Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa
File: BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa (raw, json)
Hash identifier: 4ScxU84ECumBhevfK8YgF20L9hrETFzXn9HYLLsyrBg=
Subject key identifier: 04:02:EF:FC:4C:67:68:DB:7B:12:2F:7F:A0:DC:BF:94:B5:D7:CC:7B
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01942826244DEA71AFFDB87301CB27B2410B
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa
Signing time: Thu 02 Jan 2025 17:52:55 +0000
ROA not before: Thu 02 Jan 2025 17:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15596
IP address blocks: 31.42.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:24:4d:ea:71:af:fd:b8:73:01:cb:27:b2:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Jan 2 17:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0402effc4c6768db7b122f7fa0dcbf94b5d7cc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:e5:04:39:bf:5b:de:ff:da:7c:bb:63:10:
54:a5:01:4b:0a:44:c1:fe:8c:2e:9c:f9:b3:c0:65:
42:54:8b:1a:00:b4:83:7a:02:db:08:01:11:8f:9e:
02:14:10:4d:c0:d2:6e:04:6e:fe:69:73:33:29:b0:
ad:66:ce:a4:24:8a:26:bb:a0:ca:f8:df:d0:bb:48:
0e:9a:a4:ac:40:47:36:99:c4:3b:b7:23:f7:08:44:
5b:b9:51:c4:f6:45:e4:b9:d7:d2:bd:23:7d:13:d8:
c9:72:63:05:c5:e5:eb:f5:09:37:09:33:83:06:cd:
40:b7:c9:e7:83:70:02:c7:4c:1e:43:0f:26:86:7b:
13:1d:40:54:02:b4:dd:11:77:15:b8:67:49:46:a4:
cc:18:ef:f9:18:b8:cf:f1:0d:e9:9d:d2:9e:9b:e3:
cf:0a:b7:e5:6f:d1:64:2b:32:b2:28:48:f9:96:0b:
23:a5:13:9e:f2:f6:5c:f5:2b:9e:b5:10:12:c1:72:
c8:9e:eb:17:2d:0c:de:d9:8f:ca:ee:d2:55:d9:65:
3d:1c:76:0b:86:45:c6:d3:13:f6:d8:9e:31:69:97:
bf:b4:e7:4d:73:85:a6:c2:e6:08:ab:b4:85:4e:07:
1a:31:82:6a:c8:15:b1:b7:70:62:d7:48:eb:02:81:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:EF:FC:4C:67:68:DB:7B:12:2F:7F:A0:DC:BF:94:B5:D7:CC:7B
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:4d:1d:d0:17:84:2e:88:03:82:08:8c:38:cb:2d:69:33:88:
16:c3:45:95:d8:b6:56:ab:13:ce:81:b4:fd:50:7e:b3:c6:94:
68:1b:e3:dc:e3:28:23:b9:db:66:bf:50:d9:c7:e3:49:1d:95:
9c:64:bc:68:46:94:c4:1d:12:28:ee:cc:f8:58:2d:09:80:d1:
3b:23:b7:9b:ee:3c:d3:b0:ea:93:61:98:68:e9:67:c5:4c:b9:
26:19:04:ed:88:11:b3:b2:bc:52:86:3b:e7:86:85:32:a4:f9:
32:16:29:e2:f4:22:d5:ce:09:f1:29:2d:84:f5:eb:2f:f5:64:
a9:cf:c7:c1:0a:2f:c8:1b:bc:88:50:76:27:59:91:1d:20:24:
7e:ae:3c:d3:84:dd:61:e5:d8:05:08:62:d0:45:e8:68:1d:66:
d1:84:07:85:ff:3e:65:ff:09:a0:62:2d:a4:57:58:dc:76:39:
6b:c1:d7:b4:fc:5d:9f:1a:96:fe:47:ca:34:39:39:b8:c3:5b:
61:7f:c4:16:ad:43:aa:47:ef:0c:f2:cd:b9:dc:32:c2:b4:28:
d7:14:af:a7:0f:6f:62:34:3d:de:0a:c1:34:0d:7a:21:99:8f:
32:2b:83:0e:11:02:0a:9a:f2:44:56:27:32:dd:f1:00:a1:0d:
8e:27:9e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:24 2025 by rpki-client