Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa
File: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (raw, json)
Hash identifier: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=
Subject key identifier: 04:5E:A6:10:4C:8D:31:B6:FE:C5:19:BD:FE:F5:C9:E0:20:2F:75:D3
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 0194258FAB3E934965893EFE62B0F7AE551E
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35271
IP address blocks: 31.10.64.0/18 maxlen: 18
93.185.192.0/20 maxlen: 20
2a03:700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ab:3e:93:49:65:89:3e:fe:62:b0:f7:ae:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045ea6104c8d31b6fec519bdfef5c9e0202f75d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:7d:98:1a:61:1a:9a:eb:bf:28:2b:e9:88:
f3:d8:a1:5c:87:f4:25:48:3f:71:c9:ee:be:d0:d8:
d5:c4:81:af:6e:61:f1:46:2f:97:72:42:2c:fa:a8:
2c:23:df:e2:af:5a:87:36:38:16:ae:1a:3b:61:60:
e0:00:79:d3:b8:fa:b4:fe:f0:1c:59:eb:aa:f9:26:
45:af:0c:33:f7:ed:da:b8:0d:72:08:d2:ba:ee:0d:
a4:54:92:c5:b5:8f:b2:c3:f0:76:1b:9d:e4:49:49:
45:3d:f5:26:8c:73:89:f7:9d:ef:75:02:9d:79:e5:
60:72:ac:48:b9:e5:5e:e3:27:ca:82:b8:f7:4f:1c:
4a:c4:7d:0b:6c:ee:e4:61:92:03:5b:f2:56:4a:9f:
e7:97:13:61:db:1d:39:a7:87:8c:04:7c:79:44:ae:
82:71:0e:e5:d3:2e:2b:55:58:c7:cc:6d:d2:cb:ee:
34:ba:7b:b7:b8:61:80:a4:3d:d1:3f:dc:0a:91:83:
67:f8:de:3c:0c:8e:6f:71:e1:6c:2b:76:06:df:32:
58:99:51:12:02:14:e4:71:5e:70:08:ad:3b:cc:db:
06:e3:f5:47:5e:e8:83:3a:11:73:de:22:e5:98:f8:
97:5a:b1:ba:57:ca:18:e6:58:e0:1e:19:6d:e0:a4:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:A6:10:4C:8D:31:B6:FE:C5:19:BD:FE:F5:C9:E0:20:2F:75:D3
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.64.0/18
93.185.192.0/20
IPv6:
2a03:700::/32
Signature Algorithm: sha256WithRSAEncryption
2e:00:70:20:39:4e:f7:99:4c:e0:b8:98:f1:0e:11:af:e8:e7:
1a:e1:d0:ab:13:6e:04:ab:79:a4:b5:70:ec:88:b7:4e:90:bd:
f7:f6:c9:2a:e1:3d:e6:a4:ba:32:96:f0:03:a6:cc:11:75:5c:
f8:a1:46:c7:62:ff:c2:e2:79:5a:00:d5:a5:ce:35:b1:fa:5e:
c6:85:e7:f0:88:cf:a0:86:e9:e9:47:70:03:0e:0a:d2:da:74:
5f:66:8d:e6:92:ca:5c:1f:66:9c:8d:2e:76:3d:63:93:4d:6d:
65:ef:05:eb:39:a8:88:69:66:91:c9:da:b3:9a:ae:34:e9:7c:
0b:19:ab:63:3a:66:e9:3d:a4:52:e5:06:d1:5e:a0:4e:69:99:
8d:7d:ad:93:71:5f:0f:9e:fb:68:6a:97:d9:60:48:ca:c2:f0:
46:05:6f:69:a2:7d:09:d3:25:63:ed:4e:d4:78:a3:c2:24:28:
50:4f:58:a6:e0:63:4f:c0:fc:6c:27:64:bc:11:98:b2:dc:81:
b6:b0:72:ac:95:3b:eb:19:2d:0f:b4:74:45:c1:08:f1:99:f2:
47:5e:e9:e6:7d:9a:18:00:10:3b:13:20:97:3f:8a:23:59:e0:
bf:77:d3:98:39:5f:21:98:0e:f5:6e:4f:86:4f:35:1b:c5:00:
50:fb:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net