Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/BcSODmIXKVea8iE5zZOp77BPmEc.roa
File: BcSODmIXKVea8iE5zZOp77BPmEc.roa (raw, json)
Hash identifier: vVK9eMjco2rn/5nPy9ksOWvGq+8tly70A/WB72MUKg0=
Subject key identifier: 05:C4:8E:0E:62:17:29:57:9A:F2:21:39:CD:93:A9:EF:B0:4F:98:47
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 0194266BF3FB16E9DA1B836F0A0B60D86D61
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/BcSODmIXKVea8iE5zZOp77BPmEc.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 80.254.228.0/24 maxlen: 24
185.92.171.0/24 maxlen: 24
2a13:5241::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:fb:16:e9:da:1b:83:6f:0a:0b:60:d8:6d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05c48e0e621729579af22139cd93a9efb04f9847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:43:a1:b2:0a:b8:f4:b2:61:72:c2:e5:8b:
0a:1c:5b:9b:b0:f7:b4:e0:14:77:5c:be:48:65:fa:
03:12:60:d4:08:a8:af:89:2b:da:44:d2:12:92:ff:
c8:a7:f5:8a:4f:11:c4:ff:3c:56:45:93:30:a0:cc:
05:a3:8b:e7:3e:15:14:ee:9d:6c:2e:4b:fd:d7:8a:
b8:b8:f2:80:5d:18:69:26:57:5b:f2:f6:90:b9:87:
94:57:0b:45:f3:2c:61:f5:0e:f8:82:2a:5f:4d:ca:
04:fe:b3:f4:86:2a:fe:49:73:a0:6c:f0:a1:b6:f7:
18:df:99:96:1c:bb:9b:ca:70:d9:97:1a:b4:f2:ab:
6a:25:e2:60:a5:3a:ab:89:ed:1f:68:96:c6:14:91:
9a:40:a6:cb:83:ee:9f:9b:a5:bc:4d:1b:5e:9c:2b:
29:cb:bd:ca:bf:cc:b7:df:d3:75:48:b9:af:ef:8e:
ff:e1:7f:d7:68:04:a4:24:4b:83:19:da:45:b0:ca:
c2:20:a2:98:4a:8c:9a:14:98:05:6f:27:63:23:a6:
92:16:24:37:c5:26:50:b9:99:27:09:07:63:d5:05:
c6:0e:e8:41:c5:48:a7:bc:ca:1c:e0:64:33:97:e7:
81:76:7a:b9:12:05:b2:f7:ec:a7:67:24:63:18:63:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:8E:0E:62:17:29:57:9A:F2:21:39:CD:93:A9:EF:B0:4F:98:47
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/BcSODmIXKVea8iE5zZOp77BPmEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.228.0/24
185.92.171.0/24
IPv6:
2a13:5241::/32
Signature Algorithm: sha256WithRSAEncryption
4d:e0:ed:8d:7c:e2:21:64:23:1e:51:16:e5:d1:bc:96:5b:e5:
c9:d7:03:00:b0:c5:72:f5:ba:9e:19:49:87:c0:a4:d0:cc:2d:
d8:00:50:5d:b7:81:cf:f6:46:f7:b5:e3:4d:67:82:ac:e4:f0:
ef:ef:62:35:2c:83:5a:cd:8d:44:04:59:0d:e0:c0:22:df:de:
80:d8:53:df:06:bf:58:6b:20:99:37:c0:b0:fe:c2:a0:40:d5:
3d:84:34:12:af:88:21:9d:d1:5c:45:81:66:8e:60:f9:41:33:
dd:47:33:df:09:b2:c8:41:ad:05:f4:f3:15:d0:fc:3d:be:af:
9e:cf:2f:cc:50:73:c5:a3:6a:a5:2c:66:32:b3:9c:8f:47:e0:
f6:ba:df:aa:75:ac:82:a3:a4:16:3d:fd:59:04:85:40:bb:94:
22:f6:eb:87:4a:81:0a:32:3f:60:de:7f:ae:a1:89:78:89:50:
35:e2:f0:b9:7c:a7:b9:8f:7c:60:5b:ba:ab:82:79:ba:2f:66:
72:f3:48:d6:b9:0b:8c:e4:51:d1:34:59:2e:2a:54:c5:83:e2:
25:15:70:f0:3f:c5:a8:e4:ca:49:fa:29:1b:22:5c:ac:85:c6:
fe:b1:95:03:89:b6:45:fc:2d:98:89:b0:e6:1e:28:ed:bf:30:
da:b6:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:08 2025 by rpki-client