Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/6fFveoTrt0F6oNaBjXPKSNmSHFA.roa
File: 6fFveoTrt0F6oNaBjXPKSNmSHFA.roa (raw, json)
Hash identifier: PI5cgXyDjHJmbDuKstm5ROgUhyPYQO7iQgN+8q1M7I0=
Subject key identifier: E9:F1:6F:7A:84:EB:B7:41:7A:A0:D6:81:8D:73:CA:48:D9:92:1C:50
Certificate issuer: /CN=bdbb2b04f654d84b1f3f3057126c1566e2a9b7cc
Certificate serial: 0182EE84469DD45F50C474316F786BC826F4
Authority key identifier: BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/6fFveoTrt0F6oNaBjXPKSNmSHFA.roa
Signing time: Tue 30 Aug 2022 11:30:22 +0000
ROA not before: Tue 30 Aug 2022 11:30:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197514
IP address blocks: 91.220.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:84:46:9d:d4:5f:50:c4:74:31:6f:78:6b:c8:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdbb2b04f654d84b1f3f3057126c1566e2a9b7cc
Validity
Not Before: Aug 30 11:30:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9f16f7a84ebb7417aa0d6818d73ca48d9921c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:a8:50:59:1b:fc:dd:3f:5d:e3:e9:e2:75:
37:c8:4c:5a:00:0e:28:2b:34:68:37:a2:1a:1e:21:
ca:49:b4:c0:e5:6b:53:e0:be:35:b0:45:d3:23:3d:
28:94:da:1e:0b:07:0d:13:a3:34:20:48:66:8c:34:
e4:40:bb:76:94:8b:d9:b6:f4:02:99:fc:39:3f:85:
5b:ed:8e:52:15:04:1c:92:92:33:f9:54:40:46:b4:
3c:ed:6d:c6:ef:e9:b6:a4:9d:e0:ac:f2:4e:58:c7:
d7:83:4f:5e:a9:62:3e:0d:dc:08:f1:9b:0b:59:c0:
f0:7c:07:e3:9d:c9:d3:2e:71:f3:14:97:07:47:c0:
57:7c:fb:3e:15:ce:94:ca:94:e4:d0:6e:4d:4b:26:
3c:57:57:0f:77:7c:96:d5:e7:e4:e8:1a:f1:a7:a6:
a6:f3:98:80:3b:35:35:0e:ac:db:d8:b4:45:be:63:
da:00:03:75:20:96:b7:a9:ff:a8:84:e9:b1:e0:10:
49:b0:22:50:f3:83:a1:9f:bc:6b:fa:36:d9:30:e6:
78:c5:69:bd:1f:20:f8:1a:b1:18:a2:80:af:6c:99:
be:b0:c7:23:46:1f:06:4a:06:0a:28:1f:7b:09:d1:
bf:38:93:b3:3a:71:09:32:48:9f:ed:2f:3f:25:e6:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:6F:7A:84:EB:B7:41:7A:A0:D6:81:8D:73:CA:48:D9:92:1C:50
X509v3 Authority Key Identifier:
keyid:BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/6fFveoTrt0F6oNaBjXPKSNmSHFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/vbsrBPZU2EsfPzBXEmwVZuKpt8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.240.0/24
Signature Algorithm: sha256WithRSAEncryption
26:17:f1:ec:19:32:7a:b6:74:d1:a4:ad:56:c3:34:09:0f:b1:
a8:5c:e3:56:02:ec:83:f2:1c:31:f1:36:93:e5:f3:88:cc:4c:
df:b7:ff:5e:e4:af:72:ac:da:35:49:ec:7c:59:e4:ee:79:50:
e9:b8:ed:94:93:57:99:a3:ff:1a:65:cb:40:c2:fd:7d:91:65:
2e:f2:29:b4:c0:66:1d:db:36:fa:fd:6e:04:8f:95:b4:0d:7a:
60:20:27:7b:40:86:d8:42:1c:b1:32:d5:80:d3:f6:ea:c2:d5:
96:e1:56:c0:fb:ed:14:b2:8b:9f:93:06:40:ac:20:06:f7:c1:
4e:d2:42:c5:94:59:17:a8:03:fa:92:11:68:bc:fd:9b:f7:a9:
47:26:ae:58:c3:3d:6e:3b:1f:69:fc:c1:81:f2:f2:cc:59:c8:
53:b4:01:d2:2f:eb:a8:1a:b9:69:4f:6d:6d:33:dc:7d:4c:f1:
4a:f8:4b:17:08:c9:67:b5:30:05:26:5f:30:b0:b6:64:a0:24:
43:aa:ec:e5:3f:32:94:80:54:0d:cb:71:22:f1:c5:4c:e0:93:
0b:1f:d2:f2:8d:0f:b7:02:30:fc:b8:16:24:d6:00:b0:ce:d4:
2c:8b:c0:ea:f6:43:41:11:86:58:0b:fa:0a:91:78:04:7b:27:
6f:3c:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:42:48 2025 by rpki-client