Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bszL0stDcyz_l5U1K9lVQW3fxWg.roa
File: bszL0stDcyz_l5U1K9lVQW3fxWg.roa (raw, json)
Hash identifier: UePUg8z4Nbn52X3Ba/A3SV6y+3steFWLqknSKCFRTdM=
Subject key identifier: 6E:CC:CB:D2:CB:43:73:2C:FF:97:95:35:2B:D9:55:41:6D:DF:C5:68
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D777FE5F2A273EDE1C6E18FDD27C3F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bszL0stDcyz_l5U1K9lVQW3fxWg.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6906
IP address blocks: 81.198.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:77:fe:5f:2a:27:3e:de:1c:6e:18:fd:d2:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ecccbd2cb43732cff9795352bd955416ddfc568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:5a:73:72:64:98:2b:e9:4b:1e:01:85:b8:
bd:f5:26:53:60:e0:b7:43:db:6a:0c:50:e2:d5:23:
d2:22:22:56:39:6a:f1:d7:df:69:84:99:b7:ca:7c:
ae:da:1b:2c:b5:d8:92:1c:88:42:11:d0:41:b9:7d:
2a:64:f1:8d:79:ce:f9:9a:5d:be:cd:77:a7:62:99:
68:c6:29:b4:8e:ca:66:fc:58:94:89:19:1f:3f:01:
bf:91:9a:1a:bb:da:96:6d:23:43:c3:e3:0d:d7:2a:
99:80:c4:21:80:d0:3f:27:f8:c7:94:4b:bf:e0:cd:
d3:3b:47:24:5a:43:bc:87:86:62:09:18:21:f4:ea:
0f:39:0c:58:95:7f:a7:14:1c:ec:40:27:f3:b6:7d:
27:38:d2:51:aa:96:af:3e:e0:0f:96:34:aa:d1:f2:
5a:86:5b:1a:e5:d7:a6:23:7a:33:9e:2b:6d:02:10:
64:4f:b8:8b:15:b2:9a:6f:89:bd:d3:f7:0c:19:ad:
34:9c:7b:60:c5:50:b2:a0:df:68:6e:4f:9c:92:55:
00:07:a2:6c:23:4d:14:f5:dc:4b:72:cc:02:ea:68:
ec:ff:40:7b:d8:9c:66:4e:91:02:73:43:1c:79:ee:
d1:c1:7a:ca:ff:23:2e:3d:bc:51:b3:60:cd:f7:93:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CC:CB:D2:CB:43:73:2C:FF:97:95:35:2B:D9:55:41:6D:DF:C5:68
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/bszL0stDcyz_l5U1K9lVQW3fxWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:22:e3:4e:82:d0:c5:5d:fb:d9:10:c1:5e:aa:7a:66:20:6a:
73:bc:c6:b5:5f:e6:1e:2e:5f:fa:23:f5:06:0d:25:cc:a9:4c:
d2:52:fb:66:8b:bf:98:83:05:4f:47:1f:79:f9:40:fe:a0:c8:
33:f5:51:86:d5:29:c9:da:a9:33:cb:26:8b:90:38:1a:49:3f:
7f:2b:39:7b:0c:7b:dd:0c:af:0f:d8:ae:9c:2d:29:6c:1b:f4:
c4:80:4f:58:8f:52:bd:4a:81:ca:07:1d:67:74:74:76:98:09:
a6:8d:f6:3e:d9:32:db:fe:55:62:e6:cc:19:5a:cc:7c:24:50:
31:77:bf:17:f3:f1:09:a4:63:ef:c6:40:e7:4a:dd:36:00:37:
07:2a:96:d4:e1:9f:c7:c9:69:e5:7f:75:42:4b:c6:02:8d:fe:
e9:50:c6:2e:31:6b:42:ac:18:8b:89:0a:81:89:86:46:ed:14:
15:32:e3:11:91:c7:8d:94:63:f7:ae:24:7e:f6:3b:4d:d7:ec:
d6:73:d6:29:39:f9:3e:85:4c:b2:b2:80:75:76:f6:df:dd:8b:
be:d8:a9:f0:d5:36:3e:b6:44:e6:67:83:7f:e7:4b:ea:44:e2:
c7:d7:24:ba:39:d3:9d:58:31:67:ea:d0:5f:56:5c:ec:6e:69:
06:2f:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:10 2025 by rpki-client