Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BCIrDQtfS_Ae8qnjNxfSRq8NZW4.roa
File: BCIrDQtfS_Ae8qnjNxfSRq8NZW4.roa (raw, json)
Hash identifier: n4o1Gt/nKx8MCB7OWn6eFYcC6Y39/pmu2kPZY7MQdp4=
Subject key identifier: 04:22:2B:0D:0B:5F:4B:F0:1E:F2:A9:E3:37:17:D2:46:AF:0D:65:6E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 01946175B544BE651F9E99982090DDFA248B
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BCIrDQtfS_Ae8qnjNxfSRq8NZW4.roa
Signing time: Mon 13 Jan 2025 20:58:11 +0000
ROA not before: Mon 13 Jan 2025 20:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 195.234.80.0/25 maxlen: 25
195.234.80.128/25 maxlen: 25
2a13:7b40:1::/48 maxlen: 48
2a13:7b40:a1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:75:b5:44:be:65:1f:9e:99:98:20:90:dd:fa:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Jan 13 20:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04222b0d0b5f4bf01ef2a9e33717d246af0d656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:63:25:b3:48:4e:31:3b:81:49:f7:cb:02:
8d:1a:19:fc:e5:55:64:0f:56:0f:90:70:11:c1:e6:
64:6b:7b:8f:8b:e1:f4:09:3d:da:d6:56:d9:e5:36:
18:2b:7b:c2:90:16:39:03:c7:a8:cd:ed:61:7b:7e:
d6:74:bd:95:35:1e:17:ee:70:c4:8b:60:44:bf:90:
7a:6c:b2:a2:5b:51:bb:fc:fe:40:90:6a:49:7d:8b:
e4:07:e4:72:6b:8e:0b:77:3d:36:0f:1b:4b:69:b4:
e6:01:2d:68:ad:e3:f5:fc:a1:31:a4:3e:41:ef:78:
f2:49:4c:05:57:91:13:e1:fc:47:26:ca:31:05:3b:
75:f7:95:42:6f:89:66:4e:f0:dd:4e:45:a5:2d:e7:
88:44:77:f8:00:60:f6:48:ba:5f:6c:07:f6:c0:fe:
0b:e7:a3:c0:09:ca:37:c1:22:c8:5a:e3:e8:8f:34:
fd:17:07:57:c8:e0:84:ab:40:7a:56:be:b3:41:4e:
41:96:f4:3b:c7:3b:47:3c:cd:37:b5:4e:f5:1a:48:
9a:ec:03:56:e7:31:9f:a0:00:34:4b:c0:df:f5:1f:
ab:2c:d0:4e:98:d6:0d:97:85:1d:4d:74:45:7f:1e:
1a:17:9c:80:ee:a5:a1:ba:f9:48:23:4e:e7:4e:d3:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:2B:0D:0B:5F:4B:F0:1E:F2:A9:E3:37:17:D2:46:AF:0D:65:6E
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/BCIrDQtfS_Ae8qnjNxfSRq8NZW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.80.0/24
IPv6:
2a13:7b40:1::/48
2a13:7b40:a1::/48
Signature Algorithm: sha256WithRSAEncryption
56:cc:73:af:2b:f1:70:05:c6:9f:e7:df:6d:af:39:c6:30:ba:
54:f0:2d:62:3b:0c:b6:35:13:16:2e:08:8a:2a:b6:f0:d7:41:
1c:cd:e7:d8:90:dc:d4:49:53:5a:08:99:02:b5:0b:7f:6b:3a:
a9:74:ea:4e:9c:4c:ad:b6:6d:14:cd:92:41:60:f5:a1:bd:09:
10:ab:5c:49:ad:ce:57:9a:88:66:5b:27:ce:e6:1a:b0:21:19:
a9:5f:4d:a0:02:16:f1:82:7d:5b:87:f8:58:3b:81:81:97:cb:
fc:c1:ed:a4:26:bc:00:fd:df:ff:65:fa:b2:f3:d4:fb:b5:15:
8a:39:25:51:c9:60:27:a3:b4:d2:82:fb:49:75:a1:3e:1d:28:
15:11:b3:10:87:82:e2:7a:7e:d3:4c:3d:2c:61:cf:31:40:d6:
d9:74:8c:df:30:4c:95:83:ca:4a:a1:92:1d:d3:cc:64:f8:44:
71:65:f9:a9:ee:90:4b:ce:5d:27:21:66:83:93:b8:76:3a:ed:
f8:22:51:1a:79:61:1d:20:0e:19:5c:64:5e:69:1c:58:a7:a9:
da:2e:ce:53:23:34:e9:c1:01:5c:ec:ec:bd:8f:31:18:16:99:
42:2e:40:85:21:9f:ee:68:f7:46:77:a9:7b:8d:f2:d3:e9:74:
32:8f:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:26 2025 by rpki-client on console.sobornost.net