Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa
File: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (raw, json)
Hash identifier: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=
Subject key identifier: 05:2C:41:E9:82:6A:DA:34:0F:B5:83:60:93:84:63:0F:3D:0B:2F:0A
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 0194221F987B5FEAB3536C2D9A2EC3EA9240
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133861
IP address blocks: 194.41.36.0/24 maxlen: 24
194.41.37.0/24 maxlen: 24
194.41.58.0/24 maxlen: 24
194.41.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:98:7b:5f:ea:b3:53:6c:2d:9a:2e:c3:ea:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=052c41e9826ada340fb583609384630f3d0b2f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:b6:e3:0e:3b:17:41:39:21:28:79:be:dc:
1f:b9:48:5d:4f:35:86:6b:2c:80:90:09:1d:2c:90:
76:9f:5c:d1:3f:86:e6:1c:a9:28:b1:3f:33:5c:d4:
5a:a2:60:6e:0f:a6:aa:cb:39:39:89:87:bf:b8:41:
18:3d:47:4f:00:09:a0:fb:58:f0:48:d7:95:9a:02:
18:73:5e:a5:dc:dc:d7:11:08:e0:24:aa:fc:28:ac:
1c:41:5e:4e:8c:3c:d3:a2:8c:55:93:01:a9:b8:43:
0f:21:3c:12:af:ec:44:45:5f:a9:de:d7:df:af:69:
a0:1d:45:69:58:78:b8:7a:6d:30:6b:5a:91:e6:8a:
68:7b:d6:84:25:e0:f4:74:b9:04:f0:99:4d:7a:a8:
42:63:cb:bd:90:f7:5a:de:96:4d:d9:ae:00:ca:4e:
3a:f2:25:b6:62:4b:29:68:f3:5e:33:a5:39:6d:c4:
94:da:45:20:d5:9e:cc:eb:18:e0:b4:b5:44:84:f8:
fe:4b:20:76:fb:51:75:08:26:f0:55:95:c6:5a:fb:
cb:76:e5:a6:32:1d:b9:26:7c:d3:9a:4d:37:9e:cc:
0b:a1:d3:8b:ca:b8:d0:06:21:d9:c7:84:54:88:49:
8b:8d:f5:3a:63:6e:d5:9d:2d:21:5b:82:6e:06:da:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2C:41:E9:82:6A:DA:34:0F:B5:83:60:93:84:63:0F:3D:0B:2F:0A
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.36.0/23
194.41.58.0/23
Signature Algorithm: sha256WithRSAEncryption
54:3f:ba:d1:58:e0:c6:53:fd:63:c0:63:d4:56:bf:e1:7c:69:
40:28:b1:ac:4d:fd:6f:82:86:48:33:fe:24:8d:d3:9e:37:71:
0a:84:26:57:39:90:f9:73:29:5d:5c:c5:5e:d1:51:94:f7:4c:
47:0d:1b:1b:a3:90:c6:39:37:3e:bd:8a:39:0f:57:a0:2d:86:
ff:50:71:f0:78:62:6a:47:27:a9:f3:64:61:d5:72:2a:8b:a3:
0e:9a:93:cf:94:ce:98:98:c9:29:1c:e5:a2:60:e6:85:5d:c4:
6c:b4:9f:50:28:21:be:df:e1:30:25:2f:c1:62:39:b6:1e:50:
79:dd:ee:38:41:d0:fd:4f:e6:a9:22:56:14:43:82:45:12:c4:
b6:16:c7:13:16:19:12:76:c2:27:a5:fc:7a:46:45:a1:0d:3a:
53:1d:44:2f:8c:a3:9c:e9:53:a7:d0:e3:33:fd:1f:20:e8:b2:
32:fb:e5:42:18:05:36:1c:0b:86:17:16:63:41:78:8f:dc:2f:
f0:4a:f5:c1:95:1a:bd:a7:7d:16:a4:cb:4d:67:48:85:a7:66:
a1:c8:57:f7:d6:ee:26:be:4b:60:04:ef:23:2a:ba:db:f5:7b:
29:89:ef:34:a4:f7:4d:ac:68:f0:0c:d6:e9:6f:d2:e1:08:6c:
6d:70:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:56 2025 by rpki-client