Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BMFZ1AkGYuQeXC4eJAejMFHYRtI.roa
File: BMFZ1AkGYuQeXC4eJAejMFHYRtI.roa (raw, json)
Hash identifier: pv89ht7OzAlssHtJNe9VZvghlDH38xJS0T4lYjn5wqY=
Subject key identifier: 04:C1:59:D4:09:06:62:E4:1E:5C:2E:1E:24:07:A3:30:51:D8:46:D2
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B2390487C0D223A86D3F003CEF2E7C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BMFZ1AkGYuQeXC4eJAejMFHYRtI.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211025
IP address blocks: 88.220.58.0/24 maxlen: 24
195.136.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:04:87:c0:d2:23:a8:6d:3f:00:3c:ef:2e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c159d4090662e41e5c2e1e2407a33051d846d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:fe:4f:e6:20:dd:09:9c:66:2d:6a:c6:d4:
f2:13:92:e6:77:6f:a7:4b:81:f9:75:73:bf:7c:1c:
28:ad:5a:69:e9:7f:05:58:32:7f:23:c2:5a:72:e5:
1d:4c:f0:00:94:3c:a1:a9:66:0c:33:a8:1e:fe:12:
3a:11:bd:79:ca:11:4d:f2:2b:33:65:82:3c:14:f5:
c2:85:34:af:5a:07:b7:b3:ff:1d:6a:3d:fc:f5:21:
e1:eb:fc:21:27:29:9a:21:57:d8:03:41:ec:3f:23:
eb:99:69:b7:f2:c2:35:ae:e8:5a:fd:17:75:5f:1e:
b7:ba:b8:a0:c0:0b:6f:35:32:f5:d9:11:03:2d:2b:
df:a6:d5:51:76:dd:b9:d2:32:02:79:26:0f:be:85:
9f:87:ed:6e:16:a3:86:6b:e1:97:b0:6c:75:60:be:
0f:32:6c:c1:2c:31:bd:c5:8d:ab:58:5f:23:14:56:
c5:f3:cc:c2:07:32:06:57:57:0e:fd:0a:da:3f:aa:
b5:bf:c2:11:59:fd:5c:4c:46:2e:bd:db:36:1c:96:
0c:ed:3d:0d:4c:60:8f:ed:41:f5:e7:2f:2f:12:fb:
6f:4e:c0:37:1c:1f:1a:89:b7:ea:91:95:5b:35:1e:
81:8b:ea:57:6f:6d:0c:e9:25:66:49:1c:a4:1e:2b:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C1:59:D4:09:06:62:E4:1E:5C:2E:1E:24:07:A3:30:51:D8:46:D2
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BMFZ1AkGYuQeXC4eJAejMFHYRtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.58.0/24
195.136.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:aa:1a:5a:3e:75:9a:f5:bb:96:05:ac:2b:4c:53:09:57:3a:
05:ab:ee:2b:3e:98:9b:75:5b:d6:9c:ff:a9:be:da:59:b9:cf:
9d:72:5d:32:bc:db:82:19:99:fd:14:2d:e9:7f:e5:78:4a:6f:
c7:67:03:e2:9d:5c:9b:65:89:ca:c4:ed:2c:fa:f0:cb:85:5c:
29:5c:22:78:1e:79:c0:34:b4:45:f8:61:5a:68:e8:59:48:91:
e6:de:30:c3:8a:e8:c2:b7:ac:87:3c:0d:ee:b5:de:d1:76:26:
02:8d:9f:93:f6:58:fd:55:06:18:ff:d1:03:7c:87:61:a8:06:
9a:c6:86:24:a0:e6:bf:44:5e:6c:a8:02:07:eb:6f:20:c8:75:
2f:6d:ae:c2:2b:cf:7a:3d:9b:cd:8d:c6:9f:e8:b4:37:25:ca:
a0:e8:b1:f4:db:36:ba:23:d9:5c:5d:5e:75:6f:d4:82:55:34:
61:6b:53:b5:bb:83:de:2b:67:aa:9a:f8:3c:ed:37:8d:9b:63:
70:a2:d0:6d:04:0e:53:68:ab:67:c1:9a:84:df:9c:55:6f:1f:
fb:12:68:a1:e6:32:70:46:48:24:b5:1f:14:c2:cb:25:d0:ea:
43:b5:0f:df:93:3b:b2:3e:bb:4d:0a:12:65:5f:96:de:b5:c1:
c3:c4:86:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsjkEh8DSI6htPwA87y58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGMxNTlkNDA5MDY2MmU0MWU1YzJlMWUyNDA3YTMzMDUxZDg0NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFD+T+Yg3QmcZi1qxtTyE5Lmd2+n
S4H5dXO/fBworVpp6X8FWDJ/I8JacuUdTPAAlDyhqWYMM6ge/hI6Eb15yhFN8isz
ZYI8FPXChTSvWge3s/8daj389SHh6/whJymaIVfYA0HsPyPrmWm38sI1ruha/Rd1
Xx63urigwAtvNTL12REDLSvfptVRdt250jICeSYPvoWfh+1uFqOGa+GXsGx1YL4P
MmzBLDG9xY2rWF8jFFbF88zCBzIGV1cO/QraP6q1v8IRWf1cTEYuvds2HJYM7T0N
TGCP7UH15y8vEvtvTsA3HB8aibfqkZVbNR6Bi+pXb20M6SVmSRykHiv/sQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFATBWdQJBmLkHlwuHiQHozBR2EbSMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvQk1GWjFBa0dZdVFlWEM0ZUpBZWpNRkhZUnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWNw6AwQA
w4hGMA0GCSqGSIb3DQEBCwUAA4IBAQCaqhpaPnWa9buWBawrTFMJVzoFq+4rPpib
dVvWnP+pvtpZuc+dcl0yvNuCGZn9FC3pf+V4Sm/HZwPinVybZYnKxO0s+vDLhVwp
XCJ4HnnANLRF+GFaaOhZSJHm3jDDiujCt6yHPA3utd7RdiYCjZ+T9lj9VQYY/9ED
fIdhqAaaxoYkoOa/RF5sqAIH628gyHUvba7CK896PZvNjcaf6LQ3Jcqg6LH02za6
I9lcXV51b9SCVTRha1O1u4PeK2eqmvg87TeNm2NwotBtBA5TaKtnwZqE35xVbx/7
Emih5jJwRkgktR8Uwssl0OpDtQ/fkzuyPrtNChJlX5betcHDxIah
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:28 2025 by rpki-client