Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BBwLyOHQVdm-bFbZ5JPLx7wbxLo.roa
File: BBwLyOHQVdm-bFbZ5JPLx7wbxLo.roa (raw, json)
Hash identifier: 32tMqDmpHEgivJopmTBcQ643SBHzWCWBTN/oZ39NU74=
Subject key identifier: 04:1C:0B:C8:E1:D0:55:D9:BE:6C:56:D9:E4:93:CB:C7:BC:1B:C4:BA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018A4FE815E1554B462B8EFFBDFA6958DAD9
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BBwLyOHQVdm-bFbZ5JPLx7wbxLo.roa
Signing time: Fri 01 Sep 2023 08:42:04 +0000
ROA not before: Fri 01 Sep 2023 08:42:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:e8:15:e1:55:4b:46:2b:8e:ff:bd:fa:69:58:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 1 08:42:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=041c0bc8e1d055d9be6c56d9e493cbc7bc1bc4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:9a:ba:96:68:fe:85:03:51:5c:54:51:1d:
b7:c1:82:96:92:aa:1e:af:e8:f4:d1:af:0d:6f:09:
b5:8d:27:07:69:28:1d:ae:7f:3e:59:11:09:83:b5:
e7:d9:b7:1f:8f:2e:3f:bb:b7:4a:59:08:23:4c:ca:
5e:a0:58:d0:bd:b7:5e:c0:33:f0:36:1f:e7:1c:ea:
57:76:db:5e:a6:61:d7:5c:19:34:f3:06:ae:7a:22:
44:0c:cf:d8:fb:04:af:86:27:ec:28:4a:c5:4b:fc:
95:4b:13:40:da:0e:dc:7e:55:94:70:0b:12:40:75:
87:5c:67:28:25:59:3f:8f:07:d9:6f:db:22:be:0e:
4e:26:36:dc:f4:8d:f3:60:a0:85:8c:53:e9:b4:9a:
3b:7d:7d:b2:d2:f0:2b:36:0a:68:50:44:49:41:2e:
94:24:69:07:38:5c:84:a4:48:38:ac:b4:41:05:2e:
a9:84:39:41:16:b8:30:4a:3a:5e:1a:4b:4e:20:d9:
40:dc:a6:a0:d3:28:54:56:dd:aa:26:d2:86:8b:03:
7e:13:8c:b8:22:27:25:b1:13:51:06:a1:34:67:ad:
76:fb:d7:73:e5:1d:df:e4:02:b1:ca:fe:4b:f7:56:
5b:c9:5d:db:dd:62:bf:42:e5:ae:22:f8:20:13:21:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:0B:C8:E1:D0:55:D9:BE:6C:56:D9:E4:93:CB:C7:BC:1B:C4:BA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BBwLyOHQVdm-bFbZ5JPLx7wbxLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
01:23:fd:78:92:9a:7b:e9:dd:cc:80:2b:65:77:8e:9a:2d:b4:
a2:e7:3d:58:21:54:7e:ce:50:28:1a:9e:28:60:3b:11:c8:3e:
ee:ac:a7:c2:2d:e8:45:cd:30:8e:d4:45:3c:b1:d0:b1:58:5d:
3c:ff:fd:f0:5a:8c:61:c4:ca:cd:f7:1d:5d:f9:3e:5a:ad:86:
54:b2:b2:bc:db:ae:2d:f7:41:06:4d:85:b4:48:0e:94:27:22:
3f:7b:4f:cc:77:12:40:df:08:5d:a5:f1:76:d4:8a:90:f2:42:
e6:2e:13:67:bf:99:28:92:ee:15:45:8e:1b:6a:6f:2b:0a:cf:
df:ef:28:b4:ac:20:b3:1f:1c:3c:06:47:09:35:a8:c5:24:ce:
d4:c6:f9:a4:61:aa:db:63:9b:12:da:da:65:db:1e:ec:95:fc:
43:f5:b7:b2:b1:14:28:76:05:e2:08:da:8b:8f:96:1e:f0:cc:
82:6d:6e:55:d8:5d:dd:4c:ee:2b:b5:48:c2:9f:3f:0f:6f:99:
0c:e8:e2:15:07:cc:7d:13:97:77:3c:d6:2a:d2:26:b8:20:8d:
d4:4b:3f:60:44:57:8f:79:5f:44:e4:1c:37:e7:36:4d:91:be:
04:2e:bc:c3:fe:78:d4:01:c0:a6:16:0b:5d:fa:0a:b8:b1:9f:
55:e3:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:31 2025 by rpki-client