Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/BFf-85bg3XsvsY5jQZ8M5EXtjro.roa
File: BFf-85bg3XsvsY5jQZ8M5EXtjro.roa (raw, json)
Hash identifier: VGc2uu1Pj1oB+TmvyhhrIxg8V4G+dyrhU+FgClogffE=
Subject key identifier: 04:57:FE:F3:96:E0:DD:7B:2F:B1:8E:63:41:9F:0C:E4:45:ED:8E:BA
Certificate issuer: /CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Certificate serial: 0187FBDCE15B160E5ECDCEF5187BB38454F4
Authority key identifier: C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/BFf-85bg3XsvsY5jQZ8M5EXtjro.roa
Signing time: Mon 08 May 2023 14:56:09 +0000
ROA not before: Mon 08 May 2023 14:56:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 194.48.101.0/24 maxlen: 24
194.48.102.0/24 maxlen: 24
194.48.100.0/24 maxlen: 24
194.48.100.0/22 maxlen: 24
194.48.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:dc:e1:5b:16:0e:5e:cd:ce:f5:18:7b:b3:84:54:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a36fdfa41c7469ce73dc8bbece9462dcb8c823
Validity
Not Before: May 8 14:56:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0457fef396e0dd7b2fb18e63419f0ce445ed8eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:2b:6c:ac:27:9a:af:48:0f:9c:06:02:f3:
aa:4b:01:95:47:bf:80:47:16:a4:6e:14:2a:8f:ab:
bc:f0:82:7b:f0:d4:36:10:73:d4:c8:06:b8:48:47:
02:c4:6b:4e:ee:34:29:e9:9c:a0:b1:9d:2e:38:a1:
b7:79:de:f5:30:3e:fd:e1:7c:bc:48:b8:c8:c8:8e:
13:d8:a6:9c:bd:c6:43:16:70:15:b5:9f:34:b5:96:
3d:be:4b:03:46:ba:e1:5c:de:b3:5e:b3:1b:4c:f2:
6e:39:3c:de:51:ed:7f:99:42:3d:26:b8:cb:34:06:
e1:08:99:b1:f6:31:a3:5e:1a:60:10:c4:cf:2c:df:
a6:87:74:e2:14:44:62:0d:59:95:01:1d:d5:54:bb:
39:4a:15:5c:14:a5:62:14:c1:23:46:dc:c9:24:d7:
25:bc:31:bd:00:92:d7:0a:cc:88:28:51:14:76:58:
17:ac:46:b1:0f:00:75:3a:06:b0:4b:27:e0:5b:b0:
78:9b:bf:51:ca:ad:5c:26:91:6b:60:8c:f7:87:27:
bf:c9:ca:22:e6:5b:1d:e2:db:0d:dd:26:43:d8:a7:
44:a1:78:2f:b4:61:b7:8e:6c:ee:43:4f:8a:e4:39:
22:18:47:cb:fb:45:15:c0:28:3a:2d:5f:ec:de:97:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:FE:F3:96:E0:DD:7B:2F:B1:8E:63:41:9F:0C:E4:45:ED:8E:BA
X509v3 Authority Key Identifier:
keyid:C9:A3:6F:DF:A4:1C:74:69:CE:73:DC:8B:BE:CE:94:62:DC:B8:C8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaNv36QcdGnOc9yLvs6UYty4yCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/BFf-85bg3XsvsY5jQZ8M5EXtjro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/25a8bc-57f0-43f8-bc02-f5a9c437bb28/1/yaNv36QcdGnOc9yLvs6UYty4yCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:98:4e:c7:90:a6:26:ab:75:47:a6:3a:6e:67:1c:ce:33:ad:
