Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BtfZqCwP8mI7vyL9BJuLJPmfHlM.roa
File: BtfZqCwP8mI7vyL9BJuLJPmfHlM.roa (raw, json)
Hash identifier: 3HuQdFQDfC76ChnAICVJuCSd9fFIOe2gbgVXTejC9Qw=
Subject key identifier: 06:D7:D9:A8:2C:0F:F2:62:3B:BF:22:FD:04:9B:8B:24:F9:9F:1E:53
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD60E837538E63E3DB56D6DE39FF13
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BtfZqCwP8mI7vyL9BJuLJPmfHlM.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201204
IP address blocks: 194.85.102.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:60:e8:37:53:8e:63:e3:db:56:d6:de:39:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d7d9a82c0ff2623bbf22fd049b8b24f99f1e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:91:32:b4:e4:fe:03:90:92:61:4a:2f:c0:
8c:e1:24:ae:1d:be:5e:3f:1f:20:f9:d9:8d:e7:34:
40:45:22:43:1f:fc:a4:87:b9:cf:0a:eb:2a:99:1f:
e2:c4:67:41:5a:3c:71:e0:a4:38:58:8b:60:23:06:
a5:bb:63:bc:35:05:ef:70:05:0b:a5:71:e3:0c:68:
83:70:9d:70:a2:f8:d7:b1:5c:2c:f4:6a:23:ee:eb:
9b:98:77:c2:c1:59:89:42:c4:be:e2:f9:80:b9:e8:
72:5a:d6:5b:18:42:35:a9:e6:4f:a9:f8:64:96:09:
8e:8b:5d:dd:1d:7e:bd:a2:07:a5:ff:f3:a0:ef:25:
ed:c3:8c:d2:ae:ef:e6:4b:15:db:cb:53:c0:fe:be:
a3:8a:e5:aa:d7:a7:32:85:f7:65:24:8e:66:38:1d:
f1:60:92:ef:0f:70:64:5b:94:a6:2f:2e:76:9f:ae:
30:ea:14:ed:d0:91:fc:39:ee:f7:c1:7a:a3:cb:14:
f8:8d:e3:ee:74:73:9d:28:05:59:c9:e2:3d:eb:53:
7e:30:96:7e:9c:c1:1a:f7:9c:e0:f1:bf:8a:29:f7:
f7:48:71:43:24:60:0a:fb:9d:bb:3c:7c:82:18:9b:
15:45:59:04:d9:7d:e4:c4:a1:d7:be:86:11:ad:06:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:D9:A8:2C:0F:F2:62:3B:BF:22:FD:04:9B:8B:24:F9:9F:1E:53
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/BtfZqCwP8mI7vyL9BJuLJPmfHlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:a2:d1:0b:56:0e:df:a9:64:09:31:01:bb:10:1d:d6:62:
bb:41:e9:4b:80:14:e8:6c:08:50:15:4e:f8:b4:01:bf:f8:d5:
0c:c1:68:e6:cd:8c:2b:8d:a8:c8:38:5f:db:de:a7:df:da:0d:
c4:12:0a:6b:19:d5:c2:e0:3a:4a:df:91:f9:22:70:8a:b6:69:
fc:2d:37:ed:57:f1:f0:5e:aa:7d:a3:bf:6e:4a:c9:da:78:f7:
09:e7:5e:67:da:d5:70:51:fe:e9:52:88:ea:af:5e:af:df:27:
4d:75:8f:16:92:4e:d4:d4:f0:53:ab:3f:db:ee:87:c4:68:f6:
e0:93:4b:43:06:99:0e:40:e6:ee:43:4e:d1:da:e6:de:14:14:
58:0e:77:69:f3:e9:29:b0:c5:75:14:d0:69:16:d9:2b:fc:56:
0c:7f:8c:f6:70:ce:30:f9:35:01:22:69:c2:7f:be:2b:87:21:
58:27:d6:3c:2f:e4:f2:e2:4b:da:af:94:07:af:08:be:b6:ee:
59:2c:b7:d4:b7:af:b9:8e:30:8a:b4:49:d3:85:ba:7a:6d:40:
51:07:9a:48:07:f9:4c:9d:9d:f7:c7:12:7f:36:8f:16:bc:f6:
b3:a1:57:3c:76:7d:03:bd:95:93:c5:b6:65:9d:c3:d1:b2:83:
49:f2:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:54:14 2025 by rpki-client