Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/BtyxmQt-yF5Itrxy7RzgES75cCE.roa
File: BtyxmQt-yF5Itrxy7RzgES75cCE.roa (raw, json)
Hash identifier: j8jLpS73B8XEvRgoeYut2S/JGAmztzXRK1Z6kg/eRK4=
Subject key identifier: 06:DC:B1:99:0B:7E:C8:5E:48:B6:BC:72:ED:1C:E0:11:2E:F9:70:21
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 019425FD8899D7B86CE471FE60BAF458452F
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/BtyxmQt-yF5Itrxy7RzgES75cCE.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202498
IP address blocks: 193.143.64.0/24 maxlen: 24
193.143.65.0/24 maxlen: 24
193.143.66.0/24 maxlen: 24
193.143.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:88:99:d7:b8:6c:e4:71:fe:60:ba:f4:58:45:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06dcb1990b7ec85e48b6bc72ed1ce0112ef97021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:35:50:46:2d:0a:36:4a:b6:f3:52:1e:e7:
15:e6:3d:b8:cf:44:b2:3a:d1:34:7b:10:28:2a:55:
4e:07:34:40:8f:c3:4b:79:1f:7b:c7:c4:63:40:c7:
b0:a0:b2:4d:69:4a:52:5a:44:1a:89:47:66:2f:c0:
31:a6:90:cb:d2:9f:0f:90:2d:b5:34:12:bb:d4:7b:
87:8f:f8:d1:f2:5e:8f:95:23:81:d1:93:6c:b1:e2:
2e:b9:27:e6:8a:96:58:46:69:76:3d:4a:72:32:96:
ae:1a:b2:84:25:c9:15:a5:b0:7f:d6:af:8d:45:81:
60:55:b4:a6:d1:cf:b6:19:95:d1:ae:90:18:84:8b:
3b:2d:1e:c0:2f:ed:ff:a7:bc:04:d2:04:61:e1:4c:
e8:87:11:dc:96:7d:e5:a8:d8:2a:73:a3:91:26:c7:
9e:5b:d8:95:3d:10:51:50:bc:80:0d:76:9d:20:d1:
4b:db:f0:e4:12:72:ce:47:60:e0:e0:02:60:ef:d7:
11:14:dc:47:07:ec:fb:bb:d0:9a:d0:74:5d:28:f9:
ee:6c:d0:75:27:e6:2c:e4:50:e7:02:4f:0d:68:7a:
26:c6:dd:a9:8e:70:63:3f:0f:07:82:70:9a:3a:23:
9e:73:bc:01:41:46:f5:8c:74:ff:ba:c1:33:d1:8e:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DC:B1:99:0B:7E:C8:5E:48:B6:BC:72:ED:1C:E0:11:2E:F9:70:21
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/BtyxmQt-yF5Itrxy7RzgES75cCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.64.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b4:76:bb:9f:f1:07:fd:b4:b6:23:04:e0:47:64:34:f5:b4:
02:c6:83:18:60:85:26:22:c3:b9:d4:55:27:b9:51:55:6b:78:
a0:d3:52:37:30:c3:e6:52:91:16:c4:9c:8f:22:71:5b:bd:c9:
0a:77:8f:31:4b:fb:49:99:fc:5b:26:ea:84:ae:e0:1a:e4:92:
c0:28:e6:ca:f3:83:d2:26:3d:2a:94:20:e1:3e:f7:df:90:a0:
36:18:ff:c9:46:e7:35:f0:53:13:93:7b:83:4b:c2:bf:72:db:
d4:e3:69:e2:de:31:f3:f7:63:70:67:15:7c:d8:34:b5:02:b1:
a9:70:b1:a7:f5:26:ef:c7:ca:b5:67:f8:91:f7:e5:98:4c:d9:
2a:2c:c8:11:63:4a:67:87:76:38:ad:15:6c:12:0d:e4:9e:21:
f3:51:e6:18:6a:99:07:1e:8a:12:6c:d9:37:d6:81:bc:5d:d6:
58:8f:bc:34:51:a5:1e:3a:25:27:64:93:64:ef:20:95:29:0f:
cc:34:ea:72:4d:2b:75:5e:d4:30:c3:d8:95:75:ef:fa:16:87:
ee:a1:a1:d9:9f:08:09:11:78:7d:8e:89:d5:99:27:1a:86:6a:
70:da:38:2e:07:59:2a:f5:8d:cf:12:ea:0e:b0:1e:c4:68:68:
9d:d5:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net