Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/6BUZ5Om-MK2CsVN8MxkCq1TvNNg.roa
File: 6BUZ5Om-MK2CsVN8MxkCq1TvNNg.roa (raw, json)
Hash identifier: Y8w64hercGeTZXnyAaSeEPle7be87wok+rgUIGsSKyQ=
Subject key identifier: E8:15:19:E4:E9:BE:30:AD:82:B1:53:7C:33:19:02:AB:54:EF:34:D8
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 1574B997
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/6BUZ5Om-MK2CsVN8MxkCq1TvNNg.roa
Signing time: Sat 01 Jan 2022 14:03:39 +0000
ROA not before: Sat 01 Jan 2022 14:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52219
IP address blocks: 192.40.88.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
104.160.0.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
107.150.80.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359971223 (0x1574b997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jan 1 14:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e81519e4e9be30ad82b1537c331902ab54ef34d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:e7:c6:36:f0:6f:bf:29:04:b3:e5:47:05:
35:32:b6:81:65:b2:2c:75:51:29:a3:01:00:26:aa:
bf:32:ff:e5:9a:4b:65:cf:20:cd:a3:ed:a8:f9:d7:
fd:d6:89:ca:dc:73:88:ff:42:25:41:87:21:82:3d:
67:ef:61:10:41:b0:f7:21:ce:b2:57:9d:cc:1d:12:
96:f1:f6:6d:04:0e:d6:59:8a:49:63:f4:54:2b:c5:
d5:0b:ad:2a:c3:86:14:39:58:73:d0:bd:fa:c9:d3:
58:3b:9b:a3:20:0a:05:2a:5d:75:f4:c8:39:0e:44:
43:df:2a:d2:60:4b:5b:68:8b:0c:08:16:95:a4:a1:
e2:97:a8:cd:94:e9:ed:2c:13:8c:a6:7d:ba:9b:cf:
0e:48:ca:27:94:db:24:a5:93:f4:47:a4:1a:1f:a5:
e9:b8:c5:ae:b8:07:c5:31:c4:6b:96:fc:d6:2d:9b:
6f:ad:25:b9:87:cc:a3:89:e9:ae:ab:3a:2b:e1:72:
fd:19:84:3f:f7:be:89:b3:ba:88:fb:ec:6c:84:06:
39:b3:15:02:16:8b:1f:f5:66:6c:dc:da:8f:3a:06:
85:49:4f:41:25:d4:13:33:e0:69:0a:86:a2:ec:bd:
e4:cf:a2:bb:df:df:d1:5c:68:f2:c0:8b:ae:dd:0d:
b3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:15:19:E4:E9:BE:30:AD:82:B1:53:7C:33:19:02:AB:54:EF:34:D8
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/6BUZ5Om-MK2CsVN8MxkCq1TvNNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.0.0/24
104.160.4.0/24
104.160.8.0/24
107.150.80.0/24
192.40.88.0/24
192.40.95.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f4:fc:15:8b:6d:2a:70:26:c1:ff:66:b6:db:0d:a6:99:d8:
64:a8:0f:5c:0d:00:cb:5f:94:9d:53:8d:75:3e:4c:91:8e:dd:
7a:d7:1c:a0:26:8a:a0:71:fc:1f:07:a6:5c:25:f7:9b:8d:08:
54:6b:56:39:50:15:5c:76:c0:19:b6:d7:ef:99:d1:ab:e1:64:
6c:a8:c6:65:0b:af:f0:1c:9a:12:1a:b2:b7:66:91:ea:73:db:
49:2e:57:f1:a6:67:80:97:ff:5f:cc:e3:1a:07:85:43:0e:b1:
f4:40:88:ce:82:4d:a3:23:23:ff:ed:18:57:be:79:4b:db:14:
30:fb:0c:28:c6:d0:6c:8d:76:8d:59:b7:3f:b8:50:54:f9:a5:
86:07:d6:29:61:0c:f6:e8:88:8f:e2:22:e7:c7:1c:0d:be:ab:
dc:5f:61:97:6e:09:89:50:c7:d3:d2:fc:39:fa:39:d9:18:8e:
22:40:7d:a8:89:27:dd:e0:90:61:46:b7:38:7a:4e:58:b1:bc:
7e:b7:04:30:05:f3:fd:8c:ca:b6:dd:fe:79:8e:00:da:fd:2e:
c0:44:f0:f7:6f:01:d0:b3:70:a5:34:92:63:78:b1:48:b6:9e:
31:51:e1:6e:00:a3:c4:51:ba:a6:b1:89:61:58:49:48:de:73:
74:34:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:43:50 2025 by rpki-client