Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa
File: BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa (raw, json)
Hash identifier: ziZpuMSjd6A+xtjmxRjQ3AIfV1jnwc+C8brSkPRY6r8=
Subject key identifier: 05:01:A6:17:88:B8:A8:D6:18:06:D8:E5:FF:24:03:E4:CC:CA:B1:40
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57A5129034ABB8EAD5C0ADB76F72E
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204242
IP address blocks: 213.152.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7a:51:29:03:4a:bb:8e:ad:5c:0a:db:76:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0501a61788b8a8d61806d8e5ff2403e4cccab140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:ac:2e:a7:76:68:6e:8f:d1:a9:bb:ca:55:
bc:92:4c:5a:9f:5c:77:a8:d8:83:b4:82:e1:27:81:
2d:c4:95:ae:25:8e:49:16:e0:00:4e:1d:fe:76:2e:
6f:84:86:a9:b9:bc:8b:32:ca:d4:f6:9b:89:b8:c3:
ab:a3:62:13:52:f2:a4:5a:17:cd:7c:68:d6:c9:fe:
91:49:f9:30:7a:99:a0:86:7c:6f:c0:fa:98:31:5d:
92:18:db:28:72:17:18:c5:01:a8:e6:c6:54:78:82:
1b:62:26:4a:ae:a3:0a:7c:70:a4:60:0b:2d:60:b7:
bf:8b:a1:7e:b0:b8:05:90:8a:80:95:21:1d:50:ed:
29:6b:cf:5e:fc:cb:0f:a6:06:f0:e9:a0:e7:b7:48:
af:70:bb:02:99:3c:ea:2d:19:5f:bd:b1:06:85:46:
e3:84:f2:6e:cc:1d:1c:1a:8e:3b:5f:74:ae:02:b5:
08:6f:bb:d4:0d:91:d1:37:e2:08:f2:c1:9a:fb:ce:
3f:3c:65:a5:52:aa:38:e4:8e:8a:22:7d:9e:61:d3:
b3:77:7b:21:98:3b:12:bd:65:b0:00:05:8b:5e:c7:
5c:88:7e:1d:c7:fc:cb:ce:9b:5b:27:15:e5:56:6b:
e9:ea:e1:a3:6d:60:c5:87:0d:70:71:2d:95:aa:32:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:A6:17:88:B8:A8:D6:18:06:D8:E5:FF:24:03:E4:CC:CA:B1:40
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/BQGmF4i4qNYYBtjl_yQD5MzKsUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.241.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:54:a9:bc:92:f5:45:0b:f9:09:48:66:31:96:dc:a7:a8:
e8:79:16:76:8a:f6:52:5c:53:4f:59:c2:49:8d:55:e7:32:a8:
2f:2b:44:22:24:3f:d3:53:c8:4a:d8:b8:ad:ac:cf:a5:33:5e:
10:ea:97:c8:ae:7e:9c:f9:3e:39:ab:11:62:7f:a3:6f:80:8b:
d7:e5:ca:03:81:40:7a:a5:99:cd:d4:66:12:37:f6:b1:ee:45:
85:b5:1f:05:f6:4d:8b:32:36:52:d0:29:ef:88:bb:ce:1f:e5:
98:ff:b6:10:51:09:05:1e:8d:22:7f:c6:ff:fe:58:40:dd:4f:
d2:d0:ff:d3:e5:9b:96:48:90:2b:77:6c:a3:d7:fa:cc:1c:a7:
07:66:cc:5a:f9:e6:4b:8a:cf:4c:c1:46:2a:20:e4:6c:8b:ca:
92:fb:90:34:e4:fc:02:c6:65:1e:1b:b1:36:cd:e8:38:a9:4f:
ad:a9:9c:d1:b6:5b:43:83:a9:23:9d:30:aa:e9:de:d8:ca:41:
8d:4d:d6:64:86:a2:c9:a7:62:be:29:01:61:66:cf:17:8a:ba:
fa:4b:d8:7a:68:ad:73:c6:1b:e9:e6:74:e5:c8:7f:78:80:43:
e9:81:92:d0:ae:ea:78:a7:83:fb:d3:dd:54:4d:a6:38:fc:b0:
8a:2d:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:22:54 2025 by rpki-client