Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa
File: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (raw, json)
Hash identifier: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=
Subject key identifier: 6E:AA:7A:7F:D1:A3:63:94:C5:E7:04:F1:39:E2:BC:26:2F:98:AE:41
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 019424B2AB8D572932E1D40C36D3E502B41A
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa
Signing time: Thu 02 Jan 2025 01:47:56 +0000
ROA not before: Thu 02 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 185.202.113.0/24 maxlen: 24
195.248.240.0/24 maxlen: 24
195.248.241.0/24 maxlen: 24
195.248.242.0/24 maxlen: 24
195.248.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ab:8d:57:29:32:e1:d4:0c:36:d3:e5:02:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jan 2 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eaa7a7fd1a36394c5e704f139e2bc262f98ae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:99:d5:53:e4:64:b9:ed:bc:3b:eb:be:a3:
32:5b:27:d9:13:70:56:91:8e:ee:ad:31:75:19:1b:
20:2d:dc:cb:fd:ad:aa:59:c4:89:69:03:ea:32:e5:
e7:d0:1f:e5:f9:b0:53:a5:aa:13:4f:47:c0:1d:82:
49:7f:30:1c:10:ed:eb:22:6e:89:e7:1d:84:81:89:
1f:77:e6:27:7d:da:ce:41:ac:63:3b:8d:05:c8:a8:
01:37:f7:d0:29:45:aa:7b:3a:a1:8b:70:d7:8c:a4:
67:da:91:4d:d2:d1:4c:11:34:b0:c2:46:94:8a:73:
14:01:a9:51:5a:8b:30:1a:0a:be:2d:8c:c9:0e:84:
b8:e2:6d:98:6e:72:e3:c5:64:86:e8:aa:fb:3d:ca:
b8:45:e4:85:ec:f9:9f:a8:c3:14:fe:a8:26:55:a6:
53:97:93:5c:f1:1d:a5:08:58:4f:5e:67:e6:2a:75:
ab:8a:7d:e5:4f:5b:32:65:01:fa:0f:6d:0f:12:b3:
bf:d4:c3:f4:b4:fa:e8:2f:52:c3:75:b8:78:64:d7:
e1:cb:19:a1:2b:06:d1:87:d0:cb:12:df:1e:ee:9b:
87:15:1c:6b:6e:35:c3:70:66:78:fd:b8:fc:98:52:
74:6a:c7:36:16:ec:36:4b:24:be:42:d8:86:98:9d:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:7A:7F:D1:A3:63:94:C5:E7:04:F1:39:E2:BC:26:2F:98:AE:41
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.113.0/24
195.248.240.0/22
Signature Algorithm: sha256WithRSAEncryption
37:cd:25:f9:f8:da:10:35:93:84:a8:d8:78:03:0b:e0:ef:50:
28:e8:b5:68:c7:b1:ca:01:9d:60:fa:1d:6e:99:55:82:0b:48:
fc:8e:5f:1c:13:a7:40:bd:36:78:0a:15:b1:f4:85:ad:67:37:
ae:77:ec:ed:f1:5b:70:f0:75:34:ae:c0:c5:03:66:9f:3f:1c:
c5:db:81:17:72:34:8c:cb:f0:d3:53:57:fc:1a:1b:31:15:09:
e8:3a:8b:0d:49:49:e5:26:5b:2a:90:74:1c:d3:81:db:db:91:
f3:f4:b2:e9:2b:77:0b:75:8d:e3:41:75:6c:0d:1e:76:c2:4d:
67:52:38:91:3e:25:56:06:8c:67:a7:31:c7:0c:e8:c6:55:75:
96:5e:36:c0:98:8f:95:16:d8:e2:88:9c:22:a7:16:db:8a:af:
57:02:1e:1e:59:1a:c1:e4:12:5a:a2:db:b4:6a:cf:ee:ce:9a:
12:2d:de:77:e2:ab:32:ad:99:9c:42:d0:f2:c2:4f:d6:9a:ed:
be:b9:c2:a9:d1:57:4e:6f:53:da:0d:06:69:1f:b5:b7:5e:8b:
f8:bb:fb:7d:7a:2b:2b:29:10:e2:b2:33:da:be:47:85:82:7e:
c2:5c:cc:ee:26:c0:ae:10:31:10:2d:96:9b:41:f6:97:d0:a6:
34:91:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:55 2025 by rpki-client