Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa
File: BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa (raw, json)
Hash identifier: 0DB+VS24EPxDdyG43/iiFi3jJXUjJ/EkB02bBWczNN8=
Subject key identifier: 05:A0:42:78:D8:35:B4:73:E1:C8:DB:7E:34:62:9D:99:6F:F9:B6:3E
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 0194258FBF86313CBE1090F9FA94A659F4FE
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39087
IP address blocks: 5.8.36.0/22 maxlen: 32
91.223.28.0/24 maxlen: 32
91.223.70.0/24 maxlen: 32
91.223.75.0/24 maxlen: 32
91.223.89.0/24 maxlen: 32
185.97.200.0/22 maxlen: 32
194.37.1.0/24 maxlen: 32
194.37.254.0/24 maxlen: 32
194.39.99.0/24 maxlen: 32
194.39.101.0/24 maxlen: 32
2a00:1b78::/29 maxlen: 64
2a0f:a3c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bf:86:31:3c:be:10:90:f9:fa:94:a6:59:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a04278d835b473e1c8db7e34629d996ff9b63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:dd:73:55:a9:65:66:40:f3:04:60:1d:b1:
50:a2:d2:e0:27:be:93:66:ed:64:d4:51:4f:7c:69:
a3:6e:80:8a:7c:75:21:d5:70:4a:e7:f3:a6:77:1a:
e5:93:08:b9:a7:71:01:59:ea:ea:fc:05:0d:f8:b1:
5b:46:cb:30:e0:8b:29:0b:9e:76:a1:ec:a0:11:d8:
f4:92:b5:84:30:9d:55:ed:ef:16:7e:05:34:10:6e:
7c:4f:28:be:f0:a2:cf:fb:c5:0d:5e:35:25:0f:9b:
5e:a1:d9:d9:49:ab:55:ec:72:10:56:42:16:3e:61:
ad:ea:36:5c:ef:57:d2:8a:0e:ee:b9:61:b3:e4:c6:
1e:4d:65:0c:1a:53:2e:ca:80:ad:a0:88:c8:5f:80:
03:8f:bf:92:9d:a6:8f:27:0c:57:53:ff:bf:38:a5:
ef:e2:0f:4e:8b:62:c9:32:97:15:4d:7b:67:10:e5:
29:93:42:c8:c6:30:cb:de:1c:f5:2a:a7:84:3a:65:
ba:2d:02:ed:c1:5b:6f:2e:9a:b1:27:30:da:4f:70:
85:64:0d:a9:be:9f:6d:29:a0:f7:c2:d6:ff:5b:5c:
c0:33:49:e4:41:42:bc:95:5d:5b:28:91:81:ab:27:
ab:de:fd:7b:d8:a3:6e:5b:5a:1b:7f:d9:c2:0b:b9:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:42:78:D8:35:B4:73:E1:C8:DB:7E:34:62:9D:99:6F:F9:B6:3E
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/BaBCeNg1tHPhyNt-NGKdmW_5tj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.36.0/22
91.223.28.0/24
91.223.70.0/24
91.223.75.0/24
91.223.89.0/24
185.97.200.0/22
194.37.1.0/24
194.37.254.0/24
194.39.99.0/24
194.39.101.0/24
IPv6:
2a00:1b78::/29
2a0f:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:ae:99:80:2b:b7:7d:b6:b5:9e:e6:0e:23:84:18:97:7c:a2:
f9:ab:88:4a:2b:97:cc:68:3a:ca:8b:c0:44:0e:d9:7f:83:94:
e7:c5:f6:37:2e:b2:f6:97:64:7d:6a:48:15:a7:05:07:f7:97:
6a:c9:91:ec:5d:cb:8d:02:a1:40:6e:7a:a4:c5:e0:2a:0b:e9:
e7:6a:7c:56:f7:63:ec:2b:43:40:02:76:51:c5:a8:43:23:fd:
5e:f5:6e:5e:f2:18:84:74:e4:e2:fa:f9:e8:54:f5:1f:56:1a:
9a:2d:d9:18:8c:0f:05:ac:3d:a0:aa:61:d3:c3:9d:68:32:56:
1e:48:9d:1b:c7:a8:f1:a6:61:68:73:f9:1b:03:4b:26:c1:e3:
67:29:cd:6c:c1:2f:41:be:0b:66:6f:07:44:0f:91:27:50:07:
8d:9e:ca:0c:60:cf:5d:2d:c5:a8:88:c3:1d:3a:a9:c3:53:17:
a3:20:74:38:7d:ea:49:f7:f5:6d:40:21:10:f4:ab:09:8b:3b:
16:e4:5e:8c:b8:47:b4:e9:bd:42:95:50:df:be:09:2e:96:5e:
23:eb:8d:eb:aa:3e:54:8c:49:5d:1b:04:6e:9b:c2:15:c7:d8:
4c:1e:7d:e9:7c:3c:0e:95:5b:7b:cd:4d:dd:54:c7:94:14:0e:
ca:1b:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:45 2025 by rpki-client