Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/BHRefR2VcU9Cwhnc_jkStzqaKRk.roa
File: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (raw, json)
Hash identifier: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=
Subject key identifier: 04:74:5E:7D:1D:95:71:4F:42:C2:19:DC:FE:39:12:B7:3A:9A:29:19
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 0194236A3A829E9E9E70460DEE29D372A5C5
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/BHRefR2VcU9Cwhnc_jkStzqaKRk.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29311
IP address blocks: 62.112.224.0/19 maxlen: 24
185.61.224.0/22 maxlen: 24
213.108.29.0/24 maxlen: 24
2a00:1558::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3a:82:9e:9e:9e:70:46:0d:ee:29:d3:72:a5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04745e7d1d95714f42c219dcfe3912b73a9a2919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:93:98:db:ca:16:77:12:10:f2:d2:bb:6f:
32:24:c8:0a:36:f5:65:35:04:8e:88:4b:24:1b:ea:
7d:25:f7:27:2b:e5:0e:bc:c4:f6:b2:60:08:d9:7b:
7b:25:76:3a:7c:ea:c1:b2:20:46:63:a1:59:bd:e7:
01:7e:93:9a:da:e8:db:60:84:d4:ac:d4:98:c3:09:
24:32:a9:36:07:53:ae:5b:15:2c:23:ff:29:85:2c:
cd:29:36:8c:9a:8b:3a:9a:27:a6:d0:2e:1e:40:3c:
85:b7:62:ef:83:65:70:98:58:12:71:79:99:91:1f:
f3:a4:17:fb:d7:a3:46:fa:27:ad:7b:d7:dc:b0:94:
b7:ae:85:3f:54:3d:9f:dd:68:d5:33:59:d6:d3:04:
91:bb:62:35:0c:be:00:b1:90:bb:10:e0:b9:94:11:
96:11:66:c8:c7:a9:cd:f5:6f:17:68:9f:8d:4a:a3:
27:63:24:ae:bc:5c:ef:34:58:50:71:55:f0:56:de:
35:73:b4:d0:37:42:06:7a:3f:fc:ad:12:2e:b0:55:
7b:7a:bd:63:70:8c:85:58:29:e2:64:10:5e:30:32:
e8:37:a4:f3:2b:db:fd:2b:36:56:64:f6:5d:41:89:
06:92:97:18:0b:03:58:11:34:f6:d9:19:1a:92:eb:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:5E:7D:1D:95:71:4F:42:C2:19:DC:FE:39:12:B7:3A:9A:29:19
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/BHRefR2VcU9Cwhnc_jkStzqaKRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.224.0/19
185.61.224.0/22
213.108.29.0/24
IPv6:
2a00:1558::/32
Signature Algorithm: sha256WithRSAEncryption
a7:5b:44:15:0f:7c:c4:3a:87:da:76:36:02:64:04:84:60:8d:
98:d3:9a:d3:66:63:b3:d6:3d:09:1b:44:e1:d3:0e:b8:a0:68:
3a:3e:e6:a6:38:e3:0b:04:40:7e:d3:3d:4c:7c:b4:da:d0:e7:
36:bd:14:8f:25:08:25:ad:6b:b4:e0:0b:85:e7:07:41:7a:8c:
2d:c9:2d:6e:f3:b2:a2:1b:de:d3:65:7b:9b:4f:8c:be:09:30:
69:f6:93:c9:4a:73:1f:73:8c:d2:20:8e:95:52:99:f9:87:84:
62:5b:44:cd:cb:dc:5a:7a:0a:23:19:19:07:ee:e6:81:38:7e:
1a:f1:3b:3a:d1:3b:69:c6:ba:02:24:d6:ee:73:68:99:b9:05:
e9:b0:89:88:3d:a3:62:07:3e:a3:6e:52:af:a9:34:8a:c7:84:
3f:4c:ae:b3:46:f3:fc:bd:25:d1:51:e9:26:c4:58:8b:54:99:
5f:58:6b:71:f2:f1:55:6c:61:a0:df:8d:be:fe:03:16:32:92:
63:2d:3c:aa:07:53:89:2d:07:0f:58:94:e5:b5:a3:13:21:7b:
0f:5f:4f:88:6b:0f:48:a1:ae:6d:ec:68:b3:9f:da:ec:7f:da:
13:db:1b:04:ff:97:49:82:32:e3:6c:f0:e8:7b:aa:2e:69:e0:
dc:ca:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:13 2025 by rpki-client