Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/BPCRDBQW83wmNEFtMHvSvhHfZJA.roa
File: BPCRDBQW83wmNEFtMHvSvhHfZJA.roa (raw, json)
Hash identifier: rrcdCXx/trXbZsHNfEojLOF/6UFH0VKGUa9l+Q7+1fg=
Subject key identifier: 04:F0:91:0C:14:16:F3:7C:26:34:41:6D:30:7B:D2:BE:11:DF:64:90
Certificate issuer: /CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Certificate serial: 09D38F46
Authority key identifier: 53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/BPCRDBQW83wmNEFtMHvSvhHfZJA.roa
Signing time: Sat 01 Jan 2022 05:51:41 +0000
ROA not before: Sat 01 Jan 2022 05:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 85.8.152.0/24 maxlen: 24
85.8.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164859718 (0x9d38f46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Validity
Not Before: Jan 1 05:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04f0910c1416f37c2634416d307bd2be11df6490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:1e:b9:74:fa:94:b4:49:97:3a:4d:74:1d:
ec:f4:f8:ae:24:32:59:18:6f:88:12:b5:69:73:42:
e5:4b:a5:68:82:d6:f3:b4:b7:83:57:8b:ba:1a:db:
0a:66:f1:66:56:5f:a4:c5:d4:35:21:f4:7e:d5:ff:
99:b8:b2:2b:20:4d:81:98:80:6a:b6:38:59:13:47:
5b:76:fb:7a:b1:32:36:33:a1:e4:7e:44:36:c2:ea:
ca:b1:c7:38:b3:1d:88:99:2d:db:30:4c:7b:62:15:
b0:67:9f:2d:f8:08:9f:08:5b:ba:02:a4:58:1f:04:
de:d6:42:39:ee:89:d4:bc:1b:36:74:4a:0e:0b:8b:
a7:ca:59:37:67:60:3d:be:3a:f8:f2:0e:a4:d0:f7:
f3:42:65:ac:89:de:19:6d:b4:85:21:6e:48:00:29:
6b:50:0d:98:f2:4f:93:14:01:4a:2d:74:e7:ca:06:
73:1a:56:a8:06:97:06:9e:54:a9:8d:e1:95:f5:6f:
53:9e:59:30:48:d2:3a:8e:40:06:31:07:9b:7c:63:
b2:bb:e9:46:a6:01:2b:0e:41:32:b1:06:e4:6e:cc:
21:44:6a:03:2b:e7:fa:52:25:80:3c:95:cc:39:d5:
ee:80:c5:f2:35:c4:4c:26:66:4c:16:90:ef:35:c3:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:91:0C:14:16:F3:7C:26:34:41:6D:30:7B:D2:BE:11:DF:64:90
X509v3 Authority Key Identifier:
keyid:53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/BPCRDBQW83wmNEFtMHvSvhHfZJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.152.0/24
85.8.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a6:96:e7:ff:b9:11:cc:76:a0:3a:d4:76:73:50:a7:f7:88:
cb:3f:a6:0d:2e:b0:00:c6:11:0c:5e:d1:fe:47:23:08:b7:b3:
32:61:99:7e:d0:4c:63:ec:79:c1:d6:42:45:f5:41:cd:22:5c:
9e:08:29:76:8f:cf:91:63:dd:84:23:52:c9:4d:28:8c:d1:32:
82:93:11:c8:e9:a8:eb:cb:97:e6:40:4b:4c:0c:35:d8:c2:70:
30:52:6e:e6:ac:60:35:90:3b:50:62:b8:a8:66:e6:66:33:19:
a9:c2:b8:2b:f1:77:bb:84:6e:26:83:07:d5:f7:4c:1a:28:20:
25:8b:04:10:2d:8b:71:49:37:5a:17:14:aa:12:f5:29:49:f2:
81:1e:ae:09:46:d3:34:ae:c0:8d:7c:b1:d9:f4:0a:cd:68:5f:
4f:ec:2b:50:31:04:c3:ec:08:01:0b:a5:f5:79:2d:76:5c:7e:
44:96:b1:ad:8d:74:5a:83:25:13:39:3d:8c:e0:39:85:49:85:
63:73:02:7b:81:09:e1:87:06:14:09:d9:13:9b:13:88:74:fa:
e6:7a:f1:6f:79:32:2c:c7:4c:3e:ed:df:56:20:03:ea:2a:48:
26:ab:6e:1e:72:3f:7c:73:5a:21:e9:ac:98:59:e5:87:10:52:
8d:ca:e8:f0
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECdOPRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
M2I3Yzc3MDllZDZiZGMzYTI5NWM3MzU1YTUwM2ViOGQ2MWZkMjMyMB4XDTIyMDEw
MTA1NTE0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDRmMDkxMGMxNDE2
ZjM3YzI2MzQ0MTZkMzA3YmQyYmUxMWRmNjQ5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSEHrl0+pS0SZc6TXQd7PT4riQyWRhviBK1aXNC5UulaILW
87S3g1eLuhrbCmbxZlZfpMXUNSH0ftX/mbiyKyBNgZiAarY4WRNHW3b7erEyNjOh
5H5ENsLqyrHHOLMdiJkt2zBMe2IVsGefLfgInwhbugKkWB8E3tZCOe6J1LwbNnRK
DguLp8pZN2dgPb46+PIOpND380JlrIneGW20hSFuSAApa1ANmPJPkxQBSi1058oG
cxpWqAaXBp5UqY3hlfVvU55ZMEjSOo5ABjEHm3xjsrvpRqYBKw5BMrEG5G7MIURq
Ayvn+lIlgDyVzDnV7oDF8jXETCZmTBaQ7zXDnfsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQE8JEMFBbzfCY0QW0we9K+Ed9kkDAfBgNVHSMEGDAWgBRTt8dwnta9w6KV
xzVaUD641h/SMjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1U3ZkhjSjdXdmNPaWxjYzFXbEEtdU5ZZjBqSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjYvZDdhZWQ4LTRhNDEtNGRmMS1hZTg3LWVlMzcwYWM2MTkwYi8x
L0JQQ1JEQlFXODN3bU5FRnRNSHZTdmhIZlpKQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYv
ZDdhZWQ4LTRhNDEtNGRmMS1hZTg3LWVlMzcwYWM2MTkwYi8xL1U3ZkhjSjdXdmNP
aWxjYzFXbEEtdU5ZZjBqSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFUImAMEAFUImzANBgkqhkiG9w0B
AQsFAAOCAQEADKaW5/+5Ecx2oDrUdnNQp/eIyz+mDS6wAMYRDF7R/kcjCLezMmGZ
ftBMY+x5wdZCRfVBzSJcnggpdo/PkWPdhCNSyU0ojNEygpMRyOmo68uX5kBLTAw1
2MJwMFJu5qxgNZA7UGK4qGbmZjMZqcK4K/F3u4RuJoMH1fdMGiggJYsEEC2LcUk3
WhcUqhL1KUnygR6uCUbTNK7AjXyx2fQKzWhfT+wrUDEEw+wIAQul9Xktdlx+RJax
rY10WoMlEzk9jOA5hUmFY3MCe4EJ4YcGFAnZE5sTiHT65nrxb3kyLMdMPu3fViAD
6ipIJqtuHnI/fHNaIemsmFnlhxBSjcro8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:53 2024 by rpki-client on console-fra.rpki-client.org