Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/bW9q1xazXYiVEag1HYCLt--dBC0.roa
File: bW9q1xazXYiVEag1HYCLt--dBC0.roa (raw, json)
Hash identifier: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=
Subject key identifier: 6D:6F:6A:D7:16:B3:5D:88:95:11:A8:35:1D:80:8B:B7:EF:9D:04:2D
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 0195F6FF6DDA0CD6BDD57636892D437F6979
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/bW9q1xazXYiVEag1HYCLt--dBC0.roa
Signing time: Wed 02 Apr 2025 14:54:49 +0000
ROA not before: Wed 02 Apr 2025 14:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202513
IP address blocks: 87.239.52.0/22 maxlen: 24
185.147.16.0/22 maxlen: 24
2a10:4e80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:ff:6d:da:0c:d6:bd:d5:76:36:89:2d:43:7f:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Apr 2 14:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d6f6ad716b35d889511a8351d808bb7ef9d042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bf:d9:27:38:ce:85:9d:82:6b:1f:ba:40:52:
20:e5:24:80:05:ef:38:36:54:ff:e2:e0:04:36:a9:
e4:10:2c:b6:c2:b7:a0:b4:3e:17:a5:76:2c:4a:84:
83:0f:5e:39:4e:43:28:a5:9b:a0:97:91:31:a0:b8:
12:e2:a7:54:71:ff:90:6f:33:fd:03:45:12:99:a9:
f3:b0:f1:4e:a0:88:a9:50:79:92:15:0e:ec:26:69:
37:67:ae:d4:16:6b:9b:cd:77:5a:b4:bf:85:41:2b:
48:5c:01:a6:12:8b:3e:c9:17:6b:8b:41:f0:eb:fa:
32:7e:28:42:e6:6d:e6:a1:e1:e1:32:cd:39:9f:aa:
70:8c:3b:c0:a5:aa:39:15:26:bb:17:90:82:0d:f9:
90:be:fd:2d:27:6a:05:cd:3e:26:80:57:cb:37:a0:
04:4e:e6:d5:d0:cf:40:32:95:8a:c8:b3:f8:ff:80:
d3:53:1c:10:55:b6:36:12:5c:02:9d:42:09:cb:39:
14:fd:7f:aa:d2:8d:45:1a:79:50:ed:60:87:a4:c2:
44:42:bd:6b:a5:e3:32:b2:a1:22:83:41:74:09:9d:
c6:9e:41:89:62:a9:10:35:f4:5f:2d:b4:8f:32:99:
a7:34:cb:e5:24:dc:ae:05:c0:03:3d:b3:0e:28:30:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:6A:D7:16:B3:5D:88:95:11:A8:35:1D:80:8B:B7:EF:9D:04:2D
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/bW9q1xazXYiVEag1HYCLt--dBC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.52.0/22
185.147.16.0/22
IPv6:
2a10:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
77:fc:1e:73:c5:65:a9:af:08:b7:fa:c7:fa:2d:8a:34:dd:08:
2f:a6:c7:4e:b5:fa:59:5e:8d:da:d4:da:94:ea:7b:2c:93:c8:
79:6d:e0:93:e9:ba:20:b5:10:23:12:da:36:fc:d9:6c:3a:f0:
ae:96:4e:a9:3f:88:df:d6:cd:18:51:cb:ba:b5:a6:e8:e5:53:
15:2f:ec:ab:80:8e:df:9a:4e:87:a1:11:71:c8:54:76:25:b8:
b5:5d:fb:50:32:3b:20:bc:a8:44:33:66:7c:3d:b8:3e:bd:42:
75:45:1c:3d:de:6a:22:be:11:0c:75:7d:dd:52:5c:ce:36:87:
a3:4e:30:6d:b9:6a:9f:e4:43:ab:bc:77:d2:f2:39:37:8b:dc:
ae:4a:e5:03:a2:5a:5f:2d:fe:88:ab:8a:55:4c:87:d2:4c:1b:
70:d1:a3:c1:c2:94:da:35:4a:52:68:1f:25:7d:11:4c:e9:3e:
75:94:ea:f9:ef:6b:cb:a1:92:05:b0:4a:ee:13:83:0a:0a:3b:
d9:e2:41:a9:ae:6a:ed:68:b5:e0:01:d8:6f:c8:d9:c1:15:3d:
d8:ac:eb:b9:60:7b:38:bd:55:48:42:99:7d:84:93:22:d4:be:
cf:c9:62:29:58:25:1d:4f:60:c3:25:fa:e2:17:78:ce:5f:c3:
4e:80:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net