Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bpzReF-eLIZ3592JsjGut24F2Mk.roa
File: bpzReF-eLIZ3592JsjGut24F2Mk.roa (raw, json)
Hash identifier: avVyILQ9u93oIFzzV5TvdRisxC+s6GEBIaPs0i4k1ng=
Subject key identifier: 6E:9C:D1:78:5F:9E:2C:86:77:E7:DD:89:B2:31:AE:B7:6E:05:D8:C9
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0194ED9FCD45D8FB8673B138C59A93146EC5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bpzReF-eLIZ3592JsjGut24F2Mk.roa
Signing time: Mon 10 Feb 2025 02:11:00 +0000
ROA not before: Mon 10 Feb 2025 02:11:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 178.173.232.0/22 maxlen: 24
188.209.156.0/22 maxlen: 24
188.253.104.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ed:9f:cd:45:d8:fb:86:73:b1:38:c5:9a:93:14:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 10 02:11:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9cd1785f9e2c8677e7dd89b231aeb76e05d8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:22:c8:ab:f3:51:23:c8:77:ac:70:9c:5b:
33:5f:da:b3:36:a5:ee:05:e6:52:4b:95:51:3c:2a:
03:ba:20:13:8a:3e:c9:5e:5b:f1:75:12:40:16:85:
6f:f3:4b:54:a5:c7:b7:f7:0f:f7:13:6f:be:38:ba:
e4:e9:f1:48:fd:cd:4c:06:f2:03:47:6a:d4:2a:c3:
4d:f6:39:fc:b3:48:b4:d1:b2:fd:62:58:7e:bf:30:
6b:69:13:17:d2:fc:e4:5a:82:b8:24:84:7a:3b:8d:
e4:c6:2b:9c:6c:41:83:97:c6:ef:51:b9:83:04:06:
6b:20:0a:bd:1f:69:0b:89:89:2b:04:b2:35:ad:12:
f0:c7:f9:84:ac:71:7a:15:13:04:14:3e:c5:d6:9a:
df:26:4c:27:0c:c4:57:34:38:a1:ca:bb:8c:86:bb:
4d:a1:7c:c2:4b:ba:ca:b5:07:96:65:f4:e6:34:3c:
b0:3b:df:35:fe:5d:f3:9c:09:1b:da:de:22:85:d6:
94:e7:b3:ad:2a:87:e3:50:29:a7:78:e3:43:04:cb:
47:78:50:4f:61:c6:09:5c:41:eb:07:59:38:c2:a6:
25:3c:34:f7:32:f8:ae:5a:24:31:b2:d7:a2:31:a2:
0e:7f:4c:1d:bd:b5:70:22:a6:d9:8a:4b:43:3d:13:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9C:D1:78:5F:9E:2C:86:77:E7:DD:89:B2:31:AE:B7:6E:05:D8:C9
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/bpzReF-eLIZ3592JsjGut24F2Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.173.232.0/22
188.209.156.0/22
188.253.104.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
42:7f:ac:00:ff:05:4e:7f:6b:2e:2d:3a:c1:e8:33:35:4d:fe:
db:bc:e3:e5:9c:15:3c:be:e3:05:4f:e0:1e:65:8b:08:2f:ec:
23:b8:39:89:20:01:61:a3:68:9f:bc:80:59:74:10:76:d6:35:
f2:ad:f5:4b:75:72:26:54:11:6a:78:5e:ea:e2:91:3d:e1:d5:
7b:32:a8:8b:01:b0:89:76:4b:6d:79:c1:4e:a0:7e:aa:59:d8:
b0:d5:34:f1:50:43:80:ba:f3:a0:21:28:f9:96:fb:69:c0:9a:
fb:e2:f8:d8:a7:43:d4:b0:ca:5c:fd:da:31:0e:20:f9:9b:44:
d5:57:e7:3e:18:ab:9c:27:f6:d8:29:51:7a:fb:35:0c:15:0f:
b9:58:2a:ca:1d:c5:6b:80:79:1f:71:6c:af:99:b2:7b:79:bb:
d8:c6:e5:97:f0:b8:60:50:60:f1:6a:b8:ec:56:a5:7f:4f:cc:
f4:cf:ba:b8:ef:9e:ad:02:3f:ad:a4:ae:6d:56:96:6a:53:d6:
1c:df:27:4a:28:42:32:d5:91:31:79:a1:4b:e5:fe:2d:c4:52:
31:4f:a8:96:c5:e3:03:11:5d:37:ae:d9:57:4a:cd:d5:ac:2d:
ce:de:70:c4:7e:50:37:6a:d8:0f:70:ee:47:98:62:06:b8:d7:
b9:f3:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:03:47 2025 by rpki-client