Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/rbn_6nz8yFlAFKBrqm7NvRD-83Q.roa
File: rbn_6nz8yFlAFKBrqm7NvRD-83Q.roa (raw, json)
Hash identifier: fluPxd87atxg+nSEhz7oCMbQf+fkTw6wyBEz4MDcark=
Subject key identifier: AD:B9:FF:EA:7C:FC:C8:59:40:14:A0:6B:AA:6E:CD:BD:10:FE:F3:74
Certificate issuer: /CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Certificate serial: 076B5183
Authority key identifier: 0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/rbn_6nz8yFlAFKBrqm7NvRD-83Q.roa
Signing time: Sat 01 Jan 2022 11:58:15 +0000
ROA not before: Sat 01 Jan 2022 11:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47297
IP address blocks: 93.184.176.0/20 maxlen: 20
37.60.168.0/21 maxlen: 21
37.228.176.0/20 maxlen: 20
185.6.96.0/22 maxlen: 22
2a03:b880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124473731 (0x76b5183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d301ad60e7f633ee1744975d8fb157637f2072f
Validity
Not Before: Jan 1 11:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adb9ffea7cfcc8594014a06baa6ecdbd10fef374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:67:6e:c8:b6:0e:2c:5f:2f:92:e3:ad:b3:
8c:01:ad:02:e2:8e:66:26:54:62:25:5a:71:97:79:
26:99:15:26:78:11:8d:a5:52:7f:e8:0d:e0:d1:2b:
68:b9:b0:96:8f:17:1c:d8:69:51:7a:33:97:0d:ad:
4d:fa:08:24:07:f9:74:11:d4:2a:7f:6c:5c:96:da:
79:76:44:70:07:97:62:54:bc:01:b0:13:1e:3b:7f:
5b:03:e5:6b:17:0e:fa:bc:10:d7:d0:0e:4c:a3:ac:
79:48:96:c9:f3:0d:cd:ed:23:c6:6b:1a:54:8c:26:
73:5d:6c:64:a7:36:60:4e:d1:96:f0:07:ce:e9:c4:
55:05:eb:d1:79:3d:e0:0e:73:f1:26:a4:5d:10:c4:
9a:7a:26:45:65:02:d4:0f:b7:4f:8c:c3:58:ce:3d:
da:6e:68:74:83:d8:44:87:a2:3b:d5:8f:0b:cf:27:
b1:2e:e2:ab:a6:e1:1b:f1:2a:f1:6b:81:46:b5:40:
28:1c:4b:76:26:19:f6:69:fa:73:be:e8:62:6e:cc:
d0:35:4a:a8:3d:3d:d7:fd:ee:bb:1a:d2:dc:70:f8:
e1:30:62:7d:4a:fa:23:58:da:0d:e6:81:8e:aa:7c:
4e:fb:4a:be:93:bc:96:36:da:e8:19:24:91:f3:ec:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:FF:EA:7C:FC:C8:59:40:14:A0:6B:AA:6E:CD:BD:10:FE:F3:74
X509v3 Authority Key Identifier:
keyid:0D:30:1A:D6:0E:7F:63:3E:E1:74:49:75:D8:FB:15:76:37:F2:07:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTAa1g5_Yz7hdEl12PsVdjfyBy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/rbn_6nz8yFlAFKBrqm7NvRD-83Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0cce7d-fcff-4673-b887-1f8604ef3c1c/1/DTAa1g5_Yz7hdEl12PsVdjfyBy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.168.0/21
37.228.176.0/20
93.184.176.0/20
185.6.96.0/22
IPv6:
2a03:b880::/29
Signature Algorithm: sha256WithRSAEncryption
bf:cc:9c:f6:02:44:11:cd:38:aa:81:0a:25:fe:29:33:24:1b:
1f:94:b5:3b:20:ce:0d:65:f3:d1:5c:db:57:70:ee:5c:6d:d5:
f2:fa:6a:16:b8:c1:3c:87:32:e3:c4:9c:5f:08:3a:6c:87:fc:
26:aa:21:1e:18:8c:a2:19:b2:0e:5d:22:5d:58:d4:af:0e:00:
13:c4:55:a2:18:54:a0:14:7f:03:3d:92:15:e9:e6:e2:40:b5:
1a:f5:6c:6b:0c:4c:b5:1f:a0:e1:e0:7f:63:56:a9:98:8f:26:
4a:d3:b9:28:90:83:27:1d:65:26:c9:f6:ce:da:32:9f:12:2e:
55:86:2d:7d:cb:42:ab:a9:74:b9:d4:51:1e:a0:42:0a:c4:c9:
db:d5:2f:36:c6:2c:76:8b:a8:30:9a:dc:98:59:c3:50:10:6b:
0e:58:36:76:93:2a:15:52:dc:42:41:8a:38:f2:b7:87:ac:65:
1a:2b:05:c9:b2:d3:6c:81:a1:b9:e7:8f:07:ac:4e:69:19:f0:
ad:f1:16:e2:61:62:2f:a1:3d:aa:e2:46:d8:a1:9b:e9:69:82:
53:a6:96:f3:ed:5b:45:aa:c9:e8:5f:eb:a6:8e:e9:66:f1:aa:
88:d7:24:2c:92:15:0c:a0:29:89:a6:f5:7a:ac:88:b9:d1:ff:
b2:78:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:42:08 2025 by rpki-client