Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BjjnvskFHojAmLtOcKHf6cIeor4.roa
File: BjjnvskFHojAmLtOcKHf6cIeor4.roa (raw, json)
Hash identifier: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=
Subject key identifier: 06:38:E7:BE:C9:05:1E:88:C0:98:BB:4E:70:A1:DF:E9:C2:1E:A2:BE
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA13180D834A11BA127BE88BA4F47
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BjjnvskFHojAmLtOcKHf6cIeor4.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42397
IP address blocks: 185.232.65.0/24 maxlen: 24
193.29.13.0/24 maxlen: 24
193.29.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a1:31:80:d8:34:a1:1b:a1:27:be:88:ba:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0638e7bec9051e88c098bb4e70a1dfe9c21ea2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:31:93:f9:fa:08:69:12:a9:67:3d:68:34:
64:47:9b:73:c0:28:c3:6f:b4:f3:19:d2:a7:3d:5e:
7f:38:f4:7f:3e:7b:42:c3:9b:9a:a5:52:1e:aa:1d:
9e:88:ab:38:bb:e7:04:4a:e0:08:28:30:68:59:d5:
a2:85:7e:8b:89:b2:b6:7b:f5:c3:1a:dc:ac:b2:87:
34:84:bb:0f:17:9e:4f:9b:b4:7e:0b:25:1c:be:3c:
a8:cd:fd:6e:bb:4f:28:6c:93:e6:6c:e5:6b:6e:83:
a9:9c:86:ba:d1:f8:e5:0d:eb:3c:1d:77:61:f8:2c:
90:ca:01:72:19:7f:43:83:d3:41:0c:9b:b7:5c:10:
72:cb:07:83:ad:55:dc:15:68:0e:f6:42:01:73:c6:
b6:27:94:a8:11:63:e2:53:72:cc:07:11:a0:85:fd:
db:5e:30:8d:80:47:16:c7:53:58:a0:33:16:a9:b8:
01:d0:6e:9f:4c:9c:8d:91:a5:f9:7c:05:8f:cd:57:
4b:c7:c0:f1:4f:2a:44:88:43:f7:76:79:f2:5e:91:
ed:97:d1:71:b9:ad:07:52:10:96:db:f4:4b:31:a7:
9c:58:be:44:37:ff:c9:80:7a:8a:71:03:90:4a:a2:
ef:ad:8f:8d:6c:55:b4:fd:20:44:a8:86:06:66:7b:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:E7:BE:C9:05:1E:88:C0:98:BB:4E:70:A1:DF:E9:C2:1E:A2:BE
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/BjjnvskFHojAmLtOcKHf6cIeor4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.65.0/24
193.29.13.0/24
193.29.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:87:57:ee:2d:12:28:23:2e:72:3c:2b:17:51:09:c9:0d:0c:
cb:d8:f2:d5:0f:f3:13:41:e0:1d:98:03:2a:dc:58:37:80:a3:
e9:24:97:61:07:10:ba:f5:f1:c6:31:78:fb:b8:a1:c8:25:52:
1e:19:b7:ab:18:f5:8d:1c:0e:ae:49:98:58:4b:7a:49:79:9a:
0a:9f:fa:62:78:fe:c0:e6:03:0e:68:c1:3b:49:10:d9:f6:f3:
2d:6d:24:31:b1:c3:cb:75:83:ac:a0:50:01:af:52:96:94:d7:
c2:a4:d7:10:d2:4d:96:67:57:55:41:ea:db:96:7e:fa:7c:51:
b2:69:f3:98:91:15:39:0b:f4:dd:f2:b9:55:1c:e5:bf:52:da:
6e:70:9b:88:a8:d8:d2:e6:4a:2c:88:7d:98:c3:cb:f4:cd:81:
bb:7c:7a:ca:b3:6c:49:84:5e:ce:fe:b2:80:a8:71:8b:f4:cc:
4d:3d:2a:e2:be:e0:56:da:a4:aa:be:af:68:7e:3d:35:90:97:
f0:b9:16:a4:1a:e0:9e:72:2e:e9:49:3a:cc:a8:3b:07:c3:e7:
ef:74:66:39:31:20:fc:68:f7:d9:98:84:21:c1:93:35:2b:52:
d1:ae:f2:07:65:a3:b8:ba:4f:9c:87:01:92:0b:b3:a6:21:14:
89:cf:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:26 2025 by rpki-client