Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa
File: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (raw, json)
Hash identifier: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=
Subject key identifier: BF:69:BF:73:E5:19:05:B3:38:B6:A0:20:E1:6D:4E:6E:FF:51:9E:7D
Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial: 0194228E10E508026141B9EAC6758CD92738
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 80.89.176.0/20 maxlen: 24
194.26.4.0/22 maxlen: 24
2a06:b940::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:10:e5:08:02:61:41:b9:ea:c6:75:8c:d9:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf69bf73e51905b338b6a020e16d4e6eff519e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:10:4b:56:8e:31:58:c3:c1:c5:8f:c4:db:
bc:07:bd:a4:12:ad:e2:f8:b6:49:86:7a:ef:bd:8e:
e2:09:76:7f:d7:aa:f7:4c:12:9f:0d:90:54:2c:1d:
58:58:5a:7e:32:22:c5:c9:3d:fc:65:ff:77:24:11:
c9:63:fb:98:dc:8b:b3:bd:9a:f2:f7:61:66:9e:51:
dc:3d:23:e6:6a:50:02:dd:36:57:4e:2b:3e:28:44:
d9:75:7e:93:6e:68:13:61:56:0f:94:39:39:c9:62:
f0:a7:f9:05:fc:1e:77:7d:6c:9a:4a:47:f0:85:20:
e0:cb:36:fc:da:29:8d:ac:ac:82:1b:f6:c2:67:4f:
22:1b:73:df:b4:4c:56:9b:69:c6:d8:a3:b3:f9:db:
32:cc:2f:ec:b7:89:64:fb:4b:0d:94:01:d5:b6:9b:
20:cf:9d:60:44:89:53:2e:d0:3a:10:70:ae:81:33:
3d:99:37:09:b6:6c:f7:c6:6d:8c:48:bd:eb:93:6a:
82:fe:07:54:0d:52:b9:37:7c:0c:3c:88:18:e9:4b:
67:de:95:db:46:09:55:60:92:7a:f8:57:7d:c0:77:
f3:10:62:51:c9:f0:e4:6e:05:4d:64:9b:30:7c:2e:
6f:59:8f:fe:e1:46:42:99:ed:be:3a:9d:4d:e0:88:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:BF:73:E5:19:05:B3:38:B6:A0:20:E1:6D:4E:6E:FF:51:9E:7D
X509v3 Authority Key Identifier:
keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/20
194.26.4.0/22
IPv6:
2a06:b940::/29
Signature Algorithm: sha256WithRSAEncryption
2c:fc:d8:d7:fb:61:d6:d2:03:6a:d8:7f:ce:93:f5:6f:48:0b:
b6:14:5a:52:c1:90:c3:db:14:57:0a:6b:48:72:99:cc:02:81:
07:08:0f:cc:53:7e:51:85:50:b9:15:3d:e4:e9:91:d1:27:5c:
93:27:fa:ca:e3:fd:6b:b1:c1:9b:59:b4:52:29:79:01:d3:64:
fb:c3:81:40:eb:bf:36:50:60:98:a9:ab:36:fd:77:cf:bd:41:
1c:9f:ef:9f:46:71:77:fb:98:3b:2d:ee:ed:b1:fa:1d:a5:b2:
8e:cb:a9:75:da:17:ec:37:28:52:bc:30:4c:13:27:20:5b:8a:
10:d7:1d:6e:94:5c:ac:38:b0:cd:ee:af:71:3b:f5:84:84:c7:
23:72:a2:39:b2:31:f9:24:14:b7:c1:e6:3a:3b:0a:6b:de:c0:
23:60:f9:68:ee:27:94:6d:28:85:af:0d:9d:25:5b:a4:a2:a1:
d6:aa:df:d0:d4:e9:0d:69:17:19:0a:1b:97:15:cd:e3:dd:f5:
c9:f4:6b:08:cc:5b:84:70:2e:b2:f8:21:be:cd:dd:6f:3b:c0:
2d:67:c0:b3:1b:e1:79:bf:b2:a9:80:1d:3a:57:b2:1d:20:dc:
64:12:70:f9:78:67:0a:ac:ef:00:00:5b:78:17:37:e2:e9:c5:
17:6c:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:59 2025 by rpki-client