Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/BvVZu5HIrSvD9-p9zBhULwhArGQ.roa
File: BvVZu5HIrSvD9-p9zBhULwhArGQ.roa (raw, json)
Hash identifier: 5CnYvK0ZjmzZ2PdurnEFvJZHvm9eY0JNDQiglI6vy8c=
Subject key identifier: 06:F5:59:BB:91:C8:AD:2B:C3:F7:EA:7D:CC:18:54:2F:08:40:AC:64
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018B9486ACCF7356CE0096B5DFB019F73749
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/BvVZu5HIrSvD9-p9zBhULwhArGQ.roa
Signing time: Fri 03 Nov 2023 09:32:15 +0000
ROA not before: Fri 03 Nov 2023 09:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 37.16.78.0/24 maxlen: 24
194.126.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:86:ac:cf:73:56:ce:00:96:b5:df:b0:19:f7:37:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Nov 3 09:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f559bb91c8ad2bc3f7ea7dcc18542f0840ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:a2:6f:db:cf:5f:a6:50:ea:44:a6:bc:42:
99:69:e8:14:62:2b:61:41:c8:51:8a:92:69:6d:28:
61:ca:70:28:0a:2b:1a:8d:3d:70:76:47:42:4a:b7:
76:68:04:b0:54:08:64:5e:ee:e6:8a:30:c1:68:48:
cc:07:c2:30:35:e8:0d:56:9b:fa:e1:ce:f4:ba:59:
67:86:5b:22:04:9c:38:6c:a8:8d:da:64:20:51:ec:
ee:23:27:1e:12:89:49:f3:a9:16:27:46:22:57:84:
16:6c:9e:c2:af:7c:fe:a0:00:f5:f7:f4:91:2c:07:
1f:83:56:ce:56:3d:dd:4e:3e:04:88:ee:17:56:ab:
18:9c:c5:e4:40:bf:7f:4a:96:f6:3d:4f:49:80:17:
43:1d:e0:d5:00:c1:e5:a0:74:ca:27:f8:cb:7d:86:
07:cd:ef:32:ed:84:b3:fe:e4:d1:44:b0:24:51:e6:
c0:b0:f9:48:ae:b3:27:26:ca:c3:cf:f4:a1:1e:0d:
f8:d2:d1:12:7a:07:56:32:f1:d5:46:a0:79:cc:ef:
b9:ca:b7:59:c3:f4:84:cd:13:bc:4f:ab:1c:b1:18:
1b:4e:f1:7d:ef:31:44:1e:54:0e:3a:a0:a2:5d:7a:
86:be:ad:8a:aa:42:e6:4d:3d:f9:e9:2b:89:d3:5d:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:59:BB:91:C8:AD:2B:C3:F7:EA:7D:CC:18:54:2F:08:40:AC:64
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/BvVZu5HIrSvD9-p9zBhULwhArGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.78.0/24
194.126.178.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ec:89:cb:60:86:e0:1a:01:a9:c1:65:f9:e1:c4:84:0a:3e:
32:60:46:0b:02:35:c7:83:e1:93:63:29:9c:83:0c:47:65:36:
c8:a7:9c:7b:63:85:b5:d7:ec:88:72:b8:93:0a:5b:eb:8f:28:
e9:fb:71:e5:d8:5e:10:37:71:c9:94:40:ec:ce:17:2e:50:ac:
db:75:89:17:09:b8:80:a8:e2:31:54:d8:e8:c2:24:70:30:84:
cf:5c:4a:89:0f:83:cf:c8:64:b3:5e:75:76:40:c2:c3:90:1d:
37:50:39:67:d7:0c:32:f2:b2:30:12:0c:46:8a:71:bc:9a:44:
5e:2e:49:5f:f1:02:d1:37:ba:c7:34:12:ca:78:d4:99:e1:88:
9e:ba:e8:d7:20:75:55:05:45:55:dc:01:8e:5e:db:aa:73:3e:
af:0c:02:81:af:31:92:81:33:ff:41:38:d4:4e:ad:d5:fc:2f:
d5:51:45:a6:d0:df:5d:2d:5a:85:ed:76:8e:88:7a:86:56:e4:
43:93:0f:be:6c:8d:42:dd:43:98:a8:cb:a7:df:bd:f9:e7:1c:
73:c3:0e:bd:ca:77:08:7a:06:cf:0a:5c:14:a9:21:7b:71:c6:
bd:28:ca:c5:94:eb:a2:ef:e7:70:94:55:2f:ac:cc:4c:5e:4e:
d5:70:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:40 2025 by rpki-client