Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/BM8cXCST8GFLqm-S7JFg89XPJRI.roa
File: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (raw, json)
Hash identifier: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=
Subject key identifier: 04:CF:1C:5C:24:93:F0:61:4B:AA:6F:92:EC:91:60:F3:D5:CF:25:12
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 01942823A71AA3DD772B9131F12F4A8BAFF6
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/BM8cXCST8GFLqm-S7JFg89XPJRI.roa
Signing time: Thu 02 Jan 2025 17:50:12 +0000
ROA not before: Thu 02 Jan 2025 17:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13041
IP address blocks: 84.88.0.0/15 maxlen: 18
192.94.163.0/24 maxlen: 24
193.242.98.0/24 maxlen: 24
2001:7f8:2a::/48 maxlen: 48
2001:40b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a7:1a:a3:dd:77:2b:91:31:f1:2f:4a:8b:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jan 2 17:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04cf1c5c2493f0614baa6f92ec9160f3d5cf2512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:b6:b9:75:e1:2d:67:27:13:3e:dd:56:1c:
e7:41:5b:07:d8:07:36:02:42:6e:b4:fe:78:ca:57:
97:71:79:ea:79:0c:fd:89:2d:fd:5f:b6:57:0b:98:
2b:85:bf:5f:ce:ea:3e:eb:a7:0b:3a:4d:ca:eb:bc:
c6:12:ed:d6:60:a9:51:6f:47:ce:be:11:b3:58:90:
89:e2:0b:ed:17:00:88:81:46:7f:5e:21:d9:45:b8:
6b:a1:24:21:43:1b:ff:73:bd:aa:f4:c8:76:0b:79:
7b:cc:e4:39:e2:3c:42:75:af:3b:e0:2c:2e:25:d3:
16:06:10:57:70:a1:26:a2:dc:68:a6:35:0d:b4:a3:
df:34:78:de:09:e2:fc:9d:da:7b:1b:7d:2d:6c:01:
03:a8:60:7b:ab:2f:f8:0a:74:e6:70:cd:49:d3:2f:
39:8a:4e:2a:47:e5:ae:0c:65:b2:08:2e:05:eb:e0:
1b:a5:37:63:02:eb:f6:9a:73:cc:a8:13:86:b8:ce:
1f:81:9e:6e:be:f2:22:bb:58:50:04:49:17:00:49:
95:0e:87:8e:43:81:de:a8:1d:fa:53:e6:d8:01:98:
ad:3b:bc:a7:f1:18:bd:b1:bd:b9:6f:29:53:ee:1e:
17:2d:5b:47:7e:39:2d:b8:97:48:35:da:c7:e6:d5:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:1C:5C:24:93:F0:61:4B:AA:6F:92:EC:91:60:F3:D5:CF:25:12
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/BM8cXCST8GFLqm-S7JFg89XPJRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.88.0.0/15
192.94.163.0/24
193.242.98.0/24
IPv6:
2001:7f8:2a::/48
2001:40b0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:41:7f:e9:fd:43:42:b9:33:f6:ad:52:95:90:16:e1:18:3f:
bf:3e:e0:37:ad:c9:d4:9e:39:4d:b2:8b:e6:ac:38:e6:6d:25:
af:11:a8:53:57:d9:03:a3:22:9a:b5:2d:ba:c4:8d:5e:95:aa:
c0:69:76:35:c3:44:6c:7a:25:4a:c3:65:88:bc:8e:24:3a:06:
d1:8b:77:2b:9f:77:26:c1:7d:a5:2c:8d:c2:31:8f:44:6b:11:
9a:22:00:18:4c:e5:07:28:6b:f1:2f:35:bf:6e:ff:d7:13:9a:
66:cb:40:ea:86:ff:52:62:33:9a:89:7a:89:80:44:b4:c7:e7:
ea:7f:0c:82:4f:0f:67:32:f1:cc:48:f5:49:ae:46:86:8e:8d:
e0:3a:ad:cf:27:97:56:e3:cc:51:7c:9b:ba:69:f4:ee:f3:07:
35:e7:7d:48:cb:2e:fd:14:04:00:54:10:e7:44:f8:c5:2d:45:
75:79:99:97:38:c0:ec:5a:9a:cc:c5:f2:b5:81:39:fb:02:fa:
83:a5:46:19:00:60:70:91:1d:76:c1:af:e6:89:ce:c8:f2:46:
cb:c4:81:4d:6a:df:ec:cb:2a:a4:cd:5f:fc:80:98:e7:9d:3b:
14:74:75:43:53:a6:c5:be:d4:51:48:12:c6:1f:db:32:d4:e7:
c3:8b:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:31 2025 by rpki-client