Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BEp6LixAmbVrRQp425yy3NIpmxI.roa
File: BEp6LixAmbVrRQp425yy3NIpmxI.roa (raw, json)
Hash identifier: URvNc9hCBkCvbLApMSBQqwEE6W7K2IImsOSVYqUfyEQ=
Subject key identifier: 04:4A:7A:2E:2C:40:99:B5:6B:45:0A:78:DB:9C:B2:DC:D2:29:9B:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A02F309D5320B05FEBBD9C4FE5CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BEp6LixAmbVrRQp425yy3NIpmxI.roa
Signing time: Thu 02 Jan 2025 17:51:16 +0000
ROA not before: Thu 02 Jan 2025 17:51:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197715
IP address blocks: 81.161.236.0/24 maxlen: 24
92.119.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a0:2f:30:9d:53:20:b0:5f:eb:bd:9c:4f:e5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044a7a2e2c4099b56b450a78db9cb2dcd2299b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:55:b2:92:41:a0:34:ca:f3:1e:4c:77:5c:
b5:5d:6d:f8:b5:ff:e0:c4:e3:c6:04:1f:da:48:1c:
09:94:2c:98:4f:3c:e7:b8:9e:4f:a4:07:a6:a5:b5:
45:a8:21:9d:76:64:58:ca:c1:14:65:c8:28:e2:be:
73:29:4f:0c:00:7a:d0:e2:7b:7e:8f:7a:5e:e2:60:
b9:7d:69:66:d8:d3:ef:64:23:c2:7e:68:12:83:e9:
2c:d1:8a:7a:19:7e:aa:d0:7b:3b:ce:c4:88:87:da:
1f:50:db:a4:c4:d1:85:23:7f:70:e0:03:86:b3:c4:
1b:94:90:d7:6b:d2:42:03:ce:24:f8:bf:c4:ca:a2:
35:00:d5:a4:96:80:57:da:89:b4:3a:57:24:88:3f:
97:99:e0:c1:44:cb:82:88:dd:30:a4:e6:3a:14:bd:
24:7f:08:2d:40:5d:c7:45:d8:d5:3c:cb:41:bd:fd:
2a:08:9d:82:d7:6b:08:42:6c:e5:35:3b:1b:27:08:
1c:e4:47:5e:25:60:4e:a0:48:b9:c9:e5:fd:02:e0:
dd:62:75:f1:fa:37:08:3d:a8:2b:46:03:6e:00:57:
df:b9:a7:6a:76:4d:25:67:0c:8d:f9:43:69:ce:87:
9b:e2:2c:70:9e:a5:3e:81:08:26:f5:63:1f:f9:96:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:7A:2E:2C:40:99:B5:6B:45:0A:78:DB:9C:B2:DC:D2:29:9B:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BEp6LixAmbVrRQp425yy3NIpmxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
92.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8c:0d:f7:96:c8:85:cb:d5:90:63:09:54:63:e4:01:d9:56:
3a:39:26:c9:73:65:b9:8b:a8:8a:cf:ea:6d:2f:9b:ac:6c:5f:
59:f5:6e:c0:ca:a7:ec:cb:a2:1a:bd:4e:bb:6a:33:c7:79:55:
fa:06:16:0b:f8:7b:ec:00:59:0e:b0:bd:82:09:72:1d:81:54:
b7:f7:90:e6:74:f2:c9:94:f4:2c:9b:a4:d6:5f:6c:9b:15:20:
89:f6:df:73:10:d4:82:52:25:9d:dd:c5:2a:4e:c9:79:e7:8e:
1c:95:f3:a4:0c:a0:5d:4e:f9:2c:01:2d:3e:62:23:db:a6:3d:
ef:86:00:43:e9:32:1f:97:82:0d:a3:cd:21:b1:55:16:ed:6e:
90:ca:14:1d:8c:03:55:7e:ea:38:4d:62:d2:19:54:56:39:ab:
7d:10:40:2e:99:09:38:a8:21:05:f1:10:89:87:f5:15:37:74:
d5:22:07:77:31:6f:21:81:fb:4f:7c:e3:a0:a9:b7:76:9d:63:
d5:37:31:1d:84:54:4a:19:70:70:4d:71:78:2d:e0:a3:f9:1a:
9d:d9:02:44:41:a8:c0:4b:4b:8c:39:f0:04:2a:3d:5a:39:2d:
be:5f:72:2b:4f:b4:fb:7e:22:df:e4:9a:be:28:6c:4e:db:76:
a8:64:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:34 2025 by rpki-client