Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/BXx2YjcLkJhkSh64E-nT1C2ZRhY.roa
File: BXx2YjcLkJhkSh64E-nT1C2ZRhY.roa (raw, json)
Hash identifier: ctJQ4dktIWPQyWzWWUi25r/OxdmHuba3v/mpjfkUirA=
Subject key identifier: 05:7C:76:62:37:0B:90:98:64:4A:1E:B8:13:E9:D3:D4:2D:99:46:16
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 018B3CEF6F53C12FFC092D72783E1696C790
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/BXx2YjcLkJhkSh64E-nT1C2ZRhY.roa
Signing time: Tue 17 Oct 2023 09:20:06 +0000
ROA not before: Tue 17 Oct 2023 09:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206352
IP address blocks: 185.217.50.0/23 maxlen: 23
185.217.48.0/23 maxlen: 23
185.188.253.0/24 maxlen: 24
185.188.254.0/23 maxlen: 23
185.248.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:ef:6f:53:c1:2f:fc:09:2d:72:78:3e:16:96:c7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Oct 17 09:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057c7662370b9098644a1eb813e9d3d42d994616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:cf:18:5b:50:da:b4:d7:85:74:dc:a2:31:
67:40:b8:a4:f1:9f:ca:31:0a:fa:fa:1c:c3:50:80:
d4:d9:56:44:f0:8a:79:73:56:52:54:ab:7b:72:90:
52:82:d9:bc:ed:66:cd:85:eb:ff:87:85:ea:60:6d:
78:fa:15:b0:3d:02:fd:34:58:c0:c6:3c:23:dd:b7:
e1:cf:7b:3c:3c:9d:e6:20:95:b5:7a:94:b0:29:ea:
47:8b:47:81:ea:ee:6b:52:4a:cd:52:0a:fa:f2:fc:
e1:e7:c5:72:b1:a2:70:de:e9:64:83:fc:9c:65:ab:
d7:20:bb:f5:d9:ff:2b:a2:ed:5e:60:a8:ea:e1:74:
6a:08:61:a5:39:8c:1a:41:ff:8d:08:8b:14:47:56:
64:cc:85:cd:10:9b:07:f1:65:6e:6b:5b:ba:7d:96:
61:35:ba:e3:f1:5d:8f:71:3e:d5:a9:0a:0f:fb:98:
61:9e:61:a1:fe:c3:93:65:16:9c:e7:45:31:41:9d:
2f:8c:d3:b2:95:57:f6:f3:c9:de:88:bd:9d:42:64:
81:45:8a:ac:19:00:24:8e:37:9c:d6:4a:f9:73:c4:
32:43:27:42:f1:5f:57:9e:41:75:69:26:1f:1b:9f:
68:28:22:32:ea:39:d6:6d:cb:b8:32:4c:3d:44:92:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:76:62:37:0B:90:98:64:4A:1E:B8:13:E9:D3:D4:2D:99:46:16
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/BXx2YjcLkJhkSh64E-nT1C2ZRhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.253.0-185.188.255.255
185.217.48.0/22
185.248.2.0/23
Signature Algorithm: sha256WithRSAEncryption
72:65:dd:97:db:6d:5c:a7:51:3e:15:4e:07:a0:f3:fb:38:84:
ab:73:b6:19:fc:a1:6a:fe:0a:bc:84:a6:af:eb:e7:6c:9d:ee:
4b:6c:2e:73:cc:a3:96:77:06:d1:15:9e:59:03:42:e2:77:1d:
37:e9:49:3a:fb:18:25:7f:fb:1a:cf:19:21:77:65:51:23:83:
36:77:4d:86:6a:e4:65:ae:bb:cd:3e:2c:b4:54:b2:9a:f3:5f:
06:5c:aa:79:b3:35:b9:b2:39:b0:a8:aa:93:55:ee:72:20:84:
5a:7c:5b:ce:11:4c:f1:52:0d:3a:e0:a8:00:6d:e4:ea:27:c9:
ae:df:70:fb:b8:eb:ee:40:f4:42:65:3a:02:66:ff:a7:55:2c:
2c:d8:fd:dd:e9:cf:c8:1b:de:24:ce:8d:f1:2c:63:df:38:1e:
62:bc:38:7d:76:0d:e7:a3:c0:c3:1d:79:5c:05:0d:34:0c:76:
27:08:33:4e:d4:bf:e0:e3:53:31:6c:da:cb:03:09:54:37:17:
2e:b1:be:9a:58:8b:cf:3e:4a:0f:73:bf:a6:4c:15:bc:96:72:
30:0f:9e:2d:2b:45:17:6c:c3:94:16:09:fc:eb:a8:59:b9:2d:
a7:19:aa:b3:3a:ba:69:cc:4d:de:8f:35:67:01:1e:95:ad:c1:
0b:3b:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:07 2025 by rpki-client