Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa
File: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (raw, json)
Hash identifier: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=
Subject key identifier: 05:27:3B:2D:FC:BC:4B:DC:83:0B:E1:BF:93:C2:4F:21:BA:20:5C:BF
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019421B2362C4B095CB863016A851DAC5EE7
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198932
IP address blocks: 193.242.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:36:2c:4b:09:5c:b8:63:01:6a:85:1d:ac:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05273b2dfcbc4bdc830be1bf93c24f21ba205cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:0e:ab:51:85:7e:70:8b:55:ee:2a:76:8b:
95:33:23:7f:f6:c0:1d:89:40:3d:b2:3b:66:cc:1a:
53:11:de:4c:e9:75:fe:a8:a3:56:d3:e5:74:94:f9:
8f:c3:a2:3d:3d:41:39:78:50:5e:a0:0e:00:fd:97:
98:f1:fe:aa:74:70:b2:8b:c4:94:1f:64:6d:14:f5:
2c:03:7b:2b:3e:1e:2d:a6:1f:25:ea:96:17:f9:da:
bf:a8:9e:18:6f:81:84:44:65:d5:82:0c:f1:78:71:
8c:87:19:25:25:22:65:34:d4:f5:88:40:a9:a9:dc:
1c:cc:c3:79:2a:f2:ce:79:e0:64:d9:f3:7f:42:17:
25:b0:4c:9f:a6:8e:73:b6:b7:c1:fa:15:ea:a9:68:
da:a3:3f:f1:a3:51:7e:01:9c:2c:27:95:e4:49:5a:
3c:13:5a:7d:55:e6:d9:c3:0e:b0:3a:b2:79:3f:8d:
08:d2:67:81:5f:d0:0b:c6:65:ff:8f:23:01:c5:78:
2c:78:d2:54:8c:da:0b:e2:59:6f:d7:de:c9:7d:63:
52:25:b0:05:d0:a7:7b:60:ca:12:dc:ca:d8:19:fc:
10:b7:df:60:ff:0a:a2:e6:f5:27:b1:77:42:3b:35:
21:4e:48:ef:84:e2:94:07:5b:24:9d:27:95:49:4e:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:3B:2D:FC:BC:4B:DC:83:0B:E1:BF:93:C2:4F:21:BA:20:5C:BF
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e7:43:0f:5f:37:ab:7b:1e:f1:a4:1f:fa:be:7b:99:c1:40:
be:a9:9c:dc:49:61:98:09:d0:93:2b:29:34:13:b2:f6:dd:0c:
01:86:ce:ea:1f:74:41:42:11:da:c8:14:30:08:a1:32:d8:f9:
1f:59:32:82:a3:fd:64:ce:08:e6:dc:f2:59:b4:b9:5a:2c:d1:
bd:2e:8d:ff:8d:54:3c:50:3f:9d:09:21:24:f1:36:3d:05:cc:
4e:9e:92:56:c9:0f:1f:be:c5:d9:85:06:7d:20:94:46:20:73:
47:3d:c0:8b:73:f4:72:3e:2a:0b:3d:4c:f0:7c:ea:b3:66:f2:
f9:d8:4d:78:a0:49:c5:22:92:6c:16:ac:df:12:82:b0:2e:60:
6a:d5:ab:e2:31:aa:4b:b5:a5:39:f8:2b:ac:97:95:c4:fc:26:
fe:47:ac:f8:27:87:17:e3:cf:40:0d:07:09:28:2a:c9:cb:47:
35:fd:c7:f1:29:31:e5:69:6e:68:ee:61:7d:57:d8:09:63:cc:
a7:89:aa:cd:a5:c4:bd:e6:b5:a4:dc:8e:71:13:65:08:57:fd:
36:e6:bf:58:e0:1a:1b:0c:c0:d3:3c:24:19:f0:ab:7e:b7:7b:
2a:2c:6a:a7:98:66:46:29:a2:88:52:89:13:91:27:4b:83:d9:
0b:04:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net