Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BvrgcdKgbT6EhcRLT2FgKyxkEeI.roa
File: BvrgcdKgbT6EhcRLT2FgKyxkEeI.roa (raw, json)
Hash identifier: BwYEA1FBGY37RbGu08Od0J/po05Ckv0w6nrdMbrP69M=
Subject key identifier: 06:FA:E0:71:D2:A0:6D:3E:84:85:C4:4B:4F:61:60:2B:2C:64:11:E2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D58D10D94A26E4F9117DFF43B7887D9D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BvrgcdKgbT6EhcRLT2FgKyxkEeI.roa
Signing time: Tue 08 Aug 2023 14:28:59 +0000
ROA not before: Tue 08 Aug 2023 14:28:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50916
IP address blocks: 93.170.124.0/22 maxlen: 24
2a02:128:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:8d:10:d9:4a:26:e4:f9:11:7d:ff:43:b7:88:7d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:28:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06fae071d2a06d3e8485c44b4f61602b2c6411e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:ce:44:bf:58:4f:c1:2a:b5:72:3b:59:57:
32:57:27:dc:70:ff:61:9f:67:84:e2:84:27:92:23:
f5:54:09:0e:43:d3:dc:41:92:ec:8a:0b:56:e7:18:
b1:b0:5d:a7:90:75:8b:bd:3a:c5:c4:69:d7:ab:aa:
95:f2:d2:2a:e9:f9:3a:e2:58:6c:86:5a:8e:5a:0c:
d0:17:96:05:12:94:db:23:fa:7f:fc:e6:ed:5b:0a:
e7:68:55:1e:40:06:5c:69:5d:f2:fe:2a:36:8a:ff:
1c:15:71:71:1e:3d:01:44:f9:4d:ba:cb:72:b7:bc:
32:39:7c:a8:40:d4:1b:01:3d:da:34:49:0d:c8:b9:
77:77:fe:f1:18:18:51:3b:9e:8b:f4:67:5b:c3:a1:
9c:0f:0b:b1:d5:80:ac:54:c0:91:fe:f6:6a:67:bf:
29:10:54:6e:a8:9c:d1:50:3a:bd:62:3d:d4:3b:56:
39:37:a7:50:25:49:68:bf:b0:3d:2c:0b:96:17:dd:
ab:54:24:01:92:7e:ef:31:b3:37:be:6c:16:ef:81:
5c:ca:9c:0a:33:fb:2b:df:d3:ba:1c:db:a3:bb:74:
15:29:5a:90:88:4c:d7:f8:a8:ab:05:10:3e:d4:83:
39:d0:f7:b2:ff:d4:71:0a:70:a0:f8:2c:ae:b4:8b:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:E0:71:D2:A0:6D:3E:84:85:C4:4B:4F:61:60:2B:2C:64:11:E2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BvrgcdKgbT6EhcRLT2FgKyxkEeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.124.0/22
IPv6:
2a02:128:8::/48
Signature Algorithm: sha256WithRSAEncryption
4a:2c:0d:95:cf:55:72:dc:77:74:ab:14:00:68:e0:66:39:bb:
c6:cf:52:3a:04:62:4d:d2:0d:96:25:3a:25:23:9c:6a:27:05:
22:88:b3:63:82:2e:b3:95:63:3b:f1:1a:9c:d6:6f:25:52:fe:
23:b7:6a:f7:28:0f:99:90:9e:87:3e:9d:0a:1d:8a:e8:93:cc:
6f:e7:d8:79:39:29:f0:a7:35:77:ab:c3:d3:27:44:8a:0f:a7:
c5:04:43:05:65:87:83:bb:4f:88:4f:94:9f:ea:db:af:e2:e2:
4c:17:c9:a5:dc:a9:2c:b7:0c:06:c8:31:8c:35:9d:70:ef:82:
09:97:57:1f:25:5b:bc:64:b4:81:c4:0f:27:a7:6e:7f:cc:96:
03:4a:c4:8a:1f:c1:0d:e4:a7:01:20:07:dc:da:b0:66:91:45:
79:13:53:2e:47:fc:9a:35:e9:26:46:41:c6:a7:b9:bb:1f:e4:
94:dc:0c:5b:f8:e7:b5:2f:02:e1:19:27:eb:1f:04:3f:7d:07:
c4:4f:75:8c:eb:92:d1:63:7a:49:76:5c:ef:9a:0e:30:85:13:
ca:5c:39:6d:71:93:ad:24:a9:da:42:ea:78:cd:24:85:71:e7:
f2:7a:1c:3f:8e:92:c2:c4:d3:13:af:93:b4:f4:d9:c2:97:a6:
a6:89:82:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnVjRDZSibk+RF9/0O3iH2dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwODA4MTQyODU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZhZTA3MWQyYTA2ZDNlODQ4NWM0NGI0ZjYxNjAyYjJjNjQxMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLORL9YT8EqtXI7WVcyVyfccP9h
n2eE4oQnkiP1VAkOQ9PcQZLsigtW5xixsF2nkHWLvTrFxGnXq6qV8tIq6fk64lhs
hlqOWgzQF5YFEpTbI/p//ObtWwrnaFUeQAZcaV3y/io2iv8cFXFxHj0BRPlNusty
t7wyOXyoQNQbAT3aNEkNyLl3d/7xGBhRO56L9Gdbw6GcDwux1YCsVMCR/vZqZ78p
EFRuqJzRUDq9Yj3UO1Y5N6dQJUlov7A9LAuWF92rVCQBkn7vMbM3vmwW74FcypwK
M/sr39O6HNuju3QVKVqQiEzX+KirBRA+1IM50Pey/9RxCnCg+CyutIv7XQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAb64HHSoG0+hIXES09hYCssZBHiMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvQnZyZ2NkS2diVDZFaGNSTFQyRmdLeXhrRWVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCXap8MA8E
AgACMAkDBwAqAgEoAAgwDQYJKoZIhvcNAQELBQADggEBAEosDZXPVXLcd3SrFABo
4GY5u8bPUjoEYk3SDZYlOiUjnGonBSKIs2OCLrOVYzvxGpzWbyVS/iO3avcoD5mQ
noc+nQodiuiTzG/n2Hk5KfCnNXerw9MnRIoPp8UEQwVlh4O7T4hPlJ/q26/i4kwX
yaXcqSy3DAbIMYw1nXDvggmXVx8lW7xktIHEDyenbn/MlgNKxIofwQ3kpwEgB9za
sGaRRXkTUy5H/Jo16SZGQcanubsf5JTcDFv457UvAuEZJ+sfBD99B8RPdYzrktFj
ekl2XO+aDjCFE8pcOW1xk60kqdpC6njNJIVx5/J6HD+OksLE0xOvk7T02cKXpqaJ
gtg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:50 2025 by rpki-client