Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa
File: BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa (raw, json)
Hash identifier: dhnOSGwwFwvObL8RZcLi9yQu3vNONDGpXOnywWVyiUg=
Subject key identifier: 05:96:30:48:79:12:53:52:8B:5A:96:C7:73:C3:63:45:06:CB:49:BF
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 019425FDCE29DB7C3D63D0BE307A94C714E5
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48685
IP address blocks: 94.142.152.0/21 maxlen: 21
176.10.32.0/21 maxlen: 21
176.57.224.0/20 maxlen: 20
185.25.252.0/22 maxlen: 22
185.169.188.0/22 maxlen: 22
185.169.188.0/23 maxlen: 23
2a06:a100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ce:29:db:7c:3d:63:d0:be:30:7a:94:c7:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05963048791253528b5a96c773c3634506cb49bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:d6:31:23:98:05:65:ca:c5:ef:59:a2:ec:
23:80:f0:db:be:bf:aa:d5:89:e8:e5:c7:af:ae:c9:
ca:88:d3:a9:f9:02:8d:76:9b:0b:04:81:a7:09:75:
46:02:b6:20:d0:ea:7c:5d:a5:a5:bb:de:91:9e:70:
16:bb:b4:eb:52:94:ee:6e:e7:02:69:99:57:eb:ee:
7e:48:0f:c3:c8:97:8f:e7:2c:89:03:61:96:a9:d0:
e8:9b:48:d3:1c:c3:53:03:a8:4d:7f:57:a0:29:88:
f0:cb:8c:36:78:8b:7e:5e:fb:49:66:2c:f4:27:fe:
64:95:ee:af:cb:d2:da:c9:ea:98:13:21:7a:89:c3:
62:c7:e0:71:38:51:5a:e0:ad:a5:32:12:22:36:00:
61:e5:03:32:a4:9e:75:5b:b7:c6:03:1a:fa:41:a1:
06:32:87:77:ba:e2:f0:01:9d:00:85:8b:c1:62:c1:
5f:c1:bb:f8:14:a1:6b:4d:1a:fc:d6:9e:e8:5e:ef:
96:b7:c6:08:93:c2:47:ed:3e:4f:4d:78:59:0b:93:
81:5c:af:5e:a3:9f:98:49:2e:80:b5:ef:b3:fc:4b:
61:19:40:76:40:a8:22:5d:d0:85:71:3e:b3:1d:a6:
89:c1:49:eb:30:3b:64:45:53:83:25:29:3c:fb:85:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:30:48:79:12:53:52:8B:5A:96:C7:73:C3:63:45:06:CB:49:BF
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/BZYwSHkSU1KLWpbHc8NjRQbLSb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.152.0/21
176.10.32.0/21
176.57.224.0/20
185.25.252.0/22
185.169.188.0/22
IPv6:
2a06:a100::/29
Signature Algorithm: sha256WithRSAEncryption
26:45:df:73:8f:02:65:8c:13:83:64:44:7c:5f:a1:fd:c9:aa:
41:ba:04:ae:54:26:ee:b3:c2:8d:50:59:2c:8c:24:ba:4a:5c:
2f:67:08:a1:fd:44:ec:51:02:44:6a:d3:71:8e:f9:dc:66:d5:
39:e8:9e:17:ba:8a:ee:2c:32:59:1d:4e:73:f0:c7:44:ff:b6:
06:b8:cb:bc:da:08:23:86:41:3b:98:26:f3:f6:c6:0c:69:62:
4c:60:0b:9f:f5:36:aa:a0:eb:c3:a0:32:43:4c:37:09:51:0d:
d4:45:b4:69:3e:6a:ba:79:26:e0:eb:76:68:64:a0:e1:db:e7:
ec:d1:3f:49:d9:e2:09:38:be:b2:01:6c:b0:28:72:80:4e:b8:
05:3e:0c:42:3c:b9:40:4a:e9:83:56:aa:c4:74:b2:a9:46:e0:
d3:1e:2e:a1:4b:ec:a1:b4:87:6e:e7:73:34:c4:f3:e1:18:42:
08:72:58:26:f5:79:af:e6:24:e4:d7:44:2c:dd:93:98:37:f2:
5c:26:ea:6c:46:c8:60:e7:e2:6b:40:44:4a:8c:b9:5a:f6:2d:
35:b7:a4:62:8b:dd:57:0b:97:3e:7e:6d:b9:e9:a3:8f:60:42:
1c:fe:a0:d3:df:03:90:7a:bc:db:5e:5f:39:b4:ea:d6:80:47:
ee:d6:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:17 2025 by rpki-client