Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa
File: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (raw, json)
Hash identifier: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=
Subject key identifier: 6D:29:D6:1D:C7:7E:E8:84:F1:DA:2F:8E:98:6D:53:F2:16:14:14:14
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 019422FB7D2D3312B68CAD22517721D1587A
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa
Signing time: Wed 01 Jan 2025 17:48:14 +0000
ROA not before: Wed 01 Jan 2025 17:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210246
IP address blocks: 109.196.32.0/21 maxlen: 32
109.196.41.0/24 maxlen: 32
109.196.43.0/24 maxlen: 32
109.196.44.0/24 maxlen: 32
109.196.46.0/23 maxlen: 32
193.31.76.0/22 maxlen: 32
2a0d:6040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7d:2d:33:12:b6:8c:ad:22:51:77:21:d1:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d29d61dc77ee884f1da2f8e986d53f216141414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:ec:30:94:0c:09:39:1c:0e:ef:ac:06:22:
68:28:21:f2:fe:45:b7:4a:46:cc:d7:17:ce:b5:28:
52:5c:17:3b:2b:39:f8:7d:92:ed:bc:aa:3c:f6:65:
df:92:fb:46:f8:d0:1c:60:23:a1:94:e8:28:2e:6b:
d1:92:81:dc:7d:29:45:12:48:28:56:bc:3d:a1:2f:
04:dd:68:c3:0e:92:ee:05:bc:4a:9e:d3:dc:d9:1b:
a5:54:1f:00:95:6e:fc:2a:67:50:10:c8:25:7a:1a:
81:dd:0e:3b:08:75:07:43:ee:e0:1f:b8:c9:87:49:
ed:35:8f:2e:37:df:69:c8:0f:89:f0:2e:ac:32:77:
f5:25:f3:cd:d0:22:21:d2:16:ea:09:c5:e1:fc:04:
03:51:e1:96:b7:d7:a4:48:f5:8b:c0:9e:f4:64:03:
e6:58:6c:ff:4a:81:15:fe:78:cb:06:df:2d:07:a3:
f7:cb:1e:0b:74:d6:5c:50:d3:3a:9d:f1:66:ea:f2:
6a:11:8a:e1:00:55:ee:1c:68:60:be:25:03:86:0a:
40:b9:7f:6d:5f:3f:79:e2:73:7c:ed:e2:93:23:8e:
64:1c:c5:88:e3:43:8b:0c:7b:3e:4f:f1:99:a3:85:
92:1e:53:46:37:ce:76:42:45:7a:7b:dc:7f:a7:a8:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:D6:1D:C7:7E:E8:84:F1:DA:2F:8E:98:6D:53:F2:16:14:14:14
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.196.32.0/21
109.196.41.0/24
109.196.43.0-109.196.44.255
109.196.46.0/23
193.31.76.0/22
IPv6:
2a0d:6040::/29
Signature Algorithm: sha256WithRSAEncryption
5e:a5:c8:be:4d:15:2e:67:f0:1d:ed:43:b3:59:95:09:6d:fd:
57:96:85:a1:da:af:09:86:67:35:1c:9d:91:9e:63:98:da:63:
95:13:d5:02:3a:6f:12:6c:36:e4:52:74:a1:b0:51:0c:9b:87:
e8:bf:c7:28:2e:7f:ac:d0:14:71:b8:a5:3b:b9:e6:05:11:b9:
f8:6c:36:dd:97:b2:94:2f:df:29:08:a3:fe:f6:8b:ef:fb:f7:
ee:53:cd:30:1f:b2:92:c1:d1:b7:0a:22:66:c2:41:31:b5:ed:
85:74:db:da:52:19:d9:af:7f:43:71:4e:42:10:be:25:66:df:
5f:61:95:3e:51:f4:e6:90:a0:55:bb:2b:e8:24:cb:c9:2a:07:
26:95:c0:18:61:13:c1:60:ca:4d:bc:b9:56:df:c7:9a:a7:bd:
a7:74:16:51:13:9c:8e:36:a0:6b:15:14:7e:db:b4:20:cd:19:
c9:67:87:37:1a:7b:f1:b7:f4:30:17:90:53:f5:a3:de:33:02:
4e:28:be:31:1f:7e:c3:62:06:89:5f:05:17:01:8d:46:d6:33:
30:c3:68:a8:d9:40:1c:ab:1b:65:7e:77:ce:6f:59:96:c0:72:
0c:ef:85:c7:f2:f4:5c:2c:a9:ab:fb:07:bd:3d:67:b5:f3:a6:
1d:21:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net