Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa
File: BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa (raw, json)
Hash identifier: DzzXp7ohKMicQourdcNR0kS22RTAEFQSJ/9tBCQrWcc=
Subject key identifier: 05:32:8D:33:FC:98:F5:C7:F9:9C:C6:F2:40:11:97:10:3C:9E:2E:2D
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 019420D5FC1A841F9F70CC71E53289BEE3EE
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43054
IP address blocks: 80.91.219.0/24 maxlen: 24
185.225.27.0/24 maxlen: 24
188.190.113.0/24 maxlen: 24
193.41.32.0/24 maxlen: 24
193.200.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fc:1a:84:1f:9f:70:cc:71:e5:32:89:be:e3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05328d33fc98f5c7f99cc6f2401197103c9e2e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:73:28:1e:c7:ec:17:ad:89:86:0d:66:d5:
88:b6:52:76:09:77:e3:a6:8b:bd:83:af:db:b6:40:
ac:c3:d1:95:80:dd:de:9e:30:4e:76:52:d6:4f:e3:
bb:d8:e0:79:9d:bb:30:0f:68:37:c5:1c:e0:0e:a7:
c3:bd:22:c9:93:b4:e8:2c:36:73:e2:47:bc:7d:5e:
55:dd:ef:3f:d1:79:fd:56:58:3a:c9:53:f1:36:54:
fe:7d:d3:e6:12:91:73:47:e4:d6:25:bd:0c:6b:a4:
0d:8c:b8:07:41:2e:85:85:95:97:17:e6:91:09:63:
c5:8a:ea:5b:e5:b6:dc:ad:37:db:b0:68:45:23:5a:
33:39:0b:ff:91:5a:a4:47:96:ff:15:7a:5f:e2:98:
1a:6d:de:fd:2f:17:7e:8d:44:f8:f1:88:ce:e5:db:
b7:08:f9:b6:c8:17:b9:82:9f:d9:3a:0e:b0:4d:35:
4d:84:76:42:74:25:63:87:75:71:de:f2:96:dc:97:
c3:f3:8a:35:6f:7d:23:94:20:4b:6d:3f:b9:81:c2:
e6:b2:7e:6f:ed:17:4d:f6:c4:92:59:b3:5e:47:3b:
ec:16:6a:d1:2b:56:d6:4c:74:56:47:29:ae:1e:53:
7c:62:a6:c2:24:c8:b2:61:4a:6b:cd:9b:78:44:e0:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:8D:33:FC:98:F5:C7:F9:9C:C6:F2:40:11:97:10:3C:9E:2E:2D
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/BTKNM_yY9cf5nMbyQBGXEDyeLi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.219.0/24
185.225.27.0/24
188.190.113.0/24
193.41.32.0/24
193.200.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ef:68:aa:ae:7d:96:40:2b:94:8d:1a:8a:dd:9a:21:c6:14:
1a:e4:ce:c6:62:1f:ab:7c:0a:7e:96:ff:0c:59:83:f1:9b:49:
c8:4b:ba:74:27:b9:f6:63:19:1c:77:d5:4c:e2:bc:af:c5:ad:
89:aa:0a:b6:70:55:e5:48:c9:33:94:1e:44:81:1d:2a:02:3a:
d3:15:29:e2:46:5b:9e:8f:c8:ef:cf:38:13:a3:9c:20:66:ec:
a2:05:5b:a1:d4:b7:f2:d3:10:60:c1:eb:5b:7d:cd:8c:32:35:
08:b6:68:78:55:78:19:e8:88:69:15:ba:57:82:de:19:f0:1e:
50:63:d0:61:10:c9:35:f2:ed:df:bb:c7:2f:71:c5:5d:0f:2e:
ce:e9:90:2f:e8:d0:b6:67:4a:ff:2e:93:31:00:92:d4:c5:b4:
d0:75:c1:dd:0d:88:5c:3b:dc:a3:8d:1f:52:32:72:6e:cf:20:
d0:13:bd:e8:1e:32:e2:c4:b1:a5:bd:7f:83:d2:d3:47:b6:98:
6e:e6:5b:bc:1c:36:44:db:e1:50:a2:5d:a1:5d:e0:52:01:9f:
18:31:79:8d:89:9f:b2:bb:6f:6f:26:c1:e1:f8:c0:93:06:fc:
15:ab:7c:e2:28:68:67:06:66:d8:aa:4b:7f:ba:cd:ff:f0:1c:
b7:73:a5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:58 2025 by rpki-client