Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa
File: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (raw, json)
Hash identifier: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=
Subject key identifier: 6E:67:62:FB:19:4B:A8:EF:A1:57:98:E9:30:B6:9A:2E:65:21:D0:C6
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 019422FBA615BCF59EB1FD3C778EAC22C1C4
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31087
IP address blocks: 185.97.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:15:bc:f5:9e:b1:fd:3c:77:8e:ac:22:c1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e6762fb194ba8efa15798e930b69a2e6521d0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:d7:2a:46:0d:74:3f:04:1d:93:85:9d:08:
47:5a:8f:23:98:2d:67:6b:b8:be:42:fb:a4:6b:61:
a7:5a:04:ff:ec:71:63:5b:b5:e9:d7:86:76:df:05:
ea:a5:23:95:4f:de:ed:cb:0c:49:ea:f4:3d:3d:9a:
bd:28:ca:88:48:73:1c:b2:33:b2:ce:dd:c4:b2:c4:
b0:30:d4:5e:36:92:fa:f6:c5:9d:c5:54:03:0a:05:
b7:72:21:89:17:de:a6:e8:45:22:89:70:08:2b:64:
be:38:b3:8d:b8:13:74:37:77:ad:c4:0e:a2:8e:19:
01:2c:c7:c0:4d:63:99:d8:19:90:4c:4b:dc:7e:bd:
ca:fb:99:f3:21:15:4a:1f:57:b2:60:62:4a:c9:9d:
0e:c0:ca:48:a6:86:b6:72:b9:a9:c7:f4:cf:70:4c:
69:5f:eb:a3:59:a4:02:af:46:4f:bd:d3:ec:7b:89:
34:5e:a9:2f:69:15:71:3c:3c:b6:10:d4:cc:b1:48:
99:7e:7d:a3:a9:ef:f9:ab:65:4f:95:9b:a0:e0:5b:
16:2e:1f:42:e3:b0:fa:6f:31:33:a3:1f:23:d2:c7:
7a:6e:d8:9c:f3:90:bc:31:03:67:00:b9:22:3b:ca:
16:83:f5:32:3a:6b:79:07:34:d2:9c:c4:e3:27:55:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:62:FB:19:4B:A8:EF:A1:57:98:E9:30:B6:9A:2E:65:21:D0:C6
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:59:2d:5a:26:b9:48:2c:e8:da:46:92:b7:0f:ea:ef:b5:2b:
fb:f2:3f:7e:1c:a3:91:11:d0:52:33:95:44:39:62:bf:47:c2:
c9:63:c1:d8:fc:a4:2a:49:4c:6f:71:de:85:3f:7d:d8:4c:5d:
12:c0:c4:f2:6c:22:8c:17:45:21:51:73:c5:74:f3:18:e9:c8:
dd:bc:81:46:86:b3:88:c5:f8:6f:da:72:df:7f:f6:33:52:b9:
a7:76:a2:2e:cf:75:c9:b2:46:51:7b:bd:7b:0e:70:46:93:58:
fd:d7:03:ff:86:e6:a7:4a:1a:cc:dc:e2:9f:31:2c:83:60:4f:
7e:1e:ba:61:b4:8d:c8:34:c9:d7:bf:81:b4:a0:f9:e1:2b:d5:
de:47:8b:78:32:8e:8e:fd:ea:a4:4f:5e:78:ab:30:7b:3f:10:
f2:fc:b1:e0:0d:ea:16:02:a9:78:74:43:b9:ea:28:d0:6d:af:
c8:24:9e:24:a8:ec:94:69:a8:55:d4:b6:b8:4d:0c:ca:32:78:
dc:3b:99:9a:8a:28:02:95:ce:64:fd:2b:b3:85:be:69:b7:c3:
f4:a7:be:0c:4d:04:01:0d:3d:d9:20:3b:39:73:d1:9a:e3:33:
d3:d1:27:ff:8c:0f:cb:d6:56:33:a1:de:6d:b4:c9:38:88:93:
23:d6:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:46 2025 by rpki-client