Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/xp6ZnBnr4EIKJRFe8-j3g8PXG2M.roa
File: xp6ZnBnr4EIKJRFe8-j3g8PXG2M.roa (raw, json)
Hash identifier: cY7wxGl+n23jiaDxGLQhmDbUsdiIhsBFSK2ehoTTqTk=
Subject key identifier: C6:9E:99:9C:19:EB:E0:42:0A:25:11:5E:F3:E8:F7:83:C3:D7:1B:63
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019427488EB0ACA2554D6F269C3DAD8DFF9F
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/xp6ZnBnr4EIKJRFe8-j3g8PXG2M.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34219
IP address blocks: 93.94.4.0/23 maxlen: 23
159.253.112.0/22 maxlen: 22
159.253.116.0/23 maxlen: 23
159.253.118.0/24 maxlen: 24
159.253.119.0/24 maxlen: 24
178.255.16.0/22 maxlen: 22
178.255.20.0/23 maxlen: 23
178.255.22.0/24 maxlen: 24
185.2.56.0/22 maxlen: 22
2a03:1e00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:b0:ac:a2:55:4d:6f:26:9c:3d:ad:8d:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69e999c19ebe0420a25115ef3e8f783c3d71b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:73:1c:14:e9:38:b0:d6:55:a4:bd:94:d6:
49:ae:65:4f:81:1a:33:eb:28:47:31:63:c7:85:10:
6a:1c:55:6f:ff:4a:1c:0c:6f:8e:6f:6f:bf:f9:9c:
09:d7:d0:1e:5a:30:a5:53:c8:be:40:d7:cb:48:54:
56:ac:0e:c6:a1:53:fa:aa:d3:4c:6c:29:65:29:3d:
a4:05:4c:b6:df:5c:17:6d:c9:62:71:39:13:f3:be:
4e:c8:b0:c6:bb:39:70:cd:66:8b:a9:b5:df:ea:90:
f6:7c:3a:4b:e1:f0:17:9d:20:03:ca:0b:28:cc:0f:
01:bb:bd:72:aa:80:aa:12:92:bd:7c:94:61:4c:67:
19:52:35:b9:ca:0a:f7:6e:5b:1d:b6:5d:6b:58:9d:
41:bb:7f:3f:a4:fa:41:6c:a9:83:4f:6a:ee:41:4b:
01:5f:7b:e4:53:21:8a:a4:22:26:2f:16:87:18:56:
96:7a:38:73:b0:70:f1:81:83:38:f2:9a:cf:2f:cc:
cd:18:5b:52:70:1f:82:49:30:ba:7f:f0:a5:21:2a:
b1:d6:cd:31:11:ca:e6:c9:45:45:2e:12:ea:91:6a:
a8:87:46:d2:e0:90:de:d1:c0:f0:dc:25:d9:14:01:
d1:8a:52:81:73:44:1c:de:6a:15:b6:ac:ef:87:1f:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:99:9C:19:EB:E0:42:0A:25:11:5E:F3:E8:F7:83:C3:D7:1B:63
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/xp6ZnBnr4EIKJRFe8-j3g8PXG2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.4.0/23
159.253.112.0/21
178.255.16.0-178.255.22.255
185.2.56.0/22
IPv6:
2a03:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
06:14:bd:9f:69:0c:fc:6d:3e:df:01:33:da:58:0e:82:46:ab:
05:0b:37:ba:c7:44:6c:bf:eb:c6:e8:f7:2d:c5:63:e3:8e:07:
64:69:c2:3e:98:95:12:dd:32:b8:f6:0c:cc:fe:5a:c2:85:a0:
86:78:de:43:bf:61:6b:8b:15:a9:c9:ba:4f:a0:3e:e0:6c:a5:
d6:a8:67:20:ba:c8:9d:ab:14:b7:85:0c:e9:55:69:d7:5c:ac:
1a:11:11:63:83:f5:2f:24:cd:e6:7d:1c:40:3d:96:47:9f:fc:
fa:8c:b3:e7:47:7a:22:2f:6f:d3:db:0d:eb:88:40:f5:b3:56:
91:d9:1a:5d:66:45:48:25:30:b4:91:7d:af:f8:a2:41:8e:a9:
53:7d:da:97:31:14:75:14:85:95:41:05:15:4b:4c:cf:8f:54:
9a:e5:3d:b5:7b:18:c0:51:c8:ca:09:46:71:3d:cb:1e:db:f6:
b5:db:98:21:83:99:1c:a8:8c:de:de:a6:f2:04:21:7f:1b:32:
7b:2f:b0:70:b8:5e:4e:d4:7f:06:e0:86:e3:ed:f4:ab:f7:e2:
32:93:ca:75:c3:b1:78:ef:0c:41:f9:23:d9:53:30:c1:3c:00:
a6:5f:42:0e:47:a3:e5:bd:1e:53:61:8b:02:4d:8e:6d:45:b9:
0b:2c:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:28 2025 by rpki-client