Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/BBB1zBhlO7PBMxmh7ehBIRq2-Nk.roa
File: BBB1zBhlO7PBMxmh7ehBIRq2-Nk.roa (raw, json)
Hash identifier: dFAIxxn9EfhCbjaj49UShIYZRajslmfUyDIcWwGGdc0=
Subject key identifier: 04:10:75:CC:18:65:3B:B3:C1:33:19:A1:ED:E8:41:21:1A:B6:F8:D9
Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial: 0194258F598D5A40B6A05D8FD4B64891CD5D
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/BBB1zBhlO7PBMxmh7ehBIRq2-Nk.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42493
IP address blocks: 5.35.216.0/21 maxlen: 24
77.73.40.0/21 maxlen: 24
185.40.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:59:8d:5a:40:b6:a0:5d:8f:d4:b6:48:91:cd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041075cc18653bb3c13319a1ede841211ab6f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:2f:e0:b8:ac:ed:c3:19:6a:33:87:85:5f:
2a:45:6b:83:b7:b3:de:e4:2c:f0:19:15:62:6b:06:
ed:63:27:69:8f:37:b1:f1:8c:ee:1d:2c:1a:16:ce:
f8:3a:07:65:0e:61:94:72:f9:43:fc:45:80:a7:3e:
0d:3d:e4:15:1b:29:80:8e:8e:33:e5:25:36:98:b3:
d4:98:61:81:96:2a:82:6e:5c:b4:0f:9b:7b:66:00:
d4:c0:55:73:d9:ee:e4:94:86:8d:39:75:df:dd:70:
ae:1d:10:22:6e:fc:29:6c:e2:ee:0a:cf:ac:08:ef:
3d:23:2e:14:6b:99:eb:fa:70:77:55:2f:3a:8e:f5:
47:e9:4b:84:04:ea:13:41:8d:67:4a:a5:ea:ed:73:
65:8d:ff:e9:55:8d:74:44:ba:57:63:12:0c:b2:8a:
60:3a:3f:ed:8d:ec:70:4d:0c:44:a8:86:aa:db:b7:
6d:fa:83:1c:43:01:1a:21:38:64:08:c4:d5:10:36:
73:36:67:6d:46:08:ee:eb:6b:6d:0f:f1:c3:1c:8d:
ba:d6:ac:0e:7c:8e:e7:6e:6b:e1:28:6d:30:06:db:
c6:32:eb:35:af:2f:2b:2c:8f:43:5f:e4:b6:db:f2:
fc:63:68:aa:98:40:c3:9c:ce:10:cf:dd:7e:92:ee:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:75:CC:18:65:3B:B3:C1:33:19:A1:ED:E8:41:21:1A:B6:F8:D9
X509v3 Authority Key Identifier:
keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/BBB1zBhlO7PBMxmh7ehBIRq2-Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.216.0/21
77.73.40.0/21
185.40.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:74:c0:77:2e:ba:01:94:4b:44:d5:b3:4d:8b:d0:24:54:d8:
bf:3d:d0:02:b9:07:23:db:49:3c:38:fd:a8:e5:be:96:94:dc:
4d:8a:f5:0a:6a:95:7e:6e:97:d6:b4:6c:c7:fa:a9:dd:f2:d1:
69:c2:07:19:87:8a:17:cc:50:48:0f:21:d3:d4:c1:6b:e2:16:
0e:89:d7:fe:0f:57:f5:a9:c7:a3:07:eb:70:8d:f7:79:35:ad:
5b:18:18:4d:60:c7:d4:04:fa:85:29:f4:8c:55:49:a2:89:d6:
e3:5c:be:a7:0d:50:93:06:9e:be:92:e1:3e:f8:33:03:17:a5:
1b:23:34:aa:a6:8e:df:7f:e3:65:2f:65:92:47:b1:fa:f7:24:
56:b5:55:c5:e2:89:29:6b:11:d6:47:b6:2a:cd:e6:b5:8b:57:
3c:03:10:16:e3:e5:de:18:53:80:4f:be:46:72:12:7f:fe:d4:
d8:1b:cc:7f:2f:84:2e:a6:be:31:f4:a3:77:b4:e1:1d:46:a1:
f4:46:54:a7:59:14:ac:8a:d8:5b:40:14:32:01:d0:c1:65:77:
90:b0:c3:c9:59:62:62:9e:e9:b0:b2:b3:12:27:87:71:3f:b4:
c9:2b:d7:a1:05:e4:39:49:19:fc:9c:2d:47:96:71:3b:16:ad:
8f:90:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:23 2025 by rpki-client