Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BScWdljv0AQRTZyIvglOZ0oFBE0.roa
File: BScWdljv0AQRTZyIvglOZ0oFBE0.roa (raw, json)
Hash identifier: S79FUTXfJV4hESBGmFYG1R6KYPNaNufbRNEZRwYtCR0=
Subject key identifier: 05:27:16:76:58:EF:D0:04:11:4D:9C:88:BE:09:4E:67:4A:05:04:4D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B55D35DC17616FF5927C186082D8E1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BScWdljv0AQRTZyIvglOZ0oFBE0.roa
Signing time: Thu 02 Jan 2025 15:49:44 +0000
ROA not before: Thu 02 Jan 2025 15:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 79.175.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5d:35:dc:17:61:6f:f5:92:7c:18:60:82:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0527167658efd004114d9c88be094e674a05044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:8a:66:a1:79:03:84:cb:7e:e9:e4:d6:04:
78:b4:1a:5b:d4:3f:8f:63:ec:74:4b:a0:4b:21:a1:
85:ed:e8:99:a8:62:05:82:a9:35:01:c4:27:71:c3:
03:94:25:52:de:33:21:d5:cb:59:de:dd:6b:d9:f6:
51:31:85:e5:5d:ca:5f:a6:4e:77:58:24:53:82:7c:
5d:25:86:26:27:80:92:96:90:74:8d:9d:fd:d3:d2:
02:62:11:f7:6c:60:c7:9e:de:27:47:cd:38:f7:89:
dd:1f:e3:fc:32:fc:dd:31:f1:c3:65:27:94:38:1b:
05:8c:c5:b3:f1:3c:f6:8c:82:03:39:49:9c:d3:07:
b1:c2:b0:06:f5:24:45:8c:73:ee:06:bf:2d:b7:cc:
9f:21:58:61:fd:67:8b:ac:56:6e:d7:ed:23:3e:1f:
bd:e1:63:4b:a4:9c:a8:5b:59:8c:a9:6c:c5:45:65:
e4:58:00:4e:6b:46:94:8d:cf:f0:92:12:b5:67:04:
c0:91:80:71:69:da:fa:66:7f:f8:72:c5:b7:fc:1d:
eb:a3:62:f0:83:14:97:4a:d0:42:54:4b:34:f4:f0:
45:0c:c9:06:fc:78:d0:fa:db:83:5e:de:10:dd:9a:
ae:af:a7:15:58:1d:dd:1d:1f:1e:71:7a:01:32:27:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:16:76:58:EF:D0:04:11:4D:9C:88:BE:09:4E:67:4A:05:04:4D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/BScWdljv0AQRTZyIvglOZ0oFBE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:13:3f:ce:a1:1e:e3:2d:2d:4f:2b:d8:c7:f7:9f:ea:57:c0:
2c:ad:c9:ce:39:00:73:2d:5c:64:f4:12:36:53:c1:68:59:34:
7d:50:d5:a8:28:23:f6:54:f0:91:65:48:45:c3:79:92:12:b5:
e0:fd:e6:f0:d9:a2:b6:4c:1f:7a:7c:a3:c8:3c:b3:b7:e4:21:
8e:ca:94:bd:96:cc:ae:cf:00:a6:35:a7:18:13:00:e3:d5:4d:
24:6b:6d:a2:bf:9a:a2:5c:80:33:18:24:12:96:88:e7:5d:a7:
a1:88:dc:fb:a8:55:f2:05:aa:e1:69:87:d8:bc:06:70:88:40:
02:49:8d:ee:33:a6:73:1a:7f:31:22:8e:66:a0:c6:ae:bf:ad:
a0:d1:72:e2:fb:b7:ec:47:91:c9:30:20:d4:4b:6b:0b:a6:23:
a5:a9:54:e2:89:11:fc:c3:b2:c2:51:4a:5e:3a:68:bb:7b:ca:
fc:50:e0:1e:25:ab:3a:24:f8:af:b6:57:dd:d2:4e:ad:16:7f:
2e:10:1b:7a:47:ed:1d:fc:de:b8:4c:56:88:0c:7d:77:cd:86:
c1:98:04:7f:ea:05:2d:b1:45:96:51:ec:09:73:e2:3c:d0:bf:
9c:d0:92:24:dd:14:da:08:11:84:7c:6b:94:16:68:d1:1c:1f:
fa:24:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:54 2025 by rpki-client