Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/B6eS1QBgx_7uqnHEGDjPhZegZYs.roa
File: B6eS1QBgx_7uqnHEGDjPhZegZYs.roa (raw, json)
Hash identifier: LkD0Wz7Fn2yrW4i57QmlgPP9QhEvU5mbVb0zHIzXURc=
Subject key identifier: 07:A7:92:D5:00:60:C7:FE:EE:AA:71:C4:18:38:CF:85:97:A0:65:8B
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0184E6D3767D71555C31505971A8497EE987
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/B6eS1QBgx_7uqnHEGDjPhZegZYs.roa
Signing time: Tue 06 Dec 2022 09:45:28 +0000
ROA not before: Tue 06 Dec 2022 09:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49022
IP address blocks: 185.190.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:d3:76:7d:71:55:5c:31:50:59:71:a8:49:7e:e9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Dec 6 09:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a792d50060c7feeeaa71c41838cf8597a0658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:e5:71:f8:b9:7d:03:a9:4f:9d:46:91:a6:
a6:fe:41:c8:0c:5a:0d:08:14:d8:61:3b:c9:9d:f3:
58:82:37:93:f6:2e:e0:76:dc:15:19:2b:6e:dd:da:
86:6e:84:77:62:3d:4f:c6:a6:af:5e:2b:e5:38:c1:
fe:f0:11:66:bc:5c:85:82:3b:b4:2f:09:9a:8f:6c:
d0:85:9e:ed:c5:22:29:9c:3f:bf:66:77:39:48:93:
f8:c6:c6:a0:fa:d0:ce:7a:53:5e:de:2c:4b:f2:c2:
e9:28:7b:a1:57:ce:63:a8:a1:54:d9:49:2b:41:63:
89:cb:0e:97:41:de:00:53:66:7a:71:e8:4a:90:98:
ff:cb:d5:7f:71:50:f8:f9:1e:c6:f7:3f:ba:38:a6:
5c:c3:8b:e0:47:f2:68:6b:1f:98:4a:f5:07:06:2c:
c4:d3:38:b7:1c:81:ae:95:9a:91:cd:8e:57:2d:7a:
39:16:e6:ec:a3:20:63:75:24:61:aa:af:64:c7:a4:
01:f2:12:7b:14:47:64:db:45:4a:8d:3f:cc:0f:4e:
0b:fd:ab:7c:9f:d9:46:43:e6:fb:89:0f:95:9d:3f:
ca:92:64:0d:7f:6d:07:d9:a6:d2:27:94:70:e1:c4:
d4:8f:e7:49:bc:23:ef:b4:8f:1a:13:69:81:9f:fe:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:92:D5:00:60:C7:FE:EE:AA:71:C4:18:38:CF:85:97:A0:65:8B
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/B6eS1QBgx_7uqnHEGDjPhZegZYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ac:df:47:47:20:b5:ec:54:f7:18:ca:a9:a2:3c:ba:53:8f:
33:4a:55:12:dd:d2:14:91:18:be:2e:29:93:71:6c:a6:45:44:
05:85:1f:96:a2:b8:2d:e4:96:23:d1:7f:b7:7b:33:c4:e3:a5:
43:53:dc:5d:84:f0:8d:73:fb:9d:44:ac:bb:05:ec:98:dc:be:
05:9f:7c:8b:99:70:41:f0:0b:b9:53:1f:71:c4:fe:87:39:72:
6a:d7:b9:a9:91:b2:1b:bc:8f:94:e1:da:9c:ec:cb:8f:8e:7b:
56:f4:67:bb:e9:8c:10:1d:bc:b5:12:14:ca:f6:b8:51:50:0d:
51:db:cb:71:eb:cc:41:62:2d:15:3d:6f:14:4b:ea:8a:f1:15:
8b:26:0d:2e:fc:76:7a:33:46:69:fd:81:62:22:47:0c:e3:7f:
38:53:43:c0:55:50:2d:b8:ee:6d:78:6a:54:a6:a8:0e:cb:a1:
f3:dd:5b:1b:67:33:14:43:b3:28:7c:72:3e:0a:55:60:27:15:
7d:cd:60:ba:f4:40:07:8f:0b:93:9b:6e:7c:c7:ae:42:37:f2:
f7:b6:e1:24:b9:11:70:cd:97:e0:eb:af:62:0b:24:3c:9d:b8:
42:31:3b:b2:43:ec:7c:82:f0:96:68:d0:bb:36:bb:c3:6b:77:
b0:77:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:37:07 2025 by rpki-client