Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/BdwPPJJNXn-FSCXomapjXeZD9zs.roa
File: BdwPPJJNXn-FSCXomapjXeZD9zs.roa (raw, json)
Hash identifier: TgcHeBuzrek9VSQCad/VCw8k4l19lhQEHsZDv6Sxid8=
Subject key identifier: 05:DC:0F:3C:92:4D:5E:7F:85:48:25:E8:99:AA:63:5D:E6:43:F7:3B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA746DFCE7248A993A493B773FD546
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/BdwPPJJNXn-FSCXomapjXeZD9zs.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60528
IP address blocks: 78.131.156.0/23 maxlen: 23
88.199.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:6d:fc:e7:24:8a:99:3a:49:3b:77:3f:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05dc0f3c924d5e7f854825e899aa635de643f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:8c:56:64:f8:00:f8:de:71:bf:6f:dd:27:
7c:24:f5:a4:70:b0:5d:55:f6:22:9d:b1:08:ab:90:
73:1f:2a:f8:d8:4c:af:12:de:9a:cb:51:28:fd:2d:
0f:d6:c0:8b:4e:57:63:37:58:67:27:8c:95:f0:36:
e6:af:ca:61:53:7b:6d:81:32:58:aa:5d:c4:a6:91:
86:5e:28:69:5c:73:89:2f:79:33:92:9a:80:e3:2d:
d9:83:a0:1c:17:8d:1d:5e:ed:44:00:b9:72:e2:35:
28:d9:19:a1:3f:c3:5f:25:c8:e4:95:08:dc:e1:68:
50:7a:20:b8:45:c0:a8:46:c0:70:09:17:5a:d7:a0:
78:ed:ad:14:51:06:32:12:8d:89:78:87:cc:af:f3:
cc:e2:1f:71:56:05:e9:d9:b0:1d:21:fa:23:d2:cb:
a5:59:bf:20:ca:aa:2d:46:99:5c:f3:e7:c9:aa:e1:
fc:3c:1e:b4:9d:ab:59:7b:b1:13:87:7c:ea:2d:69:
16:8d:e5:64:92:46:9a:4a:1b:bf:e5:ca:e8:a4:36:
38:c2:6d:42:63:47:51:ce:29:f7:40:e6:bc:ed:e8:
e2:9d:57:ea:59:00:de:a1:42:32:18:be:76:56:47:
92:1d:95:c6:e9:5e:81:58:dc:f2:d9:3b:03:46:1a:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:0F:3C:92:4D:5E:7F:85:48:25:E8:99:AA:63:5D:E6:43:F7:3B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/BdwPPJJNXn-FSCXomapjXeZD9zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.131.156.0/23
88.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b9:3d:e4:e7:58:71:9d:5c:79:c9:58:7d:22:ac:db:a2:66:
4b:bf:36:ef:a1:46:db:5d:43:be:d8:a8:fe:f6:7f:df:1b:39:
55:31:2f:72:1a:a9:26:b8:ef:31:08:5e:40:3e:d1:91:e0:f9:
3b:aa:31:12:db:e1:7a:86:b0:f3:99:67:0a:2c:89:51:05:08:
49:9b:5a:0a:c0:f3:e9:b8:5a:84:7b:eb:50:f5:03:99:2f:ef:
b7:4e:d8:29:ea:63:2f:2e:fa:37:ed:64:d2:e1:9e:fa:96:e2:
d0:b4:72:e6:79:1a:f0:d3:1a:f7:85:e6:dd:60:f0:8a:1b:b0:
fa:9e:9c:15:6c:c5:62:f6:89:7c:37:6f:a6:75:14:f5:68:ee:
9a:b0:9c:5b:85:42:2b:9d:6d:a1:8f:6a:93:22:d8:2e:6e:e2:
c7:f2:c6:a3:64:62:41:11:52:ca:bc:a5:84:d3:01:21:80:55:
3d:52:cf:6e:6e:06:22:75:17:a4:51:ee:46:2d:a2:35:2a:0f:
b1:00:0a:57:5a:52:9a:c8:dd:5e:25:2d:b5:98:ee:f4:32:04:
f3:d8:bb:63:ec:cc:af:80:f9:80:c9:e8:92:48:d3:4a:0c:ff:
23:fd:9a:8d:72:76:18:b2:1c:6f:db:ae:e0:64:e5:5c:fc:aa:
c0:55:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net