Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/bZrVS8WuW53ASxE4okDBpBOCwh0.roa
File: bZrVS8WuW53ASxE4okDBpBOCwh0.roa (raw, json)
Hash identifier: w2PEwykH39C/1+UmhN82v6h+HaE/QVQsyCE9ab/AZNI=
Subject key identifier: 6D:9A:D5:4B:C5:AE:5B:9D:C0:4B:11:38:A2:40:C1:A4:13:82:C2:1D
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0194B75630900B9FAAD12A90D80DE1F59F0C
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/bZrVS8WuW53ASxE4okDBpBOCwh0.roa
Signing time: Thu 30 Jan 2025 13:11:06 +0000
ROA not before: Thu 30 Jan 2025 13:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
195.167.184.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:56:30:90:0b:9f:aa:d1:2a:90:d8:0d:e1:f5:9f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jan 30 13:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d9ad54bc5ae5b9dc04b1138a240c1a41382c21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:0f:96:21:5e:09:95:e7:68:6b:4e:19:3d:
bf:d9:23:38:5d:0a:d4:b1:e6:6d:98:b0:e3:e6:9f:
fa:37:ad:08:61:82:66:5a:c9:be:1e:17:17:0b:cc:
94:78:81:71:be:31:aa:f2:ce:34:83:67:2f:ac:ed:
b4:e0:f2:e6:a2:e4:9c:05:71:53:1c:e9:ea:f4:aa:
27:0f:11:92:d1:61:fc:e2:1d:52:9e:4a:a4:ee:ea:
65:2b:ad:ff:c1:21:79:f0:fd:5c:c1:55:af:d3:9c:
85:6d:78:be:e5:bd:ea:9f:92:e7:b8:22:11:b9:e0:
16:aa:e2:8b:a8:e6:c1:36:49:87:2e:fd:64:dd:bf:
14:44:01:0b:44:84:55:90:d7:af:ac:fb:b4:e6:60:
3c:e5:38:b5:fe:ea:6b:0a:8c:30:88:90:8b:2e:ce:
01:d6:77:47:90:55:80:0b:b6:61:c6:fb:1b:48:3d:
8b:60:a8:f5:5b:5e:6f:83:c2:69:29:43:a0:41:35:
61:a4:53:99:d6:28:ae:c6:c4:08:0b:72:80:e5:8e:
b6:7c:cb:d6:e4:ea:00:77:91:c4:08:e2:1f:89:24:
93:fd:ac:7f:f8:4c:70:c3:54:d3:03:2e:dd:f2:b5:
fa:1f:3e:ce:e4:98:8f:62:0a:a5:35:b3:43:63:22:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:D5:4B:C5:AE:5B:9D:C0:4B:11:38:A2:40:C1:A4:13:82:C2:1D
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/bZrVS8WuW53ASxE4okDBpBOCwh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
80.252.120.0/22
103.110.208.0/22
109.224.248.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.138.0/24
195.167.181.0-195.167.182.255
195.167.184.0/24
209.42.4.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
c4:9f:92:be:31:63:1e:fc:ca:98:31:84:35:26:ff:5f:af:57:
fe:fa:74:75:81:62:75:0f:81:5f:74:27:b3:60:82:df:15:3f:
3e:cd:99:93:a3:dd:c2:0b:30:c2:d8:c9:b8:88:a1:81:f1:57:
74:96:52:64:3d:ae:7b:02:c6:f2:b1:8d:4c:c1:b6:4f:55:8a:
d3:cc:f9:29:af:a2:c6:2d:0a:f1:7f:aa:0f:3f:f0:35:cd:ab:
91:d8:f1:ae:57:64:67:e7:70:94:d3:32:62:b8:34:7c:c2:fa:
fa:76:0e:cf:4e:52:30:40:a9:24:ab:17:a6:5b:1b:5a:b8:48:
e5:64:68:0f:5d:31:1b:71:33:14:09:ea:44:51:8d:c6:f2:3d:
c6:45:1c:0c:98:55:4b:09:ea:97:ad:bc:89:da:17:d7:72:c5:
1b:ef:0e:9d:98:c6:21:02:01:96:33:dc:48:bb:75:c2:a7:54:
5f:f9:07:a8:0b:7e:89:e0:e1:85:83:e3:30:cc:ea:2e:10:83:
3a:8c:c3:0a:a9:3a:ff:cd:e6:dd:b9:9d:ea:19:a7:a3:b8:68:
f2:49:55:55:b3:f9:49:54:10:db:ff:53:b3:54:9d:15:3a:29:
06:22:d8:ae:01:f3:59:cb:97:24:6a:6e:97:5c:39:5b:ed:3a:
f4:2e:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:59 2025 by rpki-client