Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa
File: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (raw, json)
Hash identifier: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=
Subject key identifier: 04:BF:8D:0D:88:2F:84:D4:B7:CA:43:76:6D:9D:D7:61:29:82:11:92
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019423D7533B22256674D334FAFCE35DC693
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35157
IP address blocks: 85.119.136.0/23 maxlen: 23
85.119.138.0/24 maxlen: 24
85.119.140.0/24 maxlen: 24
85.119.141.0/24 maxlen: 24
85.119.142.0/24 maxlen: 24
2a01:8d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:53:3b:22:25:66:74:d3:34:fa:fc:e3:5d:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04bf8d0d882f84d4b7ca43766d9dd76129821192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:7b:3a:39:e7:f5:39:8c:0d:80:50:eb:d8:
81:bd:34:c8:73:11:47:d2:53:a4:a5:c6:25:f8:f0:
f6:17:a1:76:de:d2:c5:9f:32:6e:25:d4:06:c8:97:
a6:1a:42:4b:f6:32:11:f2:ea:a5:7e:55:88:2f:7c:
70:8c:f2:92:67:91:4b:18:e2:d3:df:b3:08:d7:42:
9d:3d:04:84:b3:c9:2e:30:71:f2:1c:58:27:ec:34:
78:4d:bb:62:8a:9a:33:47:2b:67:e6:61:d8:69:52:
83:a3:72:01:9d:33:8f:64:66:0e:65:44:a2:bb:5b:
48:e4:7c:7f:23:67:66:d1:4f:db:48:8a:fe:0b:6d:
bb:d5:59:09:dc:da:8a:29:9c:ce:48:6b:01:a7:ee:
3f:eb:f1:00:b5:4b:95:6c:9f:d1:f8:73:20:11:07:
ee:f2:8d:e0:10:29:43:f1:9f:20:3e:5a:70:d1:13:
81:7a:c4:9d:09:56:1d:c0:fb:0c:7e:99:6a:84:fb:
f6:45:c2:d3:86:33:70:c6:39:61:17:82:e6:0a:c4:
af:6c:3c:af:10:84:12:90:b4:e1:20:1d:78:06:25:
5c:26:3f:89:61:19:38:a1:af:a0:b9:70:fd:d6:bb:
e4:39:54:67:74:d7:86:50:e8:e4:9d:9c:c0:11:90:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:8D:0D:88:2F:84:D4:B7:CA:43:76:6D:9D:D7:61:29:82:11:92
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.136.0-85.119.138.255
85.119.140.0-85.119.142.255
IPv6:
2a01:8d80::/48
Signature Algorithm: sha256WithRSAEncryption
9a:21:f6:c0:94:6d:70:72:81:41:4d:c0:aa:c7:d2:60:09:55:
30:77:b9:49:05:4e:61:07:4b:8d:a0:0f:bb:f2:c2:8f:f0:3b:
02:e8:b5:51:b8:8e:c7:85:73:8a:0c:37:70:af:6f:65:64:32:
2f:10:2e:26:dd:87:5d:81:0c:f1:93:77:88:67:ab:6f:0e:13:
57:c0:07:72:e2:89:d8:1e:f5:68:d4:93:b0:d4:6f:a0:c3:dc:
68:55:c2:c3:33:a4:f4:e4:2d:97:14:32:cb:7f:c4:1b:69:b7:
96:69:f1:5e:32:31:09:62:d5:20:05:0a:2c:27:93:8b:8a:d2:
96:3b:a8:0f:d9:57:c6:86:9e:2d:b2:b0:d0:7f:92:32:f2:8e:
3e:e9:ab:ab:e3:8a:0d:7c:23:30:aa:9e:34:da:0b:04:e6:88:
8e:9c:28:93:7b:38:6c:0d:40:86:9e:59:76:05:a5:ee:29:f4:
8b:3d:6b:78:57:73:25:1c:eb:ca:8b:83:a5:eb:6a:fb:20:6d:
6c:48:9d:2a:07:7d:eb:c0:c8:50:be:62:e5:d4:46:c0:05:27:
56:f9:59:e2:1a:7c:8f:92:2b:f6:7c:b8:d0:c9:c0:10:06:d7:
a0:31:91:59:a8:e9:18:56:7a:e9:85:ed:73:9b:50:a5:77:b6:
9f:be:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:19 2025 by rpki-client