Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Bzogv58nF-EZgEp7NTyBzEeuA50.roa
File: Bzogv58nF-EZgEp7NTyBzEeuA50.roa (raw, json)
Hash identifier: iHAKnSqcCqU03AAHVVubEi9RjROQvR2zBCBGhuvJy7k=
Subject key identifier: 07:3A:20:BF:9F:27:17:E1:19:80:4A:7B:35:3C:81:CC:47:AE:03:9D
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BEFE3C641412CC3CD17B5B735131B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Bzogv58nF-EZgEp7NTyBzEeuA50.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203050
IP address blocks: 85.202.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ef:e3:c6:41:41:2c:c3:cd:17:b5:b7:35:13:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=073a20bf9f2717e119804a7b353c81cc47ae039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:5d:a8:b8:80:ac:09:4d:6a:42:39:a0:6a:
57:9d:27:0c:7f:be:02:9b:2a:32:21:c7:1f:4a:aa:
40:c8:20:f8:1f:4c:73:2a:b0:99:b1:f8:d8:59:36:
b2:85:79:cb:3b:34:a8:8a:a3:d8:5a:2e:dc:e7:ab:
3f:72:0e:06:32:e1:2d:b3:47:dc:e2:14:6d:13:3e:
d1:c0:ef:14:cf:7c:3f:40:e4:a2:71:b6:e2:16:46:
f4:6e:0c:32:19:fd:e8:2d:39:90:5e:e4:66:c2:55:
1c:a1:af:a2:f1:b5:13:09:1c:14:94:4e:1e:72:fb:
bf:1b:8e:37:3f:cc:06:86:e9:f9:7a:8a:d9:e5:ba:
d8:a0:9b:bc:58:c5:4d:2a:6a:ef:91:57:0e:4c:0f:
0a:9b:5e:2b:58:d7:b7:54:7e:b5:af:8d:52:ee:84:
6e:5c:34:d8:b7:35:0c:c8:8a:f8:99:f3:77:ec:cb:
81:cc:07:06:ec:2b:3f:c0:b9:9c:33:66:55:45:9d:
6b:90:5c:4d:89:06:31:bc:f1:5a:69:f6:ae:91:70:
d5:04:e3:96:44:20:de:36:6d:39:99:c6:73:5f:8b:
99:26:45:09:22:53:70:57:57:85:68:15:70:2d:eb:
7f:a2:1c:bd:02:dd:f9:0b:c5:ff:92:8f:a2:03:04:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3A:20:BF:9F:27:17:E1:19:80:4A:7B:35:3C:81:CC:47:AE:03:9D
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Bzogv58nF-EZgEp7NTyBzEeuA50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.58.0/24
Signature Algorithm: sha256WithRSAEncryption
69:68:f9:04:9b:09:8d:37:99:ac:71:74:f9:5e:98:c5:89:d4:
b7:cd:93:a7:71:c5:20:7e:cb:f3:88:33:f2:df:e6:74:8e:27:
db:e9:61:4a:3e:89:fe:79:8f:cf:0e:1e:54:c6:a2:cd:41:72:
71:9a:99:05:9f:a6:e7:5a:08:b1:d6:f2:42:d5:7a:46:25:5f:
6f:9c:2b:b8:39:42:7c:61:a4:b9:e2:a9:5b:b0:21:d2:62:b5:
3c:85:a3:12:f3:d5:96:3f:d8:ea:5e:83:a8:a0:2f:24:ed:b1:
04:d3:71:6f:21:14:48:c8:f2:9b:93:cd:de:68:8b:55:df:0c:
70:9a:11:44:d7:78:7f:53:ca:c4:63:27:e9:9e:66:57:d9:a8:
4f:19:c1:55:63:cc:f4:a7:38:47:87:bc:49:c3:d0:37:0e:b7:
80:53:76:1b:73:7e:91:af:92:2d:aa:ad:83:37:54:b8:05:43:
7d:eb:4e:5f:be:a1:92:07:c7:e5:ee:3e:a7:ed:7a:5e:a6:02:
e0:ec:3c:84:ff:e4:10:76:f3:97:da:f6:7f:3d:aa:4b:4d:8c:
90:7d:b8:fa:49:ee:cb:a4:99:a5:dc:07:a1:9b:f0:aa:69:08:
c5:08:7b:0c:18:50:48:97:4d:fc:49:82:2e:04:a8:9a:41:67:
ae:54:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:20:41 2025 by rpki-client