Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BZivXt0BGfJmCZOmCid5H24m4T8.roa
File: BZivXt0BGfJmCZOmCid5H24m4T8.roa (raw, json)
Hash identifier: lrvWAbGM3PDgshTd1SM5ZahTxt5cAvQQeCAaRDJ8dUI=
Subject key identifier: 05:98:AF:5E:DD:01:19:F2:66:09:93:A6:0A:27:79:1F:6E:26:E1:3F
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50EEC802
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BZivXt0BGfJmCZOmCid5H24m4T8.roa
Signing time: Sat 01 Jan 2022 16:02:03 +0000
ROA not before: Sat 01 Jan 2022 16:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209848
IP address blocks: 212.243.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357826050 (0x50eec802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0598af5edd0119f2660993a60a27791f6e26e13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:fb:64:12:47:41:7f:14:db:1f:4d:02:46:
dd:05:3a:52:fd:c5:15:0c:10:35:1c:7a:67:0c:76:
30:a1:ca:be:08:8e:77:43:8d:93:5d:ef:8e:27:96:
47:33:10:af:94:12:d0:44:b9:7b:b7:c6:92:c6:43:
85:68:91:ae:60:aa:e4:bb:ec:3a:40:11:d2:15:cc:
cd:b0:c4:3e:3d:c9:1d:9b:b3:ff:f7:04:22:10:1c:
0c:7f:62:a9:f8:39:9d:a4:4c:0e:62:e3:fa:94:c2:
d4:d9:9e:98:dc:72:a5:a8:96:c2:4f:5c:b9:2c:cf:
48:93:20:09:3a:23:5c:56:f8:b7:47:82:76:10:fc:
27:ff:eb:f9:b1:b4:0a:33:42:02:6b:5e:e5:89:29:
4c:d2:cf:14:91:26:6c:0f:e3:48:b1:c3:48:26:ab:
c6:40:61:b2:d1:2d:d5:22:52:23:65:7f:ef:4d:20:
18:bf:1d:c5:bc:ab:9c:8a:6e:ee:01:d3:d8:18:1f:
cf:32:50:00:97:4a:73:6d:b3:bf:09:c2:db:b3:11:
18:31:a5:f8:78:8d:3e:c7:e3:43:8b:72:41:8f:c8:
b0:57:c3:45:be:22:68:2f:e2:c0:3b:8c:ae:28:ad:
35:c1:65:df:34:0c:ad:15:55:5a:71:91:64:7f:bb:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:98:AF:5E:DD:01:19:F2:66:09:93:A6:0A:27:79:1F:6E:26:E1:3F
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BZivXt0BGfJmCZOmCid5H24m4T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ed:ba:65:5a:9b:1b:10:6f:da:43:bc:89:e2:70:ba:4d:71:
c9:af:b6:0d:03:6a:a2:9c:83:da:18:e3:95:88:d8:f5:e5:eb:
4f:8c:f1:b8:b6:02:f2:b3:37:05:ef:da:86:3c:a8:11:03:9d:
80:98:40:e3:f1:12:4e:95:9f:14:4e:b9:5b:ec:8d:c7:d6:e8:
0a:a5:91:19:9b:cd:5d:a5:79:1a:31:66:e2:7e:d1:e4:cd:ca:
1f:1d:d0:82:a5:65:3b:51:5e:2e:ee:56:79:c6:b3:7c:07:98:
2c:15:1f:8c:d0:59:fc:0f:16:ce:eb:b8:cf:bf:72:b8:28:9a:
33:b6:75:0a:41:7c:bf:0d:f8:8c:a6:0d:d4:14:3e:91:14:a2:
40:e9:09:d8:44:ca:41:8b:c3:a3:3e:c5:67:bc:c6:4d:ed:1f:
0b:05:83:62:03:e4:7a:59:e5:7a:f9:e2:a9:d1:5c:f5:dd:92:
f0:71:22:1c:d8:01:14:f9:65:f1:d8:b3:7c:dc:77:ab:ab:07:
b9:3d:2a:bc:23:b8:49:bd:ec:8b:a8:01:23:ba:7c:ae:2d:fb:
12:83:a2:43:da:f7:e3:48:a9:5c:c8:d6:1c:44:47:e2:ac:e3:
84:78:18:cd:a8:2c:4e:ad:11:14:d4:c0:2f:80:f8:a2:4f:6e:
1f:d3:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:36:56 2025 by rpki-client