Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/Bf-kMQ99jH2YMb-LV4c00gAMC4o.roa
File: Bf-kMQ99jH2YMb-LV4c00gAMC4o.roa (raw, json)
Hash identifier: mct4aZyfHJxslZVGPJapqeqlxsybiZ3MsQqeiz0ev+8=
Subject key identifier: 05:FF:A4:31:0F:7D:8C:7D:98:31:BF:8B:57:87:34:D2:00:0C:0B:8A
Certificate issuer: /CN=d18127744b4c665c2ef9dea4df867b543ac65669
Certificate serial: 08DD9626
Authority key identifier: D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/Bf-kMQ99jH2YMb-LV4c00gAMC4o.roa
Signing time: Sun 06 Feb 2022 12:25:53 +0000
ROA not before: Sun 06 Feb 2022 12:25:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41313
IP address blocks: 80.95.22.0/24 maxlen: 24
93.175.244.0/23 maxlen: 24
93.152.234.0/23 maxlen: 24
2a0d:3b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148739622 (0x8dd9626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18127744b4c665c2ef9dea4df867b543ac65669
Validity
Not Before: Feb 6 12:25:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05ffa4310f7d8c7d9831bf8b578734d2000c0b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:33:f2:ac:4c:fb:de:5e:6c:6f:61:72:f0:
5f:78:af:70:da:0a:62:f7:3f:03:03:25:9e:67:92:
e0:50:36:d5:7a:d5:e3:f9:c1:cd:b6:3a:a7:85:f8:
07:60:01:6a:41:c4:fa:78:70:e6:bf:1e:d2:45:91:
0a:99:d5:68:99:f1:54:6b:59:90:48:3a:d7:ab:91:
ee:11:a3:18:76:05:f2:ab:68:3c:7d:3e:39:c4:85:
e9:23:7f:27:f2:ce:24:5b:af:e9:04:94:47:01:cf:
6d:00:41:79:ee:16:d2:ba:59:92:1f:80:8b:d2:51:
3c:7a:ce:82:83:da:63:1a:29:21:02:60:7c:2f:9e:
c1:44:36:0d:51:c0:b4:fa:72:6a:0e:95:5f:e0:93:
23:e3:ef:7e:fc:f7:b2:96:8f:62:0f:99:30:4a:f3:
cc:63:ed:93:1d:5a:fc:9b:cc:61:5d:79:08:1a:c6:
5c:7e:23:e1:07:03:36:9b:38:b4:24:c4:72:42:48:
b9:dc:c9:b0:08:ad:be:de:84:bf:a8:66:c1:1f:17:
af:83:45:f5:e6:ff:b5:ff:1d:ac:8d:03:51:71:04:
1b:5b:78:9e:cf:70:ec:33:2a:eb:3a:94:dc:79:6a:
16:b4:0f:91:b9:b0:58:00:fb:e9:e2:27:d4:46:b9:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:A4:31:0F:7D:8C:7D:98:31:BF:8B:57:87:34:D2:00:0C:0B:8A
X509v3 Authority Key Identifier:
keyid:D1:81:27:74:4B:4C:66:5C:2E:F9:DE:A4:DF:86:7B:54:3A:C6:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YEndEtMZlwu-d6k34Z7VDrGVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/Bf-kMQ99jH2YMb-LV4c00gAMC4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a4bda2-e507-407a-a2bb-75c937bf1da0/1/0YEndEtMZlwu-d6k34Z7VDrGVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.22.0/24
93.152.234.0/23
93.175.244.0/23
IPv6:
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
8b:6c:72:81:42:36:fb:f7:db:ab:f4:fd:cf:2b:a5:48:d2:bf:
3a:49:15:d3:f8:ec:a4:48:b1:a4:8b:28:fc:6f:ee:39:00:77:
73:bd:ab:20:22:d2:44:3e:ef:48:57:8e:2d:55:3c:e4:3d:5b:
82:6a:be:b6:0d:8f:da:1a:b5:e3:b3:00:ff:a6:e2:31:4d:3a:
5f:39:4d:1a:a6:27:c4:76:d3:1c:32:b4:e0:c6:5c:d8:15:6e:
b3:30:46:49:79:64:ff:5b:a3:cc:1b:69:6d:af:60:22:4d:f1:
51:65:c3:b2:13:9b:de:3d:e5:be:3a:7a:26:f7:0b:4e:3d:f1:
7c:d6:02:5a:ed:52:6c:36:0b:42:c8:66:3a:60:df:a3:bf:a6:
15:2f:01:61:6f:70:89:90:0e:13:75:fd:3c:10:21:3a:2c:ec:
40:65:eb:0f:2a:ee:d8:4f:17:d3:64:72:3b:8d:11:76:83:ec:
61:c3:11:7a:50:9f:c6:39:9f:99:f9:36:97:11:59:ae:7f:d5:
f1:e2:70:6d:86:97:96:93:7c:33:5b:3b:ec:be:0f:a6:31:4b:
64:dd:42:90:0b:8b:86:5d:74:62:f5:45:d7:02:00:b3:e3:22:
06:e8:0d:e4:b6:a5:cb:17:d5:5c:bb:6a:7e:93:92:dd:e8:b2:
e9:e2:9d:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:22 2023 by rpki-client on console-ams.rpki-client.org