Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa
File: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (raw, json)
Hash identifier: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=
Subject key identifier: 6E:0F:37:0A:C6:C0:42:24:F2:C4:7C:CA:73:40:81:4F:6B:0D:7B:54
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0194266B24EDF12376B8424D6F66591E0DB7
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa
Signing time: Thu 02 Jan 2025 09:49:03 +0000
ROA not before: Thu 02 Jan 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35540
IP address blocks: 109.190.0.0/16 maxlen: 16
151.127.0.0/16 maxlen: 16
2001:41d0:fc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:24:ed:f1:23:76:b8:42:4d:6f:66:59:1e:0d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0f370ac6c04224f2c47cca7340814f6b0d7b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:c8:94:b3:00:13:25:51:d6:e0:ce:bf:68:
8d:5f:de:f5:32:80:d8:c1:fa:c1:4b:cb:ff:99:c4:
50:d6:cf:c0:9c:39:a5:07:4d:ae:48:7f:f4:73:94:
11:fc:4a:68:38:1e:a8:29:14:02:94:55:81:90:83:
df:b8:b5:00:05:eb:0f:8c:ea:55:1e:c6:cd:8c:72:
c9:d2:5f:e8:a5:50:2f:95:5c:1a:84:83:1e:2d:d2:
9d:cf:2f:f2:fc:5f:cd:21:5f:51:bd:04:79:c1:1c:
ab:6b:86:39:60:f7:12:48:68:fb:f6:42:8b:8e:bd:
5d:a0:0a:33:36:76:6c:a4:df:67:08:e6:5a:c8:05:
ca:02:2b:e2:52:0d:57:97:dc:9a:4d:63:9c:b5:ae:
7e:d8:38:fc:7a:05:e8:7d:4c:18:20:62:59:43:04:
65:f5:f7:6f:6b:99:98:fe:57:58:fd:f3:d2:9c:b4:
69:f2:20:ec:46:76:4a:72:9b:e4:c3:2b:9f:60:34:
33:58:31:f3:4b:a7:b5:da:f4:a3:c8:ed:bf:9b:61:
37:7f:ea:c1:17:0d:a0:6f:c3:43:ed:82:53:da:38:
28:ce:c7:a0:c1:90:bb:0d:be:a6:ae:94:a8:5a:03:
5b:a2:fd:ba:37:0c:02:8b:96:53:1b:a9:34:45:85:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0F:37:0A:C6:C0:42:24:F2:C4:7C:CA:73:40:81:4F:6B:0D:7B:54
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.190.0.0/16
151.127.0.0/16
IPv6:
2001:41d0:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
00:5e:2b:9d:93:d9:06:73:f5:4d:61:d7:41:b2:3e:c4:7a:c3:
7b:79:83:f2:a1:77:3e:b8:85:bd:2f:dd:c5:63:98:a8:8d:90:
a1:6b:42:56:78:f5:37:28:d3:b6:a5:a3:c9:c6:2b:c0:eb:2a:
8d:c9:c9:f6:b7:64:d5:fd:80:00:6f:a9:b2:dd:7d:7f:0b:46:
3e:b9:f7:4e:d1:0f:57:49:04:03:1f:de:9d:66:91:6f:66:33:
21:ce:6f:a6:2f:d1:a9:8d:11:14:bc:b4:13:e5:c3:5b:f1:15:
11:58:35:29:89:4f:22:ba:70:bd:52:3c:c5:be:7b:59:d0:15:
bf:22:37:0f:39:10:9f:08:88:02:5a:89:7f:28:d1:a2:a4:45:
52:9b:f0:73:6b:4f:4f:79:14:8a:f1:3f:62:61:49:e9:fb:e9:
30:bf:55:fe:fa:ca:14:db:2f:14:4d:66:85:41:b7:71:c7:c4:
98:73:04:64:9c:1a:13:5b:f0:18:a7:53:83:2c:a0:e2:a1:a4:
a6:43:3d:96:9a:d2:78:1b:aa:9b:21:ee:e3:ad:52:d5:5c:ed:
bf:76:b1:0c:05:df:69:41:8a:76:f7:92:31:bd:f1:cf:15:91:
b1:e3:cf:1e:c8:8e:d4:57:df:46:2c:21:88:92:c2:19:0e:b0:
cd:ba:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net