Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BkNgaFIM-y0jZDior5osU2q1pr8.roa
File: BkNgaFIM-y0jZDior5osU2q1pr8.roa (raw, json)
Hash identifier: 30rDQz/kUWmXtsg/KAZsrI7JDx6G0MaVVv/WNn8ErII=
Subject key identifier: 06:43:60:68:52:0C:FB:2D:23:64:38:A8:AF:9A:2C:53:6A:B5:A6:BF
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 05962966
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BkNgaFIM-y0jZDior5osU2q1pr8.roa
Signing time: Tue 25 Jan 2022 20:41:44 +0000
ROA not before: Tue 25 Jan 2022 20:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 94.177.17.0/24 maxlen: 24
93.114.83.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.104.228.0/24 maxlen: 24
89.32.127.0/24 maxlen: 24
89.21.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93727078 (0x5962966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jan 25 20:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06436068520cfb2d236438a8af9a2c536ab5a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:59:3c:54:de:ea:31:49:d0:67:13:1a:79:
eb:37:9c:bc:bf:a0:16:11:ff:26:5c:52:a0:e5:2b:
13:d1:6c:25:3b:f1:36:4e:e4:62:00:be:b8:b3:d4:
ba:29:49:85:e2:e5:bd:2f:df:49:0d:f3:27:05:cc:
c5:94:83:67:c0:d7:d2:8e:fc:0a:82:3d:53:a0:10:
f8:95:cd:ac:51:34:b3:a5:71:27:9d:f7:fc:23:96:
d6:96:8a:bc:e9:8b:85:ad:57:5c:46:98:a4:0b:3b:
5c:e9:10:82:fc:fc:ce:d6:b2:29:5e:e5:47:60:f8:
68:c7:ce:87:a6:79:30:14:79:f9:37:a5:49:66:99:
1c:08:68:b7:e7:fa:cd:b9:b5:1e:19:39:3f:95:df:
e6:58:52:cd:04:31:ee:5b:4d:09:db:36:83:d9:e6:
15:1c:eb:27:93:00:81:07:b6:c3:1f:87:90:11:f5:
b3:6b:cb:0c:2e:e6:4a:d8:11:00:dd:2a:26:fb:94:
87:f7:96:fa:36:fa:e9:c5:dc:cd:68:9a:1a:d5:d1:
23:0d:80:b6:0f:af:d4:5f:ba:4e:cf:4d:c3:56:d0:
d5:6b:81:ec:92:ed:eb:d7:2e:f7:40:ee:69:ea:1d:
05:62:c1:38:45:fa:de:71:1e:29:4c:c8:3f:d9:42:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:60:68:52:0C:FB:2D:23:64:38:A8:AF:9A:2C:53:6A:B5:A6:BF
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BkNgaFIM-y0jZDior5osU2q1pr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.228.0/24
89.21.64.0/22
89.32.127.0/24
93.114.83.0/24
93.114.129.0/24
94.177.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:83:01:2a:88:c7:48:7c:95:80:ac:c7:43:45:93:40:1f:da:
4a:c2:91:62:4f:ae:9a:09:e7:e9:67:90:2f:48:43:a0:3f:be:
9f:05:45:d6:fc:d9:ea:04:90:33:82:f5:78:1a:f1:52:f2:47:
75:a0:25:69:48:59:aa:29:f3:b6:62:11:da:19:31:f6:6e:23:
f3:0a:c4:54:8c:0a:20:22:b8:82:1a:c3:7e:e7:40:83:5a:f9:
18:80:7f:75:40:56:64:87:dc:dc:2d:5d:4e:4d:cf:1e:e0:9b:
a5:65:fb:64:79:17:f8:af:16:3b:54:d9:90:af:40:dc:c4:cf:
7b:7f:42:ee:83:2d:b3:0a:67:74:90:32:7d:c0:75:13:3b:89:
5f:e6:3a:89:ec:b9:ff:82:cf:b2:0a:a9:8e:8d:02:1e:ef:6b:
62:13:5b:27:9e:18:7f:2d:16:ae:88:0a:30:96:99:ce:ee:85:
50:0d:db:2c:84:1a:93:df:44:39:e2:83:49:f8:ea:10:d8:8a:
37:97:33:a6:11:ae:37:db:c2:00:d1:d8:12:87:99:20:5a:57:
2f:04:b9:c4:ca:7b:3f:8d:e9:75:39:d0:a1:e6:e1:dd:f8:5b:
98:70:11:9e:c7:75:39:8b:af:fa:98:22:df:9e:81:88:21:62:
91:9f:29:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:49 2025 by rpki-client