Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/Bc5MZ_WIrACpPANk5bSywtmoLTs.roa
File: Bc5MZ_WIrACpPANk5bSywtmoLTs.roa (raw, json)
Hash identifier: UuacJmWSGdWyhAmdhk7kB4JhqQwiJFQ9axbJenAEICk=
Subject key identifier: 05:CE:4C:67:F5:88:AC:00:A9:3C:03:64:E5:B4:B2:C2:D9:A8:2D:3B
Certificate issuer: /CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Certificate serial: 019424B392FCFD772E4EC257CF06B9861B60
Authority key identifier: EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/Bc5MZ_WIrACpPANk5bSywtmoLTs.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48551
IP address blocks: 185.159.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:92:fc:fd:77:2e:4e:c2:57:cf:06:b9:86:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc524d6276b0ffbf87af7c7dfb826897fec7976
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05ce4c67f588ac00a93c0364e5b4b2c2d9a82d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:ab:c3:39:07:1e:cf:7b:c6:36:a9:ca:cb:
d1:eb:1b:b6:f4:90:58:26:7c:38:b3:dc:1a:1f:6b:
3c:ba:7c:7e:e1:c3:17:30:26:ad:a8:27:52:23:01:
5e:6d:d1:94:97:94:a6:a6:1f:10:d5:d8:07:ba:78:
bb:0d:f4:82:cf:56:88:f4:19:74:03:19:7c:95:54:
c7:40:48:c7:fb:d8:8a:27:8b:85:93:b0:f8:81:e9:
fb:6a:18:13:c3:61:57:bc:b2:b9:88:11:7f:e8:4e:
fd:86:a1:22:d1:e8:e8:0f:bd:ed:9f:52:c6:38:17:
fb:7d:0a:08:41:fd:31:bf:ae:11:53:c8:cb:87:2e:
c2:72:de:ca:d6:96:32:03:83:70:e6:a7:08:3f:b1:
7e:e0:7d:49:f5:da:60:ba:d1:c9:93:ae:fa:85:4e:
0f:20:2f:ad:20:1a:be:b8:6c:24:e9:ae:8a:04:74:
dd:9f:ef:cb:a9:1b:00:29:05:50:57:47:e8:c8:d4:
b9:49:5e:9e:75:a2:e1:eb:01:6b:00:a0:7f:6c:42:
14:a1:b6:2a:a3:36:3e:19:b4:45:7f:8a:50:5b:f9:
ca:42:74:3f:3b:8b:72:b7:36:36:76:27:2e:58:f1:
fe:3f:ae:18:9d:6d:67:75:57:f6:9a:ff:a4:05:e2:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:4C:67:F5:88:AC:00:A9:3C:03:64:E5:B4:B2:C2:D9:A8:2D:3B
X509v3 Authority Key Identifier:
keyid:EB:C5:24:D6:27:6B:0F:FB:F8:7A:F7:C7:DF:B8:26:89:7F:EC:79:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Uk1idrD_v4evfH37gmiX_seXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/Bc5MZ_WIrACpPANk5bSywtmoLTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2add71-6fa8-47af-ab0e-58fe7edebd8e/1/68Uk1idrD_v4evfH37gmiX_seXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:17:47:24:8d:f0:a4:bc:42:27:86:87:07:d8:82:d3:58:33:
7c:06:06:65:bc:bc:a1:6c:23:d1:26:fa:0a:d8:c0:28:92:74:
61:40:8a:cb:e8:61:7e:47:2b:34:99:d6:e5:bd:56:bc:2d:c7:
0c:e7:f6:7d:37:58:7d:32:20:0b:27:ce:3d:1d:bc:b2:2d:00:
cf:68:4f:cf:71:6c:6a:e6:93:4f:f3:e9:c6:34:b0:49:c4:a7:
98:3f:31:db:d7:ca:28:9e:f6:e0:6e:67:9e:23:89:80:31:f8:
81:cc:e4:c8:ba:a9:38:8b:2d:9f:77:29:f8:15:80:46:b9:e2:
84:26:cb:28:22:2d:70:e1:44:1a:7a:19:83:f9:ff:4f:56:4e:
2f:3a:a9:fc:33:51:c3:08:de:74:03:ba:1b:6e:bb:d9:23:c3:
26:61:eb:1f:cd:1b:c3:5e:ac:9f:c3:e6:d1:9c:d8:d0:40:61:
0f:12:66:c9:81:dd:3b:da:76:7c:e7:89:f0:88:8d:fd:56:f0:
d0:3f:ff:8d:d5:d6:a4:4e:8e:64:0d:55:cf:c4:60:26:0a:bb:
4b:31:a8:10:b6:4f:82:70:8a:a4:dd:de:9b:fa:47:f2:b2:8e:
61:c4:b3:85:57:47:9e:00:c0:dc:55:0f:cc:c3:4c:4c:56:e8:
48:3b:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:10:09 2025 by rpki-client