Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BY7ZmjTDEFB7p5jjpRyap1E5DPY.roa
File: BY7ZmjTDEFB7p5jjpRyap1E5DPY.roa (raw, json)
Hash identifier: Z901Qh0PnkNmeAw89VjiSB+Jb7KJJhv1n7KKl2fBVYw=
Subject key identifier: 05:8E:D9:9A:34:C3:10:50:7B:A7:98:E3:A5:1C:9A:A7:51:39:0C:F6
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77D3B1A6E4B35FF746E657D296546
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BY7ZmjTDEFB7p5jjpRyap1E5DPY.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34073
IP address blocks: 81.198.73.0/24 maxlen: 24
81.198.192.0/22 maxlen: 24
81.198.194.0/24 maxlen: 24
87.110.220.0/24 maxlen: 24
87.110.221.0/24 maxlen: 24
87.246.172.0/24 maxlen: 24
94.100.10.0/24 maxlen: 24
2a02:2330:b2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7d:3b:1a:6e:4b:35:ff:74:6e:65:7d:29:65:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=058ed99a34c310507ba798e3a51c9aa751390cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:8e:06:3b:fb:c6:12:e0:66:59:40:02:55:
e3:3f:60:7e:94:d6:27:65:59:f3:92:eb:a5:79:c6:
35:21:b9:09:09:fb:9d:4b:08:db:e9:96:37:3b:c8:
74:e1:66:bb:a9:a2:23:77:48:7f:e2:75:ec:39:53:
70:16:85:eb:95:36:e8:dc:45:f3:6e:47:7c:a7:d0:
41:02:dd:c3:24:19:e1:2a:fa:e2:cb:b5:30:f4:4e:
f9:ba:84:29:62:d2:ee:42:ca:01:47:7c:47:bd:d3:
65:ce:1b:0d:8f:c0:9a:ed:a6:c1:00:84:d6:35:13:
8a:16:93:93:55:73:57:5d:81:cd:bf:35:1f:38:58:
56:d5:b2:ee:f7:af:87:8b:3c:48:1e:14:7a:38:d8:
2c:4c:89:5a:18:a6:f8:f9:dc:e6:a3:7d:7a:5b:6f:
90:c2:36:fc:44:fb:f3:db:5b:5a:a1:09:a1:39:81:
42:bf:1c:98:2c:97:eb:50:46:95:d1:fc:b3:a8:f3:
8c:8f:96:90:b9:84:82:4b:05:eb:f7:29:46:19:f3:
ba:2d:b5:9d:d2:05:da:7d:9f:ef:66:d9:d4:fa:df:
5c:10:4a:c6:f5:90:30:e3:da:77:7d:d1:7b:ee:89:
a7:71:c3:12:fc:e0:d2:c6:73:92:a7:eb:ca:03:e8:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:D9:9A:34:C3:10:50:7B:A7:98:E3:A5:1C:9A:A7:51:39:0C:F6
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/BY7ZmjTDEFB7p5jjpRyap1E5DPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.73.0/24
81.198.192.0/22
87.110.220.0/23
87.246.172.0/24
94.100.10.0/24
IPv6:
2a02:2330:b2::/48
Signature Algorithm: sha256WithRSAEncryption
4a:d3:15:ba:8c:22:97:8c:db:ce:ea:49:a0:98:62:48:e1:f1:
9b:1d:a6:5a:83:0f:64:4e:ff:7e:73:1d:cf:be:65:12:61:fb:
55:61:cc:b7:cd:02:52:2b:70:f0:ab:18:81:1b:1c:06:2b:cc:
4d:db:b2:fa:7c:9b:bd:9f:8e:a7:84:d3:08:a3:4a:b1:7d:d6:
b8:95:e8:c3:88:50:f3:6b:42:c2:38:3a:fd:23:08:80:a5:13:
c6:20:37:9e:c2:66:b8:39:76:0b:6e:a5:3f:db:fa:5e:90:d6:
43:37:69:2e:89:ad:1b:87:22:3d:b3:4f:76:de:a5:43:77:ac:
2d:1a:9e:c9:4d:9f:b7:4a:82:4d:b8:eb:c3:c1:99:b7:42:26:
3f:f7:fc:d3:29:a3:1b:bc:7c:e3:69:fc:48:e8:ef:76:45:97:
31:c7:26:50:07:2f:21:1b:f1:bc:c6:18:74:6e:ec:1c:da:1c:
b1:83:30:38:d4:f2:99:4a:dd:3e:c8:03:16:dc:70:ac:72:25:
ed:80:2c:aa:7f:e7:96:7c:fb:b7:ab:a7:63:f0:ce:e0:2c:50:
8e:b0:44:b0:25:1d:e2:d6:25:33:6e:e4:fb:5b:74:08:57:fd:
66:24:13:a3:8f:ac:dc:8c:69:24:71:a7:ac:03:63:bc:c3:f6:
bb:54:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:49 2025 by rpki-client