Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/BoNt0d7LvQoCJUXJyLX6hlCZAjk.roa
File: BoNt0d7LvQoCJUXJyLX6hlCZAjk.roa (raw, json)
Hash identifier: KTK29uF84QZTyH2qfE47H+5k8wgWuMgFQUI1caamjG8=
Subject key identifier: 06:83:6D:D1:DE:CB:BD:0A:02:25:45:C9:C8:B5:FA:86:50:99:02:39
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 0185720C5C0A0D314A2600453A7EE86D9A1D
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/BoNt0d7LvQoCJUXJyLX6hlCZAjk.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 78.103.0.0/16 maxlen: 16
80.111.128.0/17 maxlen: 17
195.34.134.0/23 maxlen: 23
92.235.0.0/18 maxlen: 18
92.235.0.0/19 maxlen: 19
94.171.0.0/16 maxlen: 16
92.235.32.0/19 maxlen: 19
84.116.0.0/16 maxlen: 16
80.111.0.0/17 maxlen: 17
213.47.222.0/23 maxlen: 23
213.47.220.0/22 maxlen: 22
213.47.220.0/23 maxlen: 23
80.111.0.0/16 maxlen: 16
94.170.0.0/16 maxlen: 16
94.170.0.0/15 maxlen: 15
195.34.130.0/24 maxlen: 24
195.34.132.0/22 maxlen: 22
195.34.132.0/23 maxlen: 23
62.179.0.0/17 maxlen: 17
2001:730::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5c:0a:0d:31:4a:26:00:45:3a:7e:e8:6d:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06836dd1decbbd0a022545c9c8b5fa8650990239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:94:ad:ed:c8:dc:10:57:38:70:79:c2:4d:
91:78:6e:29:a7:35:29:25:ab:fe:f0:1b:b3:1d:b3:
24:dd:64:c7:43:c6:3a:49:a0:b4:63:9f:d8:fd:cf:
6c:d3:81:82:af:1e:e8:1a:41:ae:6f:05:1b:e7:7f:
ef:b6:ed:f6:f0:18:76:ec:a4:ad:56:e9:86:74:5c:
28:cb:4d:49:70:0a:be:e9:d2:a8:6b:bc:d8:09:64:
48:a4:c4:8d:b6:a5:b9:10:4a:27:bd:5b:b1:25:6e:
15:4a:86:1f:4b:4f:2d:66:52:7d:66:89:5a:b1:83:
8d:7d:07:b3:0b:de:3a:e9:c7:f2:68:a8:bd:79:a4:
23:41:1c:8d:e2:ee:66:ba:77:ec:de:ba:4a:5f:1a:
34:52:77:14:cb:f2:3e:63:fa:ca:e5:b2:cc:33:5a:
85:60:80:e7:a9:91:15:9b:6b:0c:ea:42:54:00:ac:
21:99:e1:bf:e8:f0:9a:33:a5:34:49:90:2e:be:d4:
f8:39:5b:a5:5a:62:2b:d5:d2:20:af:c1:67:97:ab:
bd:31:04:fe:16:b3:af:1c:25:fd:46:61:f5:ec:fc:
34:e3:4b:6c:2d:29:48:aa:8e:31:e5:58:b8:4d:d2:
1f:e8:22:9c:ef:fa:a6:7b:cd:4c:65:40:9f:3c:5b:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:6D:D1:DE:CB:BD:0A:02:25:45:C9:C8:B5:FA:86:50:99:02:39
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/BoNt0d7LvQoCJUXJyLX6hlCZAjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.179.0.0/17
78.103.0.0/16
80.111.0.0/16
84.116.0.0/16
92.235.0.0/18
94.170.0.0/15
195.34.130.0/24
195.34.132.0/22
213.47.220.0/22
IPv6:
2001:730::/29
Signature Algorithm: sha256WithRSAEncryption
2c:60:69:d2:22:15:ef:69:de:37:7d:b2:68:c5:df:b6:9a:aa:
51:e0:d0:73:5c:07:cb:fa:b4:80:7e:94:0a:cf:51:b4:97:6d:
96:bb:c7:ca:12:51:d1:a9:b8:bd:4e:9f:1c:dc:79:20:6d:71:
54:29:d8:aa:8d:65:7b:f5:4b:96:af:6a:27:e1:31:12:2b:db:
43:86:6e:cf:66:3d:18:e5:6f:84:a6:da:64:72:5c:29:a8:78:
fa:1a:2e:f6:db:97:22:2a:84:e1:71:eb:94:60:13:27:2f:fd:
15:b5:ab:8f:0d:e4:9e:4e:a2:98:46:04:78:bc:e6:a3:7e:85:
d8:a3:ec:c6:0c:ae:d3:5c:f3:c0:59:f1:e6:37:a9:99:4a:e8:
57:51:c5:3f:15:55:92:3d:d7:59:72:8b:c3:d8:d5:48:77:0d:
50:79:b1:86:b6:bb:07:66:20:1a:64:21:cc:66:3d:ee:6f:e1:
6c:d3:8c:86:52:77:7f:57:c8:9e:28:15:69:32:43:2f:3e:e0:
66:d3:1e:5e:1c:13:69:77:a5:a7:c5:08:54:59:dc:29:b3:c5:
12:d9:a2:21:2b:e9:fe:8b:18:6b:d9:75:91:84:33:35:a3:b5:
16:53:20:6c:b1:ca:36:b8:a2:fa:79:5f:0f:ec:c6:13:f8:6a:
c4:9e:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:04 2025 by rpki-client