Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa
File: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (raw, json)
Hash identifier: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=
Subject key identifier: 04:13:B2:49:ED:80:A5:96:10:A5:3D:30:3C:62:7B:CD:5F:17:CE:C0
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA00862C81751A45A935ADDE6039B3
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa
Signing time: Thu 02 Jan 2025 11:50:08 +0000
ROA not before: Thu 02 Jan 2025 11:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50613
IP address blocks: 37.235.49.0/24 maxlen: 24
151.236.24.0/24 maxlen: 24
2a03:f80:354::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:00:86:2c:81:75:1a:45:a9:35:ad:de:60:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0413b249ed80a59610a53d303c627bcd5f17cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:e9:ad:4e:0e:76:e0:98:f2:a6:9b:00:7f:
dc:84:cb:3c:b4:0a:35:df:e1:01:6b:43:e4:3c:2c:
93:09:b5:13:a5:3f:28:1b:c1:e3:20:a9:3c:9f:a3:
38:6c:af:ea:14:73:55:d1:b7:2c:24:5a:c3:16:2c:
fa:12:69:63:5a:1c:85:90:94:1a:b2:9d:fd:cb:d7:
72:c6:a5:70:cf:60:e4:22:e9:93:29:a0:0e:c4:a1:
76:1e:de:2c:1a:f1:5b:bf:63:34:42:f7:64:f8:bc:
e7:e7:8e:a7:29:7c:99:98:7a:14:84:b6:86:78:c9:
2f:c7:17:63:1e:bd:92:a4:70:d6:c8:e5:14:90:d6:
a2:55:f4:0e:9d:74:78:f4:65:74:25:dc:a2:71:5e:
1d:83:d0:c3:ff:d3:d6:15:8f:2c:c1:10:8c:45:cd:
94:d0:05:51:94:8a:bd:f5:f5:89:bd:0d:9b:9c:47:
bb:46:66:a1:77:8f:05:34:2e:d6:51:2b:6e:d0:c5:
bb:4d:82:c0:d7:0c:39:2e:78:bf:c4:30:0a:17:42:
81:76:96:4f:23:b0:20:8a:0b:cb:9c:0e:ef:47:e6:
79:a7:f8:2a:4a:04:af:a7:f2:7f:f9:e2:88:dd:43:
fd:0a:d7:34:56:bc:7f:9c:ee:30:1b:44:8c:6f:ea:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:B2:49:ED:80:A5:96:10:A5:3D:30:3C:62:7B:CD:5F:17:CE:C0
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.49.0/24
151.236.24.0/24
IPv6:
2a03:f80:354::/48
Signature Algorithm: sha256WithRSAEncryption
96:ff:d6:a1:f2:d9:16:66:5f:26:84:0c:26:60:bd:f3:a3:6b:
b2:3e:53:c0:64:47:a4:f6:ce:34:09:9f:cb:96:ed:30:0b:2b:
69:8c:38:f1:cd:4e:0d:bd:79:cf:17:34:60:ef:37:72:21:93:
4a:15:30:a6:f9:e1:e8:60:1f:89:4f:42:e5:a9:5b:f5:39:25:
2b:9d:f8:fc:e2:91:06:bf:64:de:3e:ef:0a:26:54:0c:50:42:
5c:c0:3e:4c:b9:e8:a8:02:e3:01:5e:01:0f:13:20:8d:c8:d6:
07:dd:aa:80:17:e2:68:51:6a:9e:28:5d:24:f4:00:9c:f9:c8:
b1:3d:47:33:ff:28:f1:c3:9a:30:19:33:4b:59:a0:70:8e:5b:
2b:9b:11:2c:a0:3d:68:b2:e3:01:02:9d:d0:b1:3d:dc:1c:80:
0b:1a:6c:f1:4c:83:82:13:2c:18:6c:29:17:32:6b:be:c1:28:
f3:77:74:7c:65:c8:84:40:c7:18:c4:e4:68:83:9e:d3:ce:c7:
fa:f5:c5:e1:b0:69:64:15:b8:7a:12:8c:a2:4e:72:28:fc:86:
f9:a5:c6:9a:4d:ef:55:27:c4:9a:a1:b7:e4:6d:f9:aa:70:df:
c6:22:e9:b9:9e:67:92:83:ed:64:ee:fd:a1:b5:8c:8d:af:58:
ae:26:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:17 2025 by rpki-client