Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BEeZezJ59iNn9P_ee4UXlFywFss.roa
File: BEeZezJ59iNn9P_ee4UXlFywFss.roa (raw, json)
Hash identifier: gvQ3qd6D3t0LdLhNuSEUT6GPnKBaEtjCdG5Uy10lpGM=
Subject key identifier: 04:47:99:7B:32:79:F6:23:67:F4:FF:DE:7B:85:17:94:5C:B0:16:CB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01924D63F40C231D50963D8308D593E8DC87
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BEeZezJ59iNn9P_ee4UXlFywFss.roa
Signing time: Wed 02 Oct 2024 13:20:49 +0000
ROA not before: Wed 02 Oct 2024 13:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41124
IP address blocks: 92.253.208.0/22 maxlen: 24
93.171.64.0/21 maxlen: 24
95.47.32.0/22 maxlen: 24
95.47.192.0/22 maxlen: 24
146.120.124.0/22 maxlen: 24
146.120.152.0/22 maxlen: 24
146.120.176.0/22 maxlen: 24
146.158.24.0/22 maxlen: 24
146.158.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:63:f4:0c:23:1d:50:96:3d:83:08:d5:93:e8:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 2 13:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0447997b3279f62367f4ffde7b8517945cb016cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:6e:8a:6b:47:08:22:d1:c6:93:76:54:dd:
db:2d:60:f1:2a:f5:89:da:45:ee:45:b0:22:06:6c:
05:f8:87:b0:3e:e7:d6:8a:ed:da:58:4b:0c:2c:10:
3c:32:66:26:a1:18:03:69:96:89:b6:d3:5b:5c:19:
25:f1:02:85:e8:cc:d1:4e:c2:3b:a2:4e:cd:01:6f:
6d:9a:de:ed:07:ba:8b:99:3f:70:47:d8:1c:ff:69:
a3:88:e7:cc:d0:a8:37:a0:d1:99:21:e6:26:04:41:
b1:5a:b5:8c:9c:26:64:ba:23:a6:9e:55:b5:cc:fe:
10:66:40:c2:b8:52:8d:a8:73:fd:00:6e:5f:94:82:
19:0f:ca:88:b8:29:dd:b5:bd:f2:a6:b4:84:d4:63:
4e:f9:e2:ea:b8:b5:db:df:b8:1a:ba:bc:4e:fd:48:
af:5a:53:51:9a:13:3d:77:f9:54:b0:4e:aa:70:4e:
54:15:ae:dd:15:16:d8:4d:f2:e2:2e:b4:0d:ea:26:
db:d6:a9:0c:60:ae:78:2f:f0:e8:1d:e6:52:d7:b2:
47:3f:a4:6f:56:87:27:68:dd:cb:e0:44:cc:9d:e5:
cc:2e:d0:85:40:89:2a:29:4b:24:ce:fc:81:5c:63:
b4:63:6d:dd:fa:e9:01:4e:9c:12:80:94:46:7d:1e:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:99:7B:32:79:F6:23:67:F4:FF:DE:7B:85:17:94:5C:B0:16:CB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BEeZezJ59iNn9P_ee4UXlFywFss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.208.0/22
93.171.64.0/21
95.47.32.0/22
95.47.192.0/22
146.120.124.0/22
146.120.152.0/22
146.120.176.0/22
146.158.24.0/22
146.158.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:ef:a8:b1:4d:42:98:c4:76:7d:7e:65:e0:ad:a1:19:36:e6:
45:5d:c5:a0:ae:b7:f2:ab:35:8b:26:6c:be:e7:93:aa:81:06:
4d:68:9f:65:15:e4:5b:ff:29:a5:d0:22:0b:3e:d6:1d:9a:0b:
dd:35:d4:5a:88:e1:4a:e0:36:05:c3:10:09:1c:dc:b9:9b:35:
3b:de:2b:63:47:0d:45:31:61:6c:e0:86:14:67:d0:25:b1:ed:
2c:f6:7c:20:23:45:b1:3c:cd:d3:dc:c4:7b:bb:dc:1e:57:4d:
8a:c5:9e:bb:77:16:12:ee:fa:0c:cd:fa:d8:b6:5a:fd:bf:12:
f9:d6:ad:66:65:af:46:a0:e1:a1:74:70:91:2f:97:ee:69:6a:
48:fd:70:ad:d8:15:87:ae:b1:1a:0d:9b:53:e8:24:6c:6a:79:
b4:da:35:74:ad:5b:b1:49:1d:96:55:18:70:2a:6a:9d:76:d8:
44:61:f3:f1:67:55:6b:8a:49:20:28:77:32:90:4e:3d:af:f8:
cc:72:b1:e6:2b:6c:e6:c6:59:08:3a:d4:70:39:f2:5e:89:96:
5e:31:fa:69:00:68:ff:64:97:61:9a:b4:f8:0b:6a:b1:bf:db:
10:88:a0:e1:24:6b:69:c3:e6:08:61:30:79:d7:9e:b4:d9:71:
38:aa:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:24 2025 by rpki-client