:d0:be:4b:05:fa:bd:9b:b0:f8:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:52:EF:9D:72:F2:F5:17:B9:6A:B0:99:FC:C9:7E:7D:A1:F9:19
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/BvpS751y8vUXuWqwmfzJfn2h-Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.90.0-84.247.103.255
188.240.10.0/23
188.240.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:2e:71:e6:8c:73:ef:38:e4:e9:de:8f:cc:cf:ea:a2:1c:f3:
c5:a8:84:63:df:f7:78:a4:fc:95:4f:84:8c:cb:95:e6:20:1a:
43:1f:e5:dd:41:83:b9:a7:55:6f:26:11:79:a5:b8:62:95:ab:
08:75:ef:d6:4f:e9:6e:d8:ba:1b:41:64:f0:8f:2f:ec:e2:af:
e7:af:62:c3:bf:28:4b:4a:0a:4a:91:15:48:1d:69:33:42:e4:
e7:3e:b1:9f:cc:3b:a0:4e:ab:2b:30:ac:8b:19:6f:29:38:a5:
bf:0f:2f:6f:9b:00:54:72:f0:55:f4:45:58:c8:9e:eb:77:06:
db:ac:56:79:e4:59:5e:df:fb:c5:15:18:34:de:46:eb:fa:54:
2b:51:0e:e7:81:a9:13:cf:3d:15:12:24:56:89:5a:04:15:3e:
f5:59:32:0a:de:9d:57:ef:88:40:43:cf:3d:10:a2:aa:98:d3:
cd:9b:db:6d:0b:4b:d3:ea:83:d6:6b:1b:fb:30:f4:30:fd:d9:
ed:ec:92:4b:7c:4f:d9:c7:50:7e:69:7b:7b:e1:68:75:84:11:
4a:d9:4d:09:de:65:c1:2f:50:8a:6d:ba:06:d7:70:50:0b:01:
ad:68:9d:58:66:f0:4f:ed:7e:27:32:d1:32:7a:0f:b0:eb:16:
23:f2:36:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:31 2025 by rpki-client