Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/BQS1rXwEuh8U6Mycybza_zeQDc8.roa
File: BQS1rXwEuh8U6Mycybza_zeQDc8.roa (raw, json)
Hash identifier: JETVF4cuM1eSDrb4CZlSxSPfGvmyGijVAPUzbeqDwyo=
Subject key identifier: 05:04:B5:AD:7C:04:BA:1F:14:E8:CC:9C:C9:BC:DA:FF:37:90:0D:CF
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01961F8D3D6657D6431D9B417647EDA6D8A1
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/BQS1rXwEuh8U6Mycybza_zeQDc8.roa
Signing time: Thu 10 Apr 2025 11:54:32 +0000
ROA not before: Thu 10 Apr 2025 11:54:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:8d:3d:66:57:d6:43:1d:9b:41:76:47:ed:a6:d8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 10 11:54:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0504b5ad7c04ba1f14e8cc9cc9bcdaff37900dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:58:bd:e0:43:cd:54:36:07:cb:09:d6:7e:
7c:c9:95:f1:0e:93:1e:b3:9a:3a:0f:df:73:d5:8e:
bf:30:6b:67:c3:46:ee:23:cc:f9:58:1f:89:0e:0b:
88:66:3f:98:3d:e6:35:8c:3a:2a:4e:74:37:51:0b:
0a:7f:6f:5c:76:a5:a7:ae:6a:d0:87:b9:14:ca:5c:
6e:94:a8:5f:9a:ba:f8:71:3a:a9:1c:0a:6a:58:0f:
4b:91:4d:24:f1:11:9f:fd:8d:9b:85:52:33:fc:b8:
43:5b:c2:c5:d8:6b:1a:ea:26:6a:0b:cb:14:d2:e9:
99:f4:f7:85:93:13:3e:d8:c6:53:3e:6e:ad:c5:11:
45:7e:23:40:8f:da:22:05:1b:9c:f6:01:d5:0c:e0:
63:7d:44:72:dc:e1:3a:10:9f:13:eb:b5:a1:64:9a:
cb:6b:68:23:a8:66:69:69:2c:79:77:49:5f:3d:0f:
f4:b0:01:97:40:cd:4d:1b:af:c9:18:2f:cb:65:1e:
41:21:60:69:be:5d:4c:56:a0:0b:96:1b:0c:bb:95:
a5:54:e6:54:6d:60:c3:3b:04:61:ff:92:ad:5c:1b:
cf:c8:b8:f1:1f:34:00:dc:25:b6:3d:64:af:b5:aa:
b7:29:19:64:79:62:02:93:50:b7:3c:5c:78:7f:ba:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:04:B5:AD:7C:04:BA:1F:14:E8:CC:9C:C9:BC:DA:FF:37:90:0D:CF
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/BQS1rXwEuh8U6Mycybza_zeQDc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
73:74:5b:09:b8:0a:9b:36:45:29:c0:95:5f:e4:dd:14:ad:d2:
54:b9:1e:d7:23:ee:08:18:f8:51:f3:1b:8e:41:29:5f:19:04:
61:2a:69:af:60:b1:44:b0:03:30:32:ac:64:16:8f:33:65:3b:
2f:e2:06:f1:3a:4e:03:f8:0c:06:63:cc:d5:0c:d1:e1:8f:77:
64:43:ec:f2:fc:78:c9:32:2e:49:70:78:44:80:cd:f4:c8:0f:
57:11:ce:a8:7e:90:8f:50:04:da:8d:4c:0d:90:75:74:7a:cf:
dc:27:cc:fc:84:b9:c5:fe:c3:2e:8a:df:7f:82:78:66:00:0c:
f2:d2:fc:24:aa:df:25:2d:24:3f:2d:d5:28:0b:a7:82:a5:f2:
c0:8c:2f:69:0c:7d:8b:e7:8c:53:67:4d:d4:b9:7d:1f:16:3a:
b6:e9:eb:2c:a7:04:9d:3d:e7:02:0a:c7:29:b9:1c:49:a0:a3:
6d:a0:6c:f8:bf:b7:36:ba:0f:f7:52:5d:cc:b1:f0:16:e8:f0:
3b:00:14:1b:f0:58:3d:9b:48:57:be:f3:8c:b8:9c:15:a5:44:
0f:80:ad:9e:e9:8c:2e:a4:dd:c8:b6:c6:ba:c9:08:33:f1:20:
b4:91:92:2f:5c:d7:96:03:5c:f0:99:77:f9:32:55:ad:00:85:
89:bb:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net