Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/bscorJtE41igLaTAQbtgAQqBxz0.roa
File: bscorJtE41igLaTAQbtgAQqBxz0.roa (raw, json)
Hash identifier: sGg8Ckzp0oPzFQ9Hy7BsC5B5QG6ZfSY1AxKv6j6SlLk=
Subject key identifier: 6E:C7:28:AC:9B:44:E3:58:A0:2D:A4:C0:41:BB:60:01:0A:81:C7:3D
Certificate issuer: /CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Certificate serial: 0194214441A49FF09F1B508D85CB4D6E48D2
Authority key identifier: 0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/bscorJtE41igLaTAQbtgAQqBxz0.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41419
IP address blocks: 89.250.80.0/20 maxlen: 24
89.250.81.0/24 maxlen: 24
89.250.82.0/24 maxlen: 24
89.250.83.0/24 maxlen: 24
89.250.84.0/24 maxlen: 24
89.250.85.0/24 maxlen: 24
89.250.86.0/24 maxlen: 24
89.250.87.0/24 maxlen: 24
89.250.88.0/24 maxlen: 24
89.250.89.0/24 maxlen: 24
89.250.90.0/24 maxlen: 24
89.250.91.0/24 maxlen: 24
89.250.92.0/24 maxlen: 24
89.250.93.0/24 maxlen: 24
89.250.94.0/24 maxlen: 24
89.250.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:41:a4:9f:f0:9f:1b:50:8d:85:cb:4d:6e:48:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0afe9d66655b5fd27b2c17ca9685650d53f3bb0a
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec728ac9b44e358a02da4c041bb60010a81c73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:59:0f:db:f5:df:5a:87:79:db:e6:e2:07:
a5:59:e5:85:21:de:c6:0a:67:b0:9d:03:ca:c0:0e:
ec:94:7e:57:2a:02:b6:8c:4f:5b:e4:c6:31:be:44:
31:38:5e:85:9b:06:5b:4a:d0:57:60:70:97:8a:94:
8b:23:f5:c1:cc:d0:d8:b6:dc:ce:8e:c1:6e:ed:e0:
6e:a3:e1:94:91:5e:1c:a4:9c:b2:30:ca:30:84:88:
52:98:65:75:c7:67:58:8b:8f:7a:c2:d0:90:40:f7:
c0:46:13:bd:74:01:98:2e:07:90:c8:72:8e:28:4e:
55:8a:2d:de:50:7a:1e:20:cd:fb:0e:79:9f:a7:43:
c1:f6:1d:b3:3d:fb:07:33:f6:15:ed:5a:50:19:85:
bf:8d:89:b5:78:06:4e:53:f1:96:95:eb:ae:bb:80:
ef:f0:ed:39:27:c6:06:e3:a0:8d:a1:22:7a:e4:ab:
d5:62:a2:b9:7b:b4:62:92:1a:a9:1c:b7:07:de:51:
48:a8:3f:37:a5:d9:99:d8:62:a1:60:ce:c6:b7:6a:
70:ce:1a:75:98:da:7b:dc:3b:1c:b3:96:bc:25:73:
f5:7b:89:b6:96:ce:11:3f:f2:06:bf:1a:c1:92:f1:
8f:19:c2:27:ca:04:f0:9c:43:77:35:d0:a6:47:90:
05:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:28:AC:9B:44:E3:58:A0:2D:A4:C0:41:BB:60:01:0A:81:C7:3D
X509v3 Authority Key Identifier:
keyid:0A:FE:9D:66:65:5B:5F:D2:7B:2C:17:CA:96:85:65:0D:53:F3:BB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cv6dZmVbX9J7LBfKloVlDVPzuwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/bscorJtE41igLaTAQbtgAQqBxz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/81ef2d-ae66-4739-8deb-bdc248a6f565/1/Cv6dZmVbX9J7LBfKloVlDVPzuwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.250.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:cb:8e:1c:90:df:44:a4:6a:11:a1:83:11:c2:76:01:f2:d1:
7b:f9:fc:eb:80:dc:68:d0:2d:90:ff:4e:49:16:2d:75:a3:6b:
30:bb:38:7e:ee:08:22:b1:4a:2d:c7:fb:e7:de:14:f8:ad:97:
6b:f2:9f:bf:32:65:d4:d7:21:67:2f:c1:8a:98:12:ef:f4:e5:
16:50:16:0d:db:9c:24:a8:fa:e3:3f:77:d1:a1:c3:19:0c:92:
30:82:ab:bb:88:86:80:c4:2e:b9:b0:6d:4b:37:1e:fa:6b:dd:
dd:44:c0:a4:07:59:ac:ee:36:f0:3b:12:be:fc:cb:42:56:31:
8d:80:76:9a:05:74:53:00:fa:07:b8:43:fa:42:40:a0:b3:3b:
7b:5c:5c:a3:c9:65:7c:70:a6:cb:6c:2f:0c:7b:99:fb:5b:70:
56:49:45:57:70:e0:65:e8:d4:76:2d:7c:b2:97:b5:62:cc:59:
77:e8:2a:ca:2d:d2:2a:66:7d:26:79:19:ae:e6:9c:d5:4e:3c:
6f:ef:7c:a8:54:fb:bd:5d:66:b0:c5:db:46:cd:12:ff:8a:1c:
8d:37:70:b6:82:64:65:45:93:f6:d4:35:52:30:bf:8f:a2:eb:
4a:db:9a:8a:8a:d9:0f:33:c5:85:ea:5c:2b:aa:43:21:0b:72:
1e:b7:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:25 2025 by rpki-client