Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BkJLBllw1-ZWKgRHqGBiQqbyScY.roa
File: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (raw, json)
Hash identifier: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=
Subject key identifier: 06:42:4B:06:59:70:D7:E6:56:2A:04:47:A8:60:62:42:A6:F2:49:C6
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0194FFFC27BBED2E3DC8A3E30C964E74D0F5
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BkJLBllw1-ZWKgRHqGBiQqbyScY.roa
Signing time: Thu 13 Feb 2025 15:45:02 +0000
ROA not before: Thu 13 Feb 2025 15:45:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42117
IP address blocks: 77.233.96.0/19 maxlen: 19
95.175.160.0/19 maxlen: 19
159.20.8.0/21 maxlen: 21
2a00:c780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:fc:27:bb:ed:2e:3d:c8:a3:e3:0c:96:4e:74:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 15:45:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06424b065970d7e6562a0447a8606242a6f249c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:e1:d6:48:6c:2b:d1:de:60:78:01:90:51:
85:df:0c:2b:38:c2:c7:b2:b3:da:2d:a4:2c:5f:3d:
39:fe:43:6c:76:fa:98:da:21:bb:73:bc:f0:97:30:
99:03:79:1d:38:d0:68:5b:99:ba:9e:c5:8f:95:a2:
38:b6:2e:ff:a8:d1:78:92:97:ee:81:e2:64:ef:fa:
32:32:33:37:a2:42:10:d8:3d:50:f1:0b:ef:a1:9b:
73:85:00:b0:a6:5f:d0:99:60:60:bd:5b:aa:3b:dd:
e5:bf:e2:03:3a:61:c7:44:aa:d8:fb:d4:81:d5:b4:
a6:c7:95:af:ba:28:5c:69:5b:78:4f:4e:d6:da:65:
df:cf:63:14:ff:91:6c:2e:3c:db:e3:56:72:3a:63:
ff:66:4a:0c:c3:12:87:ff:78:5b:fa:3a:7a:15:93:
67:23:93:4e:3e:26:77:e7:ae:56:97:25:cc:e3:3d:
7e:bd:0d:af:88:e9:cf:50:19:4e:23:39:08:b8:d6:
2b:08:37:8a:94:43:35:2d:35:54:04:21:4d:1a:99:
9d:b8:8e:3d:ad:3e:51:f7:61:68:71:0f:f2:e6:40:
e1:4b:ec:9f:6b:72:d4:a0:d8:a8:bd:48:39:f7:51:
e6:36:f1:25:8e:fb:f9:04:fe:d2:f2:95:c0:bf:45:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:4B:06:59:70:D7:E6:56:2A:04:47:A8:60:62:42:A6:F2:49:C6
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BkJLBllw1-ZWKgRHqGBiQqbyScY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.96.0/19
95.175.160.0/19
159.20.8.0/21
IPv6:
2a00:c780::/32
Signature Algorithm: sha256WithRSAEncryption
00:8b:6d:31:0f:77:d0:fd:1d:59:22:bf:6b:59:f2:75:0b:88:
03:98:ef:9c:49:2e:d4:5d:84:55:d1:4d:8a:be:9d:a9:fb:2b:
bd:e3:3c:9f:f3:8a:55:67:5b:ce:5e:2f:29:33:ff:b6:89:a9:
67:38:3c:bf:a1:4f:f9:68:f0:cc:b8:48:9a:cb:da:61:3c:ea:
dc:af:e4:f4:68:e6:14:dc:71:26:71:e7:58:c4:70:a4:e8:49:
5b:33:8e:ee:96:dd:76:ee:33:78:a4:bd:fd:6e:57:b8:56:13:
b5:29:f2:05:bd:b9:63:03:dc:b4:48:5e:6a:37:a9:14:aa:ee:
cb:38:cd:2f:c9:83:1b:5d:c2:84:bc:ef:98:e1:26:73:d0:47:
69:16:76:4c:da:07:33:3b:60:87:5a:a8:a0:3d:5c:4e:99:0c:
de:38:e2:22:b0:2b:47:7f:dc:63:51:89:c4:45:1f:ee:3c:85:
0c:51:e8:1d:70:92:a6:43:13:3f:28:48:6d:bf:6f:01:eb:89:
a3:93:a7:18:dd:b5:9a:4c:dd:00:a6:b9:05:cd:83:ba:b2:1a:
0a:c7:7a:84:60:c8:6d:aa:0a:8e:df:b3:55:77:ae:6b:90:1c:
67:e2:22:f0:0c:4a:b5:b2:c7:b4:85:9a:48:e4:52:93:a5:5f:
c8:23:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:58:20 2025 by rpki-client