Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa
File: BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa (raw, json)
Hash identifier: Hyio+hKHcwTFLSnvoht8aVf6SalV68I+ioT/AT6e6Ds=
Subject key identifier: 04:C0:E2:5E:82:68:E2:65:75:0B:58:89:93:20:AF:85:BD:C8:5D:BB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019428239B46AAB6E81B23CA4C48BE89D5E7
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa
Signing time: Thu 02 Jan 2025 17:50:09 +0000
ROA not before: Thu 02 Jan 2025 17:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29695
IP address blocks: 195.43.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9b:46:aa:b6:e8:1b:23:ca:4c:48:be:89:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c0e25e8268e265750b58899320af85bdc85dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:27:e8:8c:0d:53:a4:e6:74:59:94:c9:1a:
a6:62:44:fe:f0:6f:f9:0a:1a:3e:21:2a:dd:4d:0b:
aa:cf:bb:d6:02:59:2b:fa:ee:dd:ae:78:63:61:7b:
ee:89:61:77:1d:dd:49:ec:b6:f6:b3:7d:3f:c2:0f:
a3:59:b4:b7:88:0d:1d:6c:a9:fc:bf:2f:4a:59:91:
74:ad:f4:be:32:d8:93:75:bc:dc:db:0f:6f:e5:74:
e6:9f:c4:4f:ab:cd:b7:ad:ad:eb:e4:7a:60:75:59:
be:45:f4:ce:e6:82:05:fc:43:75:35:5a:70:ab:9c:
5f:fe:85:35:93:e1:5d:e4:ff:3d:ac:61:d1:ee:48:
bc:1a:be:de:04:45:6f:16:b6:1d:93:67:d2:17:62:
a4:82:51:3f:fc:ca:a0:75:ee:3a:ca:9c:02:46:ee:
f0:2e:6f:b9:31:32:f2:5f:f0:28:24:2a:20:df:d1:
c1:79:e3:3a:6c:2c:47:f2:05:89:9f:e6:d0:cf:53:
82:85:4a:7a:29:ad:e1:6f:4f:62:5e:a0:43:01:ec:
4a:42:bf:2f:c4:76:ae:5a:cc:17:10:8b:a1:dd:32:
5e:20:e9:3b:41:97:0b:4f:ce:b6:24:b5:ca:75:38:
35:11:6e:09:61:17:e9:a0:6c:98:5e:00:07:92:14:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:E2:5E:82:68:E2:65:75:0B:58:89:93:20:AF:85:BD:C8:5D:BB
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/BMDiXoJo4mV1C1iJkyCvhb3IXbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.60.0/22
Signature Algorithm: sha256WithRSAEncryption
72:5d:4a:c3:33:4c:78:72:8c:70:33:da:46:74:73:b0:a6:3d:
8f:90:50:0b:e9:89:13:9b:95:7e:b2:a8:94:6d:d2:78:2a:3f:
a1:ea:31:64:d2:10:20:fb:54:e6:62:19:14:49:8b:16:09:5f:
c7:c5:0d:8c:41:f1:ff:97:c1:94:c9:04:b8:3a:e6:a4:b3:1f:
cd:51:6c:88:00:c8:d0:b9:14:e9:55:53:2c:fa:01:ce:2c:72:
e6:c8:21:9f:26:46:df:88:21:62:e7:dc:1f:b0:b5:ad:f6:27:
a4:2e:f7:c9:5d:c5:45:1e:2e:ca:e2:93:f4:c2:d4:1a:3e:83:
90:2b:ae:4c:e7:70:53:c8:55:96:86:73:b6:b9:e1:96:7a:b6:
ae:27:b1:f1:8d:61:50:da:8a:67:e9:b6:e7:f6:4d:f2:5e:28:
19:e5:cf:22:5f:9e:f4:81:fa:a3:a0:f0:da:65:89:a2:85:91:
cf:39:55:23:81:d8:32:2b:d7:f4:b8:99:00:a5:05:6c:f7:44:
72:c3:f3:06:32:dc:4f:0a:b3:27:15:2d:9e:37:b7:d0:a2:2b:
e7:29:23:59:00:6f:b1:01:f2:46:cf:30:7f:94:aa:41:e3:6e:
3f:a3:16:d2:45:6c:a0:70:fe:b3:cb:cb:da:5b:7f:a0:37:6a:
75:10:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:20 2025 by rpki-client