ad:4b:9f:dd:b7:81:f4:5d:3c:7e:b0:b3:5d:4a:0f:7e:01:1b:
a8:fb:26:e4:7d:7a:fb:25:c5:58:27:28:23:0c:d0:1c:d0:b1:
7d:f1:9c:8b:32:f6:29:b5:9a:4f:e6:a7:a1:25:3b:66:67:5b:
1a:6e:82:c2:44:b3:1f:61:e4:b5:d7:ed:3d:a9:83:55:5f:3b:
65:76:4b:ed:f0:85:9f:af:e4:b2:90:fd:f7:d2:9a:3f:23:4b:
b7:35:70:ee:00:a3:ec:82:f5:58:09:a9:74:f4:fe:4a:77:82:
e4:02:5a:35:da:f7:bf:0c:60:8d:54:b2:c4:56:6c:cd:92:a9:
7f:ab:d8:51:30:fa:43:fd:94:94:d1:0f:06:c0:73:7e:20:f2:
3d:75:5d:ac:7e:99:39:99:9a:2b:b8:55:be:23:e6:ad:7b:5a:
45:e9:ff:c3:b9:c9:d1:66:35:f1:fe:f6:0d:96:0a:3c:de:0c:
36:8b:7c:f1:b6:c1:06:91:15:a4:86:10:58:a3:b0:1f:9d:78:
ad:42:8f:b6:10:01:0e:b0:61:4a:97:0d:0f:93:0f:e7:5c:a2:
6f:b3:b5:68:00:9b:3a:38:21:87:ff:a2:24:33:1f:0e:4a:d4:
a5:04:c5:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf73OFbFg5ezc71GHuzhFT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTM2ZmRmYTQxYzc0NjljZTczZGM4YmJlY2U5NDYyZGNi
OGM4MjMwHhcNMjMwNTA4MTQ1NjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDU3ZmVmMzk2ZTBkZDdiMmZiMThlNjM0MTlmMGNlNDQ1ZWQ4ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop8rbKwnmq9ID5wGAvOqSwGVR7+A
RxakbhQqj6u88IJ78NQ2EHPUyAa4SEcCxGtO7jQp6ZygsZ0uOKG3ed71MD794Xy8
SLjIyI4T2KacvcZDFnAVtZ80tZY9vksDRrrhXN6zXrMbTPJuOTzeUe1/mUI9JrjL
NAbhCJmx9jGjXhpgEMTPLN+mh3TiFERiDVmVAR3VVLs5ShVcFKViFMEjRtzJJNcl
vDG9AJLXCsyIKFEUdlgXrEaxDwB1OgawSyfgW7B4m79Ryq1cJpFrYIz3hye/ycoi
5lsd4tsN3SZD2KdEoXgvtGG3jmzuQ0+K5DkiGEfL+0UVwCg6LV/s3pcMuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARX/vOW4N17L7GOY0GfDORF7Y66MB8GA1UdIwQY
MBaAFMmjb9+kHHRpznPci77OlGLcuMgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFOdjM2UWNkR25PYzl5THZzNlVZdHk0eUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yNWE4YmMtNTdmMC00M2Y4LWJjMDIt
ZjVhOWM0MzdiYjI4LzEvQkZmLTg1YmczWHN2c1k1alFaOE01RVh0anJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yNWE4YmMtNTdmMC00M2Y4LWJjMDItZjVhOWM0MzdiYjI4
LzEveWFOdjM2UWNkR25PYzl5THZzNlVZdHk0eUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjBkMA0G
CSqGSIb3DQEBCwUAA4IBAQA8mE7HkKYmq3VHpjpuZxzOM62tS5/dt4H0XTx+sLNd
Sg9+ARuo+ybkfXr7JcVYJygjDNAc0LF98ZyLMvYptZpP5qehJTtmZ1saboLCRLMf
YeS11+09qYNVXztldkvt8IWfr+SykP330po/I0u3NXDuAKPsgvVYCal09P5Kd4Lk
Alo12ve/DGCNVLLEVmzNkql/q9hRMPpD/ZSU0Q8GwHN+IPI9dV2sfpk5mZoruFW+
I+ate1pF6f/DucnRZjXx/vYNlgo83gw2i3zxtsEGkRWkhhBYo7AfnXitQo+2EAEO
sGFKlw0Pkw/nXKJvs7VoAJs6OCGH/6IkMx8OStSlBMXm
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:12 2025 by rpki-client