Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa
File: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (raw, json)
Hash identifier: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=
Subject key identifier: 04:9B:C5:88:24:21:1A:21:1C:5D:1D:E7:76:A2:FB:4F:90:5B:0D:A5
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019420D618BE854E275C8E16DFD2156E02B1
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208350
IP address blocks: 85.255.146.0/24 maxlen: 24
85.255.147.0/24 maxlen: 24
85.255.152.0/24 maxlen: 24
185.135.18.0/24 maxlen: 24
185.135.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:18:be:85:4e:27:5c:8e:16:df:d2:15:6e:02:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049bc58824211a211c5d1de776a2fb4f905b0da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:92:af:81:cc:d4:92:65:49:8d:02:0a:67:
98:1f:47:66:55:83:06:7d:f1:ad:90:37:fd:19:61:
43:4d:f1:64:4a:b4:6a:af:8c:42:ab:29:b2:26:6e:
e8:1d:f2:7d:19:fc:5c:10:46:e2:78:46:cb:b9:a5:
f9:0d:09:9c:5f:2a:3f:5b:db:56:d6:43:4a:07:6a:
be:56:de:0b:2e:4c:87:a7:6e:fd:35:69:15:72:58:
9f:23:49:15:9f:4d:27:0d:db:5e:df:30:e3:37:47:
9f:d2:eb:ca:f9:f0:06:72:b9:a5:e0:da:30:07:39:
d9:eb:42:37:f6:c5:48:13:07:51:72:d1:f7:80:9a:
69:f0:9c:8e:95:c9:a6:d6:7f:33:66:78:22:b7:c0:
be:1d:54:8e:c7:e0:cf:15:0e:77:72:46:56:8d:b5:
95:dd:9e:a5:4a:36:23:bf:1e:20:d5:d9:f2:06:5f:
40:53:10:3f:98:16:c5:fa:14:26:ed:04:0b:ff:86:
30:63:3a:53:b9:38:01:68:7d:4c:a9:1d:b0:27:54:
4d:07:e2:2b:14:19:53:88:42:ad:d5:cc:e2:5a:1c:
cb:52:8d:2f:f6:72:59:73:56:da:f1:2e:92:41:4b:
69:f9:ca:0d:9c:8b:e1:1f:77:fb:30:f7:01:b5:00:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:C5:88:24:21:1A:21:1C:5D:1D:E7:76:A2:FB:4F:90:5B:0D:A5
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.146.0/23
85.255.152.0/24
185.135.18.0/23
Signature Algorithm: sha256WithRSAEncryption
74:d5:fd:79:46:e7:0c:e5:5d:45:c7:fd:2f:1a:48:73:b2:43:
58:0c:62:f1:36:1a:4e:d2:ec:94:b9:11:d4:fd:76:55:9c:62:
75:2e:60:b7:0a:7f:cf:17:58:56:81:2b:c7:c2:86:38:8a:5c:
3d:f2:06:8d:0b:83:63:6f:a0:b5:e3:11:0c:58:57:cb:b4:ac:
cf:bc:a5:ff:32:86:96:ea:32:da:e5:4e:7b:27:12:52:04:f9:
90:79:4d:dd:66:39:75:c2:aa:db:42:a1:7c:fd:a7:1d:dd:9c:
1c:31:1b:34:b1:d6:c6:82:07:a1:dc:da:06:06:41:3d:22:69:
5d:c6:2f:78:1b:02:3d:b5:70:0c:f9:a4:3d:ca:7f:73:a0:12:
81:74:c1:07:82:c6:48:8f:73:07:db:d2:73:f8:21:ab:75:2b:
bf:da:ac:68:c9:80:9a:9a:b5:86:1d:29:20:67:ee:52:d4:bd:
f2:17:b4:f1:7b:59:04:16:0e:cd:54:2a:63:5e:3b:9b:80:f1:
06:43:39:82:d8:4e:f4:65:0e:5b:d3:87:b1:5c:34:43:93:c1:
3a:e6:36:23:c5:93:00:2c:38:d9:da:1d:7c:7d:06:04:ed:81:
6e:fd:34:23:7b:78:99:73:71:16:ea:13:22:d3:67:f0:0d:d4:
5d:4a:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:16:53 2025 by rpki-client