Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Bgie4uletGTt1-f5EKp13oAzi5g.roa
File: Bgie4uletGTt1-f5EKp13oAzi5g.roa (raw, json)
Hash identifier: +Zqpn9eBAz8IYSFKeNWt++qJBGRqa3DAHmk8TV4MTeY=
Subject key identifier: 06:08:9E:E2:E9:5E:B4:64:ED:D7:E7:F9:10:AA:75:DE:80:33:8B:98
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 019496E1C819423032DB64B375613F80EE62
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Bgie4uletGTt1-f5EKp13oAzi5g.roa
Signing time: Fri 24 Jan 2025 05:56:06 +0000
ROA not before: Fri 24 Jan 2025 05:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.22.0/24 maxlen: 24
85.203.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:96:e1:c8:19:42:30:32:db:64:b3:75:61:3f:80:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 24 05:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06089ee2e95eb464edd7e7f910aa75de80338b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:0b:8d:91:5a:ec:d4:56:f9:35:ee:f9:f0:
d0:11:6d:2f:2d:28:65:1b:5e:1d:d0:8e:ad:49:f4:
69:c1:62:88:ef:d5:39:69:b1:e8:11:1d:4b:23:95:
a6:f2:69:49:5f:bb:45:57:ce:63:40:01:b4:92:f5:
fd:45:fb:6e:ed:a9:fd:f9:30:e3:79:89:fb:53:1e:
08:30:77:3f:b1:c7:ef:64:97:d9:d2:69:a2:4a:ac:
fa:d0:cf:54:fe:84:a6:7d:6a:1b:fa:b2:2f:81:60:
a7:bf:02:b5:88:5e:af:b9:65:59:e8:5b:62:d3:b5:
45:f1:71:12:f7:bb:3b:e5:24:a2:32:c9:2b:a8:f4:
5f:1e:bf:cd:27:32:d8:11:c5:fe:b3:90:cc:94:a1:
fe:0d:bf:b8:11:17:a8:10:b3:1a:e8:a9:26:be:88:
09:09:9c:b8:67:1a:34:b9:1b:3f:17:55:87:66:c9:
85:31:48:88:42:ca:86:ad:6b:c0:d5:3e:37:bc:f8:
c3:cc:33:ca:65:c7:30:7a:3f:d3:80:80:1f:17:43:
b0:a0:ec:9c:89:bb:4b:e0:29:ba:d2:81:cb:c1:16:
53:9b:4c:a8:fc:9a:bf:9f:b8:1e:8f:bb:93:47:42:
f2:ec:5f:97:84:00:7c:59:7f:e9:2b:de:fb:f3:68:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:9E:E2:E9:5E:B4:64:ED:D7:E7:F9:10:AA:75:DE:80:33:8B:98
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Bgie4uletGTt1-f5EKp13oAzi5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4b:27:52:dc:70:ab:d4:e0:c0:4d:4e:38:05:e5:cb:c2:b7:
48:54:63:73:48:b1:98:bb:f3:97:fc:a5:30:36:6c:d5:25:39:
fa:e0:a2:e6:fe:3e:7e:02:a3:d4:84:1d:af:f3:be:e7:79:09:
00:72:08:0f:82:ab:83:92:51:3a:8f:18:0a:aa:de:ed:a3:78:
f0:7a:ba:16:76:63:25:98:a5:97:33:22:05:0a:5f:b7:59:ee:
7a:ed:c8:3c:00:2c:56:a5:5a:e8:36:3f:42:cb:14:5d:9f:cf:
49:fc:38:75:ca:c4:73:d2:7e:09:5c:4b:c0:56:9a:84:c8:ec:
56:e7:a2:8f:80:21:85:54:4e:e5:fb:50:6d:ca:78:72:85:92:
7c:ba:b6:91:79:af:94:a8:b5:af:41:b3:c4:a1:b4:c6:77:c6:
d5:f1:fe:7a:3a:8e:d6:e3:ab:8b:5c:57:a2:48:48:5d:06:cb:
84:2d:57:0f:a4:36:91:cd:7a:05:40:24:df:a3:4d:4e:44:1e:
ac:a8:a3:42:b9:ff:bf:1d:59:f9:46:a7:f2:2f:fc:7e:20:dd:
0a:90:e8:b5:94:06:a3:21:7d:74:ff:b1:cd:3b:14:37:bc:05:
bf:f5:b9:de:25:54:4c:d8:07:0d:3a:9e:1e:57:e9:c0:94:d1:
01:68:52:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:34 2025 by rpki-client