Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bvTzeJOIVBptxPmwh5s6PpHsuW8.roa
File: bvTzeJOIVBptxPmwh5s6PpHsuW8.roa (raw, json)
Hash identifier: AWF32/P8JHHkKARYVBVvlBAcgAkNGEWndKBSN3ilhec=
Subject key identifier: 6E:F4:F3:78:93:88:54:1A:6D:C4:F9:B0:87:9B:3A:3E:91:EC:B9:6F
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5C71E2223606A8C11CB14621407BC
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bvTzeJOIVBptxPmwh5s6PpHsuW8.roa
Signing time: Wed 01 Jan 2025 07:47:48 +0000
ROA not before: Wed 01 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35608
IP address blocks: 79.171.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c7:1e:22:23:60:6a:8c:11:cb:14:62:14:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef4f3789388541a6dc4f9b0879b3a3e91ecb96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:60:45:b5:1a:7d:24:7f:4e:54:3c:71:77:
2c:8f:31:7d:0f:89:0e:29:dd:ff:b2:a5:9a:ad:ed:
ec:19:7a:c2:27:2d:dd:62:ee:a6:53:88:6b:1b:7e:
61:16:3a:e8:56:4c:69:d0:fb:bb:97:88:69:2a:f1:
ff:3b:92:a5:96:4a:67:06:b8:c9:0d:bf:54:af:1f:
60:ff:c7:df:2a:c8:7f:b0:10:f1:e2:31:fd:d7:54:
00:bc:35:c9:19:02:4a:2a:e4:fd:90:2d:95:2b:3c:
b7:c7:b0:ca:01:b9:f3:75:92:05:d2:c4:c4:e7:ea:
9b:c6:9d:58:f1:26:81:3b:3d:9e:c9:31:21:76:e5:
63:69:8d:d1:2f:3d:29:53:fd:91:d4:03:df:7c:52:
12:88:fd:8c:e3:5f:ce:bd:3c:40:2b:73:9b:70:88:
69:06:80:52:d6:b8:64:e6:f7:57:98:19:f2:38:99:
9d:aa:ca:56:0b:43:f2:71:5b:21:23:a2:d9:ea:e4:
c2:5b:01:c8:89:fd:1e:a7:dd:e1:24:46:16:fe:a2:
91:0d:17:33:bd:10:11:b3:d0:bd:84:2b:35:21:74:
90:b6:47:68:20:e4:bc:90:ed:e2:e5:8d:1c:6d:8d:
2c:15:0c:82:b1:a0:14:59:fe:87:dc:eb:4c:ca:a7:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:F3:78:93:88:54:1A:6D:C4:F9:B0:87:9B:3A:3E:91:EC:B9:6F
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/bvTzeJOIVBptxPmwh5s6PpHsuW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:08:11:2b:b1:e2:f1:70:77:07:69:66:29:75:7d:7e:11:03:
74:b8:2c:7b:bf:de:b8:59:ee:c4:e6:f2:3b:81:35:b0:7d:97:
b9:7c:bf:4b:02:9d:fa:01:bb:ba:4f:91:13:42:42:c6:71:5d:
ce:54:ae:0e:50:5a:53:2c:6f:87:0b:01:2b:ad:bb:6d:f6:db:
59:ab:34:aa:da:0b:7c:d3:79:36:66:c7:53:4d:d5:d6:79:02:
ce:ad:ee:35:34:03:4c:e0:32:53:b7:78:2e:a8:96:d4:93:7f:
3c:95:85:c8:34:1c:c9:66:a2:a4:c8:31:ad:26:7b:4e:5a:3d:
31:fd:d8:bb:2c:8e:49:db:91:84:c9:25:3f:2a:34:27:2d:c4:
f5:fe:77:35:2e:57:99:5a:b2:09:87:42:e1:78:90:a2:40:2f:
09:99:2b:83:96:f3:e1:d6:f4:0e:7b:32:d0:67:b1:8e:b2:c6:
93:f3:2e:5f:cf:89:e5:29:08:a7:79:75:d6:ec:ed:84:de:ce:
ac:0f:a4:52:d7:c5:51:73:ee:ca:74:76:63:90:fa:fa:74:31:
8b:1b:08:d6:9e:9a:1c:2c:b5:a2:1c:b5:96:ee:51:45:41:54:
45:c3:cb:ec:10:0e:93:bb:77:30:4b:e4:1a:2b:3e:ba:29:04:
8f:72:15:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:39 2025 by rpki-client