Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bSKF4VwooFMbxKgLiCU0SQx_pdU.roa
File: bSKF4VwooFMbxKgLiCU0SQx_pdU.roa (raw, json)
Hash identifier: 6FTyl2dLsU56FvR+R1gGj60wHte2yEaImNojMX7q73I=
Subject key identifier: 6D:22:85:E1:5C:28:A0:53:1B:C4:A8:0B:88:25:34:49:0C:7F:A5:D5
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 01945541ECD3194E2C48608A0969680493ED
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bSKF4VwooFMbxKgLiCU0SQx_pdU.roa
Signing time: Sat 11 Jan 2025 12:06:11 +0000
ROA not before: Sat 11 Jan 2025 12:06:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48407
IP address blocks: 81.90.16.0/20 maxlen: 20
81.90.18.0/24 maxlen: 24
81.90.19.0/24 maxlen: 24
93.94.50.0/24 maxlen: 24
93.94.53.0/24 maxlen: 24
93.94.55.0/24 maxlen: 24
2a00:8b20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:55:41:ec:d3:19:4e:2c:48:60:8a:09:69:68:04:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 11 12:06:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2285e15c28a0531bc4a80b882534490c7fa5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:ce:68:78:14:50:06:f3:fb:c6:9d:31:d7:
57:b8:be:a8:99:b3:ac:14:8d:2f:e4:e1:92:1e:a4:
0a:db:1d:05:94:5b:6a:03:9f:34:9c:d6:42:03:27:
cf:b5:e4:21:54:92:9e:9d:34:a0:23:d3:0e:bf:74:
a5:04:76:ea:38:01:ad:a2:43:7a:37:c7:bc:07:d7:
20:05:ce:0c:99:55:90:e7:e5:99:2f:51:05:8c:cd:
5f:4a:db:17:d6:ea:90:01:b0:52:7c:c4:06:82:c9:
99:17:8c:07:97:8b:cb:b7:41:7e:94:b1:c9:ec:4e:
7b:89:7a:a3:79:2c:77:7a:a8:d2:84:ca:da:ca:ae:
2e:23:89:9d:ff:ec:a5:e1:cb:28:8f:66:37:a9:06:
f1:21:1d:6f:0d:65:c6:7d:53:9e:2d:d2:df:93:67:
9b:e0:5d:44:fe:e1:c2:58:01:52:6b:e7:f1:de:e4:
48:35:9d:ff:d9:41:0a:d5:cd:0f:9d:7e:6e:ad:f9:
86:78:70:74:97:fb:a5:73:16:f0:f0:f5:7b:aa:aa:
f1:68:19:34:3c:a9:89:ec:13:e6:a9:d1:19:a3:0d:
83:70:3b:30:3d:79:61:f0:f1:e8:05:5e:93:1c:ae:
a5:bb:1a:e4:c0:8f:42:f5:23:cb:8f:8c:63:00:41:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:85:E1:5C:28:A0:53:1B:C4:A8:0B:88:25:34:49:0C:7F:A5:D5
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/bSKF4VwooFMbxKgLiCU0SQx_pdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.16.0/20
93.94.50.0/24
93.94.53.0/24
93.94.55.0/24
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
95:c3:aa:1f:e9:13:fd:22:0e:97:c7:2f:a6:b0:ba:38:ea:20:
66:aa:ff:9c:f3:93:e6:4b:33:3d:c2:ec:b4:90:1c:04:55:60:
88:17:0b:e3:27:1e:9f:af:dc:ed:c7:2b:47:b1:9c:54:bd:ae:
25:f6:4b:af:65:f4:a2:07:8a:24:97:6a:da:06:cf:1a:8c:82:
bf:23:28:4b:ad:bc:4b:70:ad:23:fa:20:32:7f:e0:0b:e1:69:
47:70:7a:eb:1f:fb:49:42:00:05:0b:ba:03:a6:9a:a6:3d:9d:
98:d9:ba:16:05:67:10:ee:de:6f:a2:c1:30:27:98:53:57:22:
d8:ae:85:8c:75:2b:41:17:f1:1b:8a:ea:28:68:2e:92:a7:8f:
b9:80:f4:f3:02:96:28:ef:e6:57:f8:79:f2:0f:b4:07:e3:ae:
78:86:a3:42:f2:9a:0a:8d:f7:99:08:a2:f0:2a:2d:7e:2e:60:
0a:8a:b3:cf:ce:2a:7d:bb:ff:8b:82:72:af:05:53:5a:b2:a0:
b4:96:2b:40:4d:e0:6d:86:d3:8a:15:7e:19:48:6f:c8:56:d4:
78:1e:91:c8:0b:ff:74:c0:41:f2:1e:74:fe:5e:c7:26:4b:9e:
5a:c6:47:6e:94:0b:43:a2:43:a7:f2:9c:18:89:9c:ac:e3:50:
13:2b:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:07:52 2025 by rpki-client