Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa
File: bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa (raw, json)
Hash identifier: qdsMr/1Eweoe57sRNZRjubpmr4Axiz7u559HLCIF5fI=
Subject key identifier: 6C:16:75:65:23:C4:C9:0D:14:45:7A:DF:84:02:F6:49:A6:03:CF:7C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01954C02B277C4BB901B4F62BE0C60F91881
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa
Signing time: Fri 28 Feb 2025 10:03:19 +0000
ROA not before: Fri 28 Feb 2025 10:03:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:02:b2:77:c4:bb:90:1b:4f:62:be:0c:60:f9:18:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Feb 28 10:03:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c16756523c4c90d14457adf8402f649a603cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:e8:cc:ca:92:9d:a7:b6:8c:fc:3d:5f:6b:
96:27:55:e1:30:f7:26:40:1c:76:b3:a3:dc:20:58:
9b:39:59:80:10:f8:ae:2a:eb:f2:7b:fe:7c:3d:e9:
3a:cc:e2:af:0b:4a:16:1c:53:50:43:18:24:02:cc:
3d:99:ab:9b:81:28:0d:5d:92:ed:5e:3a:f4:ac:7f:
27:00:5c:2c:be:c9:06:3c:40:30:16:71:20:46:95:
bb:37:5a:9c:c6:92:64:e3:3e:be:2b:f9:81:6d:07:
b9:62:2b:41:0c:92:61:bf:ad:34:32:9e:2d:c4:0a:
d5:d8:fd:2d:15:d9:a3:6a:a2:7a:d3:e4:44:df:a0:
bb:31:94:ac:16:e0:50:a0:30:ce:f6:34:3e:21:f9:
18:d2:40:c5:c9:7b:53:de:e9:97:16:85:f7:c3:a5:
e9:86:b6:4e:42:de:19:c3:fc:0d:bd:fa:04:b4:24:
85:a7:8c:a2:69:7e:a5:dc:4b:2a:ba:08:51:da:89:
7a:86:4d:02:25:b5:09:8e:b7:02:99:ea:79:9a:fb:
58:ef:fa:37:9b:c5:02:00:55:91:a5:cc:c0:67:cf:
3e:3b:f9:f5:27:a6:f9:3d:31:46:ed:66:8b:05:73:
f4:ce:80:d1:ea:d5:76:32:48:96:21:a3:f1:54:7e:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:16:75:65:23:C4:C9:0D:14:45:7A:DF:84:02:F6:49:A6:03:CF:7C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bBZ1ZSPEyQ0URXrfhAL2SaYDz3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.112.0/20
Signature Algorithm: sha256WithRSAEncryption
58:d8:32:84:67:5a:a5:30:9e:73:4e:a0:f1:66:b4:3e:c0:80:
e5:d3:3a:32:67:6a:3c:7e:5f:79:a1:ff:2b:a7:1e:ac:6b:06:
b6:d5:3f:21:68:fe:f5:23:42:42:63:c8:1b:da:c0:25:ab:b1:
6a:6c:9e:47:58:eb:f5:e7:83:63:9a:e7:53:a0:3b:dc:b5:f0:
8a:5e:cf:32:5b:e3:55:1d:b9:1a:c1:65:dc:af:73:fb:fc:a9:
27:43:e1:ea:24:2b:f7:9b:d9:74:f4:51:b3:d6:be:08:0a:17:
a8:fb:21:b7:ca:b3:72:c4:d1:f6:52:b9:15:be:b4:fb:23:5c:
6f:f5:6c:2c:84:82:85:ce:d0:0c:b2:ba:58:7e:27:7d:76:7d:
c3:57:e5:fd:6b:c7:74:ee:e3:19:c5:be:0c:b9:e1:e2:5e:be:
a9:2a:04:b8:fb:11:0a:fe:34:d1:79:4e:99:61:99:0a:67:71:
d1:80:8c:46:b0:99:d8:91:37:d2:8b:ed:58:a1:a7:e9:24:ff:
1c:b3:57:f4:4a:e5:60:d4:a0:1c:19:3d:5e:1f:14:fc:88:18:
af:28:20:ed:c8:de:6a:30:51:4a:10:05:91:77:fc:18:5c:9c:
54:15:1a:1b:fe:e7:3c:b8:d5:2a:4a:ae:c3:44:18:7b:e0:62:
9c:56:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:31 2025 by rpki-client