Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BoZWc-BwNkV3UTcJoagqFU4MKbo.roa
File: BoZWc-BwNkV3UTcJoagqFU4MKbo.roa (raw, json)
Hash identifier: cmSOqNaeQd9yqxEnf5I3Sy33pmgg228Wt3JYlKNhGBw=
Subject key identifier: 06:86:56:73:E0:70:36:45:77:51:37:09:A1:A8:2A:15:4E:0C:29:BA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD7FD642226147E259BFAA5B3C23C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BoZWc-BwNkV3UTcJoagqFU4MKbo.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61249
IP address blocks: 93.171.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d7:fd:64:22:26:14:7e:25:9b:fa:a5:b3:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06865673e070364577513709a1a82a154e0c29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:28:2c:65:a3:68:7b:d6:24:84:e8:6e:1c:
fd:83:11:b1:4b:b6:45:5d:4d:49:11:ff:cb:20:f4:
87:71:3b:6f:c2:31:a5:3b:ee:c1:5c:a8:d0:4d:9b:
62:54:b1:c4:d4:a8:cc:ce:92:6c:07:1b:02:53:33:
ed:c8:ba:b0:76:d7:3b:b5:71:3f:5c:eb:ea:e6:a4:
3a:af:75:6c:f8:35:bc:1f:c5:f0:64:d1:0e:08:fb:
b8:9f:f2:72:54:50:a1:3a:4c:31:2d:f9:90:23:58:
c5:38:75:f3:b8:ce:9b:99:a0:27:cf:7e:c5:97:56:
fe:21:16:90:7d:82:30:bf:15:24:16:6e:10:29:83:
03:5f:53:7e:34:26:83:dc:31:45:6b:70:e5:8d:23:
2f:8a:e0:e6:bf:e2:a2:cc:60:ff:c7:32:1d:b2:c2:
76:c2:f3:35:87:4a:cc:09:e6:40:4b:99:f7:5e:69:
80:7b:82:90:37:a4:00:d0:80:b0:de:aa:08:f3:56:
3e:b1:2a:f5:b9:88:c3:7c:8e:0e:69:d7:12:2b:0d:
32:91:65:a6:f2:87:c7:bd:a6:9f:38:29:79:f3:7d:
9c:55:f9:18:51:41:bc:eb:80:9e:96:7e:6c:b6:ae:
c5:f2:1b:1a:1e:c3:7d:42:1c:bc:62:25:b7:61:d0:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:86:56:73:E0:70:36:45:77:51:37:09:A1:A8:2A:15:4E:0C:29:BA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BoZWc-BwNkV3UTcJoagqFU4MKbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d6:71:86:d9:9d:c2:3c:cd:32:f7:9b:72:7a:8b:35:4c:e2:
91:ef:57:0a:1f:97:d6:84:63:b4:aa:c6:33:fc:6d:14:72:f5:
79:ad:fb:dd:e3:2d:bb:23:d7:93:87:6d:cd:05:ff:94:56:d6:
5b:2e:5d:3d:8d:34:99:cd:d4:c0:e2:34:e9:49:9b:ae:91:81:
a3:d0:3d:03:f8:26:c9:88:a4:c2:e9:f1:c2:56:3c:de:10:f6:
cb:b4:9c:ef:20:d7:39:b4:0f:15:67:35:2d:2a:43:f5:c1:82:
e6:34:3a:20:4d:14:fa:3d:3d:db:e9:8a:96:e7:ef:f2:e8:1a:
8a:6b:11:94:89:0b:1f:f8:a6:e5:f8:01:53:d6:37:77:a8:58:
e1:3e:3a:b3:88:98:4a:89:3b:96:ce:b1:14:32:e8:9f:27:4a:
9c:88:6a:02:65:c1:5a:14:73:35:6f:36:b4:8d:56:d9:ce:82:
42:4b:9e:77:8f:fb:76:41:30:39:a1:2d:7b:2f:68:d3:f8:54:
a2:42:c7:cb:b5:61:bb:66:47:55:f7:07:9f:81:28:69:56:db:
21:84:4b:ae:0a:66:0c:6c:f9:b0:e1:e2:66:9d:90:d2:9b:3c:
f9:40:a1:0b:ab:bd:32:72:a7:cc:df:f5:e1:36:f0:88:38:92:
4b:be:0e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:21:52 2025 by rpki-client