Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/BBKqIumEvQjL8b0aHvJsG7_dv_w.roa
File: BBKqIumEvQjL8b0aHvJsG7_dv_w.roa (raw, json)
Hash identifier: sS+JRPTTyxHDwSasc/B/8kRhyr0hzWqPDr1h36aZ+vc=
Subject key identifier: 04:12:AA:22:E9:84:BD:08:CB:F1:BD:1A:1E:F2:6C:1B:BF:DD:BF:FC
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C2BE9EC77D11C53B615BBEF2D7B74
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/BBKqIumEvQjL8b0aHvJsG7_dv_w.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200229
IP address blocks: 5.39.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:e9:ec:77:d1:1c:53:b6:15:bb:ef:2d:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0412aa22e984bd08cbf1bd1a1ef26c1bbfddbffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:36:ff:13:76:76:5d:dd:e6:a4:d0:96:6e:
de:14:95:d7:4b:90:38:6f:f2:7b:04:b1:92:8c:3c:
f7:6e:64:52:22:76:fd:07:c6:b9:96:d7:40:4d:05:
17:b8:7e:5b:5c:33:0a:9f:f8:6a:19:3a:d0:9d:eb:
49:a5:c6:8e:cd:a2:2a:8c:8f:18:83:30:f7:f7:92:
ec:77:3d:49:2c:a3:01:97:f7:9f:f9:65:b9:3f:4a:
54:bf:3e:07:c2:91:bd:fa:82:22:3a:28:a3:63:67:
a1:dc:1c:a1:23:eb:95:85:81:21:f9:c0:7b:35:fe:
7a:c4:92:9a:59:b1:41:a8:99:8b:b4:c6:30:08:6a:
38:e2:1a:e3:a4:39:96:e9:ca:6d:f4:51:8f:95:23:
d9:6e:86:8f:f9:eb:42:de:24:6b:73:5d:ac:19:ed:
21:6e:08:47:86:1d:b3:15:43:a2:d2:89:af:e4:78:
37:8f:76:da:a8:1c:dc:24:0b:9e:3c:04:33:d7:de:
7a:d8:96:1c:68:59:7b:2a:7b:9e:f7:1d:eb:1b:0b:
30:b3:bb:29:5f:6e:99:8c:11:64:c5:66:d3:2e:53:
48:a4:b0:56:30:78:77:1d:14:ed:f7:c2:20:90:43:
31:dc:22:9a:d2:2f:63:87:7f:ff:36:24:5d:dd:58:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:AA:22:E9:84:BD:08:CB:F1:BD:1A:1E:F2:6C:1B:BF:DD:BF:FC
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/BBKqIumEvQjL8b0aHvJsG7_dv_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:49:18:8d:87:13:0b:18:45:45:4d:bb:1e:2e:4b:5b:ee:23:
ec:bf:a0:27:ad:8c:d1:04:7f:83:eb:36:2a:eb:69:07:36:3f:
29:a5:d0:c4:6d:c6:13:95:eb:b4:29:07:05:be:c0:4a:97:a5:
25:74:65:d3:8d:fb:68:6a:2c:55:d9:e9:a4:97:a5:be:1a:e3:
74:72:db:51:d8:25:d1:31:95:e5:34:ec:62:1f:0e:d6:e7:27:
8e:25:9c:34:8a:c6:0b:1b:3b:9e:55:04:06:c8:19:8b:02:03:
d1:f3:24:1d:3b:62:5d:a8:b4:c3:70:7f:b8:16:c7:b0:c9:d9:
95:15:82:e4:2e:b0:47:11:ce:68:90:89:e7:d1:3d:c4:03:bc:
bf:69:45:70:fe:24:43:1f:01:1a:76:11:a4:22:2d:a5:79:ae:
81:64:d8:69:0d:4c:4d:34:bc:40:d5:34:b1:c1:cd:56:59:b0:
a5:5b:b6:ef:1e:9d:60:7c:30:47:61:5d:3e:f1:f2:e3:2a:d6:
ac:00:d6:65:07:7c:a9:71:17:65:16:8a:77:39:9b:e9:39:f4:
00:14:22:c0:71:69:26:6a:6c:a2:d0:a0:d7:0f:57:b7:2d:aa:
51:d1:d5:f9:1c:3e:67:c0:3e:9d:ca:8c:5a:9d:ee:6b:40:cf:
23:2c:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:33:44 2025 by rpki-client