Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b9d3ca-2591-45bc-8513-2603f1a2956a/1/BBpFht-_oh3Tl81_QX6IZXnKHOY.roa
File: BBpFht-_oh3Tl81_QX6IZXnKHOY.roa (raw, json)
Hash identifier: 85JrwMBMwOAuJqBojWYi3Gyzc3lFwbqEa8WyTDmL+/s=
Subject key identifier: 04:1A:45:86:DF:BF:A2:1D:D3:97:CD:7F:41:7E:88:65:79:CA:1C:E6
Certificate issuer: /CN=262d6e3cbf30141750aa84994f73bad87d3c3338
Certificate serial: 06E0BF9D
Authority key identifier: 26:2D:6E:3C:BF:30:14:17:50:AA:84:99:4F:73:BA:D8:7D:3C:33:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji1uPL8wFBdQqoSZT3O62H08Mzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b9d3ca-2591-45bc-8513-2603f1a2956a/1/BBpFht-_oh3Tl81_QX6IZXnKHOY.roa
Signing time: Sat 01 Jan 2022 03:51:16 +0000
ROA not before: Sat 01 Jan 2022 03:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210033
IP address blocks: 195.114.116.0/22 maxlen: 22
213.232.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115392413 (0x6e0bf9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262d6e3cbf30141750aa84994f73bad87d3c3338
Validity
Not Before: Jan 1 03:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041a4586dfbfa21dd397cd7f417e886579ca1ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:e2:bf:e3:60:51:4f:76:c3:4e:ec:fc:8f:
d1:5f:38:26:47:f9:f2:41:9b:e4:b1:e8:af:ea:cc:
2f:f7:d5:ff:eb:24:92:75:37:ca:ba:54:ab:76:be:
f4:5d:38:e1:f3:09:39:02:da:a6:d8:b2:54:cd:98:
0d:6e:f3:31:3d:d5:47:f2:0d:36:9a:87:fe:43:60:
64:b3:cb:ad:41:91:0b:f8:67:4b:cb:9e:af:c7:1b:
9a:6a:20:6b:c3:bc:e2:93:63:eb:fc:81:3b:27:43:
e8:5b:22:97:ff:0d:81:ac:e0:35:ee:34:87:bf:66:
07:27:3b:7f:ef:82:07:cf:34:26:96:39:2e:28:5c:
ad:f4:84:14:b2:38:70:d8:e5:b2:49:28:a1:b2:9c:
31:db:3d:3c:14:f4:91:62:84:e1:16:67:a8:fc:cb:
3a:d2:50:5d:4d:59:4c:e4:ab:1d:ea:31:04:68:dc:
b6:8c:52:23:a9:fd:68:36:6a:a0:fc:0b:81:fc:e0:
dd:0b:5c:5d:f5:ef:b2:e0:9e:3a:c8:74:17:a2:cc:
9d:cb:0f:35:14:aa:f8:80:a9:cc:f1:07:a2:e7:bf:
a3:c9:85:e5:35:6a:b1:c4:2d:dc:96:45:cd:f2:4b:
6e:fe:80:cf:1a:c4:89:be:46:95:0b:6d:0d:6f:d4:
89:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:45:86:DF:BF:A2:1D:D3:97:CD:7F:41:7E:88:65:79:CA:1C:E6
X509v3 Authority Key Identifier:
keyid:26:2D:6E:3C:BF:30:14:17:50:AA:84:99:4F:73:BA:D8:7D:3C:33:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji1uPL8wFBdQqoSZT3O62H08Mzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b9d3ca-2591-45bc-8513-2603f1a2956a/1/BBpFht-_oh3Tl81_QX6IZXnKHOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b9d3ca-2591-45bc-8513-2603f1a2956a/1/Ji1uPL8wFBdQqoSZT3O62H08Mzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.116.0/22
213.232.194.0/23
Signature Algorithm: sha256WithRSAEncryption
98:18:fa:ab:ee:ed:9d:36:c9:17:03:81:1d:fc:0a:0f:d0:59:
e0:e3:5a:eb:05:cf:f8:62:24:fc:aa:a1:88:a1:2e:a4:fb:91:
43:48:9c:2d:f9:3a:74:c0:5c:d9:29:a4:a8:b2:26:03:52:f3:
0f:aa:31:ed:74:ba:97:ac:1b:66:9b:f5:2f:b4:83:f3:ad:a0:
fa:c5:60:cd:99:38:a0:56:0d:49:7f:f5:7a:3c:18:7b:f8:65:
d5:87:9e:59:5a:8b:80:14:5d:21:4d:d6:70:8e:69:d6:2f:21:
02:f1:a8:d2:8a:f2:84:be:ba:2d:05:43:d1:bf:6e:e1:5a:84:
92:96:31:2c:50:76:e1:73:e7:fa:ad:ac:b6:be:8e:46:d5:f4:
9f:ca:16:f8:82:c9:ef:ff:fc:8b:f9:9e:03:2c:af:c8:bc:bc:
71:8f:b9:20:78:6a:ca:38:fa:81:02:a4:0f:89:2b:fd:3e:5d:
c6:e6:f8:76:6e:cb:e4:53:aa:9f:97:8a:06:03:61:0b:41:88:
e4:a4:04:08:2b:9c:10:a3:5d:62:40:2e:89:32:46:db:78:04:
eb:2c:81:59:05:7f:d1:14:d9:87:23:4a:77:1d:9e:fb:03:ff:
08:54:d6:e7:51:53:2e:a3:cb:85:96:a3:a6:84:25:20:59:28:
c3:ef:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:37 2025 by rpki-client