Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BWw9s-SKJATMuMkJjohZjSTxRks.roa
File: BWw9s-SKJATMuMkJjohZjSTxRks.roa (raw, json)
Hash identifier: UUxrHSgyZNCTk8bAeE1N4yYvUEIaa4+r4oIwGEpCZTQ=
Subject key identifier: 05:6C:3D:B3:E4:8A:24:04:CC:B8:C9:09:8E:88:59:8D:24:F1:46:4B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C158E06B9012B3A5CAB3003E7B817
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BWw9s-SKJATMuMkJjohZjSTxRks.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25103
IP address blocks: 80.96.234.0/24 maxlen: 24
80.96.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:15:8e:06:b9:01:2b:3a:5c:ab:30:03:e7:b8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=056c3db3e48a2404ccb8c9098e88598d24f1464b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:c5:fd:32:bd:ff:88:3f:74:e8:df:e2:97:
43:08:c9:5f:93:4c:c8:9d:43:73:5e:5d:ac:8b:c5:
c3:52:f5:2f:5d:ef:f3:25:d8:49:89:aa:d8:ef:ed:
35:44:87:06:cc:06:fc:de:c3:35:30:29:27:2a:9e:
4a:0e:18:69:51:1b:b8:ed:6d:ca:94:14:1e:0d:40:
d7:3b:81:e4:06:ab:52:34:24:d8:c9:b7:de:57:be:
62:2e:8a:ef:df:7d:7c:21:ff:c0:65:b9:a9:8a:26:
68:63:3f:ab:fc:5d:2b:da:23:ab:59:34:cb:87:f6:
ab:e1:e5:6f:18:cf:45:9a:52:88:ef:fa:31:50:b2:
62:f8:0b:f0:69:fa:ed:59:99:e9:dc:ea:e7:ee:7a:
a2:68:9a:1d:21:a9:48:8c:39:ee:3c:15:5d:ed:cf:
43:77:9a:cd:25:b2:d8:4e:46:a2:96:00:30:29:57:
dc:08:28:05:d3:2c:02:83:15:26:f2:8e:72:08:31:
da:2c:e4:a1:37:82:9a:31:66:15:92:8a:94:c5:dc:
3a:e6:47:89:1d:f9:16:21:b2:02:99:f8:45:08:4c:
ec:b0:0c:25:8b:ef:5a:2b:fb:5f:61:82:77:cf:b2:
42:78:16:7c:8b:45:71:4f:a8:25:8f:92:7a:91:7a:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:3D:B3:E4:8A:24:04:CC:B8:C9:09:8E:88:59:8D:24:F1:46:4B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BWw9s-SKJATMuMkJjohZjSTxRks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.234.0/24
80.96.247.0/24
Signature Algorithm: sha256WithRSAEncryption
87:66:7e:39:5a:10:e7:41:69:75:eb:c2:78:58:99:b7:54:0c:
74:d0:63:aa:83:29:6b:4c:4e:36:05:f4:d7:49:c6:d0:80:c3:
e7:ba:15:c6:46:be:f9:7b:c7:ec:5c:dd:a5:31:7a:57:73:b7:
92:dd:17:d1:0e:e2:1c:58:9b:fe:90:19:98:2e:0f:db:ca:47:
0f:36:b7:9c:68:ab:d8:22:48:8d:5b:6f:5c:78:bb:2e:af:45:
ff:a8:37:96:8a:40:a7:98:72:8e:a6:9b:ab:de:17:57:ef:17:
f6:7a:19:7d:37:31:f6:62:c1:22:b7:c3:2e:9b:f7:5f:ed:ce:
74:a1:6b:8b:39:a5:4c:83:5e:3f:cc:9a:2a:91:74:37:11:17:
63:98:28:28:c9:ca:49:c8:e0:dc:8d:74:68:71:09:90:cf:0f:
fc:2d:42:b3:57:c4:83:66:ce:f0:b0:26:e6:1e:4e:8e:86:82:
85:2b:af:27:30:3e:c8:69:e0:77:49:4f:a5:bd:24:27:ad:5c:
b9:df:19:4e:99:ab:cc:41:3c:22:d2:c0:fa:bc:82:c6:01:50:
4a:8b:9d:6b:81:86:a1:70:2e:92:89:d4:d9:42:eb:b5:6d:52:
39:b4:1d:f1:fa:72:b0:08:91:7c:76:3f:b0:28:d2:5e:d5:30:
a4:4e:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:14 2025 by rpki-client