Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/BZzLntztX3bZd6QBxfr7Xkxyw90.roa
File: BZzLntztX3bZd6QBxfr7Xkxyw90.roa (raw, json)
Hash identifier: skDXiibpwvfA6ChZAAzyBfZ3pwAKiW8cXitrztYlOnI=
Subject key identifier: 05:9C:CB:9E:DC:ED:5F:76:D9:77:A4:01:C5:FA:FB:5E:4C:72:C3:DD
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 01856F14BD77B23A5C31AA1BEB55FEF8A851
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/BZzLntztX3bZd6QBxfr7Xkxyw90.roa
Signing time: Sun 01 Jan 2023 20:45:08 +0000
ROA not before: Sun 01 Jan 2023 20:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196745
IP address blocks: 37.143.138.0/24 maxlen: 24
37.143.139.0/24 maxlen: 24
37.143.136.0/24 maxlen: 24
37.143.136.0/21 maxlen: 24
37.143.140.0/24 maxlen: 24
37.143.141.0/24 maxlen: 24
37.143.143.0/24 maxlen: 24
37.143.142.0/24 maxlen: 24
2a00:b340:33::/48 maxlen: 48
2a00:b340:34::/48 maxlen: 48
2a00:b340:32::/48 maxlen: 48
2a00:b340:31::/48 maxlen: 48
2a00:b340:35::/48 maxlen: 48
2a00:b340:30::/48 maxlen: 48
2a00:b340:20::/48 maxlen: 48
2a00:b340:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:bd:77:b2:3a:5c:31:aa:1b:eb:55:fe:f8:a8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Jan 1 20:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=059ccb9edced5f76d977a401c5fafb5e4c72c3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:0a:cd:8c:4a:da:69:b2:f8:17:7f:ed:36:
13:da:56:bc:60:6c:5e:ec:1c:fb:5b:89:eb:38:6f:
af:7e:76:98:46:bd:19:1c:b2:ed:28:fb:8b:77:f0:
84:88:33:e7:4f:db:65:20:bd:3a:16:24:17:1c:36:
43:9a:2c:4c:fe:04:bc:9c:4f:5a:67:40:29:ed:9b:
5f:bd:83:17:20:e8:ed:e3:35:cf:dc:7d:1f:33:bf:
58:ca:d7:e7:f1:a4:16:e0:56:f6:f6:da:c2:57:9e:
4a:64:83:ee:f3:31:71:60:19:6a:ed:e9:f6:05:03:
f5:0d:0e:bd:d8:03:4b:7c:59:5b:85:8b:cf:45:7f:
1b:6e:01:33:51:44:7c:ae:ed:0a:0d:b2:5a:a1:24:
c9:6b:79:8a:4d:75:87:f4:53:61:3c:87:c9:db:d1:
c2:0d:8b:8c:4c:39:9a:c0:ee:5b:25:f0:c7:b0:fd:
30:74:03:e3:15:f1:ba:9d:b5:f0:aa:bc:05:c7:44:
70:23:50:bd:cf:f5:cb:73:ad:d3:05:20:a1:bb:44:
0f:01:4b:e1:89:34:0a:3e:d4:72:15:b2:38:44:98:
53:4f:c2:91:1d:7c:f3:ad:08:b5:e4:d1:28:33:64:
61:75:24:cc:07:46:4e:21:09:6f:eb:c1:90:5c:79:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:CB:9E:DC:ED:5F:76:D9:77:A4:01:C5:FA:FB:5E:4C:72:C3:DD
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/BZzLntztX3bZd6QBxfr7Xkxyw90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.136.0/21
IPv6:
2a00:b340:10::/48
2a00:b340:20::/48
2a00:b340:30::-2a00:b340:35:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:33:55:c5:ac:9e:a1:6d:69:7f:74:0b:b7:a8:3f:82:92:ab:
29:49:1b:50:3a:2a:33:79:ff:de:cf:e3:59:14:d9:f6:69:9e:
ff:68:8e:2a:de:64:90:78:ba:93:8f:42:02:70:03:7a:33:34:
b7:41:8d:77:a2:9b:1e:05:f5:04:92:62:ea:8a:8b:9c:b0:cb:
ab:1c:d4:58:8e:b1:cc:01:ca:9f:27:49:e2:f8:5d:c2:2e:60:
fb:f0:ad:59:14:46:24:02:cd:5e:70:b5:e3:b9:a4:3a:8a:f9:
2d:62:53:2a:81:2a:72:77:34:fc:b9:3c:eb:6d:17:11:26:e4:
33:27:24:81:67:8c:d1:1b:ba:74:18:42:bd:82:73:8d:7c:58:
01:32:1e:39:32:6c:a6:e4:3b:5e:3d:3d:dd:61:5c:6b:a5:78:
e8:f1:ff:af:5f:d4:a8:01:06:7a:b4:cb:55:bb:31:4d:4f:4a:
1b:87:9a:e9:80:eb:a5:6b:a0:30:dd:d6:3a:5c:57:db:7e:71:
2a:82:67:24:65:f3:71:9d:cd:58:7d:e1:9d:30:3c:da:e3:6b:
2f:e1:f3:91:d5:dd:e4:5d:73:d0:b6:43:e1:56:5f:fb:8a:ea:
f9:20:dd:4d:37:88:4d:46:6c:cc:80:44:27:8b:05:ea:c9:87:
3b:9b:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:06 2025 by rpki-client