Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BiaUFI7mtFx6GB0CmBa8l0IOo0g.roa
File: BiaUFI7mtFx6GB0CmBa8l0IOo0g.roa (raw, json)
Hash identifier: /FrgqG1qWdI6mz/HTI3qK99IFRPgqld4Cs8VDMzu47s=
Subject key identifier: 06:26:94:14:8E:E6:B4:5C:7A:18:1D:02:98:16:BC:97:42:0E:A3:48
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0195D6B34D052632444217E732FC25356552
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BiaUFI7mtFx6GB0CmBa8l0IOo0g.roa
Signing time: Thu 27 Mar 2025 08:23:49 +0000
ROA not before: Thu 27 Mar 2025 08:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.80.0/24 maxlen: 24
5.35.81.0/24 maxlen: 24
37.233.81.0/24 maxlen: 24
83.222.22.0/23 maxlen: 24
89.169.36.0/23 maxlen: 24
90.156.252.0/23 maxlen: 24
91.218.140.0/24 maxlen: 24
91.218.141.0/24 maxlen: 24
178.236.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:b3:4d:05:26:32:44:42:17:e7:32:fc:25:35:65:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Mar 27 08:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=062694148ee6b45c7a181d029816bc97420ea348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:25:33:a5:8a:95:d8:7e:07:86:4e:7d:16:4e:
3f:9e:02:9e:1d:82:dd:e7:dc:22:08:a9:de:ff:17:
eb:0a:74:32:54:e5:5b:af:52:e2:90:89:e8:d7:10:
42:9f:6c:85:ac:d5:a8:6e:9f:a9:0d:f5:37:e2:75:
03:2a:f1:d2:8c:24:63:16:43:3f:0b:59:12:9e:8a:
8d:69:01:9b:80:37:02:29:39:e6:79:c6:be:9f:3b:
15:aa:5f:b7:66:e2:80:1d:08:75:c2:fc:39:18:ff:
6a:18:6c:2d:d0:2d:b8:e6:43:a8:a4:6b:f0:9a:d8:
5f:b7:62:56:eb:af:b9:4c:8c:cf:11:cf:75:61:4e:
fc:20:00:cb:8f:f6:81:0a:2b:f5:05:48:19:b9:c4:
ae:2a:59:90:23:4b:f5:84:7d:54:4a:de:a8:80:c5:
3a:55:4f:f7:90:f5:21:23:e7:88:01:5e:c5:f0:f9:
f3:97:77:06:81:7b:bd:fa:97:b6:33:ec:d6:75:d2:
70:a6:c5:6a:09:d7:15:32:c9:87:17:e2:c1:31:fe:
75:e2:9c:8d:4c:27:8c:32:6b:6d:1f:70:50:7a:41:
98:bf:2b:a7:ef:ea:8e:be:d6:a8:a5:0f:af:0b:c6:
ef:97:df:65:70:0f:64:07:80:21:56:92:80:0e:93:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:94:14:8E:E6:B4:5C:7A:18:1D:02:98:16:BC:97:42:0E:A3:48
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/BiaUFI7mtFx6GB0CmBa8l0IOo0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
37.233.81.0/24
83.222.22.0/23
89.169.36.0/23
90.156.252.0/23
91.218.140.0/23
178.236.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:95:68:49:8b:9c:bb:07:c3:6d:2b:97:ec:15:b2:77:fe:30:
7c:dd:de:df:e7:df:d6:6b:5b:61:2c:34:e9:e3:22:64:aa:03:
46:26:d8:24:c9:17:f8:a1:c9:3d:05:e5:f5:b8:d2:d4:05:ab:
6a:52:24:a9:87:b3:1a:e3:8b:65:73:24:99:5a:7b:e9:7b:34:
d7:58:21:db:4f:65:5e:e4:42:43:81:f8:45:c9:3f:86:69:98:
72:ae:25:d2:8a:3e:37:24:4c:6f:55:41:dc:25:91:de:2c:64:
f8:ee:03:20:be:34:07:bd:dc:2e:24:04:a7:56:37:d9:1b:2d:
77:f6:1f:35:88:ba:dc:9f:e8:e1:6a:ea:f8:53:e0:a4:5c:ec:
14:e9:9b:5f:28:85:8b:68:17:71:3b:fd:68:ba:b2:b4:c2:e0:
ed:b7:d1:98:de:3a:da:00:19:23:a0:7b:b0:de:e4:6d:8b:25:
bc:09:c9:10:52:77:63:b4:b2:92:3d:8b:4c:5e:72:c4:39:ec:
c9:d8:19:a4:a6:f9:a4:6d:a8:8a:54:ab:16:6d:26:bd:81:65:
1d:67:03:e3:7b:31:88:bc:a6:23:cc:a3:d0:1b:e8:6b:31:20:
44:1f:51:7e:e0:f5:55:29:7e:aa:fe:4d:63:4b:c0:ae:3a:f0:
01:b4:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:35 2025 by rpki-client