Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/bslnxciGSGjp5x3mv5ejIjp-fOk.roa
File: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (raw, json)
Hash identifier: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=
Subject key identifier: 6E:C9:67:C5:C8:86:48:68:E9:E7:1D:E6:BF:97:A3:22:3A:7E:7C:E9
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 01942747AE0089E5FC92BA35A1907014B1FA
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/bslnxciGSGjp5x3mv5ejIjp-fOk.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204344
IP address blocks: 185.252.48.0/22 maxlen: 22
2a0c:20c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ae:00:89:e5:fc:92:ba:35:a1:90:70:14:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec967c5c8864868e9e71de6bf97a3223a7e7ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:5c:6e:67:7a:eb:02:02:f3:27:a0:64:aa:
6f:24:81:64:8d:10:97:e8:12:c9:dd:53:ec:6d:76:
84:06:2b:20:70:aa:70:35:aa:d1:a5:20:56:b1:fa:
2a:03:8c:bc:10:56:5c:47:f8:79:ba:70:95:b7:3b:
bb:fd:68:84:04:68:1d:a8:e8:70:d7:da:4b:9a:d2:
ce:aa:eb:3f:08:60:89:bc:43:6a:fb:65:ed:57:dc:
36:69:c8:b8:fe:67:94:3d:83:11:bf:33:12:ee:4e:
40:2b:92:5d:e2:ca:ff:6b:3f:e8:1e:a1:c0:31:0d:
ef:c7:9d:3f:4d:70:0b:9f:c8:10:d0:32:37:c2:7c:
17:94:56:4c:78:3b:af:2e:c2:45:e8:0d:78:a9:02:
d9:af:69:49:30:b4:7c:86:50:99:cf:08:61:72:12:
da:1b:93:e7:cf:35:aa:c3:e1:56:1b:81:d7:ab:e1:
21:5b:1b:00:26:51:4c:c1:64:ef:27:ff:76:8c:5e:
be:b5:37:f4:ad:be:95:4e:8a:53:28:ac:f1:a9:0c:
cd:35:ad:67:bb:e9:c4:2e:e1:df:13:13:77:51:4f:
76:8c:75:7f:b7:e3:45:c8:39:82:c3:23:1b:3c:b8:
25:21:d3:f0:2e:7b:b0:f7:ad:22:57:5b:1e:86:bb:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:67:C5:C8:86:48:68:E9:E7:1D:E6:BF:97:A3:22:3A:7E:7C:E9
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/bslnxciGSGjp5x3mv5ejIjp-fOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.48.0/22
IPv6:
2a0c:20c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:22:a0:89:8a:e8:55:45:d1:a7:28:93:ad:02:48:5f:a0:d5:
c8:83:2b:d3:39:ab:6a:e5:48:5e:00:2a:47:37:6a:84:2d:88:
03:d8:c9:18:02:68:bc:c7:7d:77:12:f3:27:be:24:94:96:45:
a7:67:7d:01:00:4f:9e:47:6b:30:95:df:18:b2:38:e1:81:4b:
dd:56:c9:1e:64:59:b3:21:b8:ea:31:e0:94:27:d0:cc:51:19:
44:6a:69:48:09:33:81:b9:40:04:d7:04:7a:bb:4f:fa:7f:38:
cf:19:1c:6a:aa:f3:ad:f5:97:f8:e1:8e:7f:66:7b:3c:33:76:
e6:4c:37:8b:b4:26:6c:d5:03:50:1c:e0:20:33:15:4b:de:05:
6e:7f:28:40:e8:2c:df:37:30:98:77:5a:0c:7e:b5:cc:96:56:
4b:4c:99:be:bb:64:60:67:83:bd:df:96:59:35:f2:f6:df:5c:
77:db:19:e7:28:42:5f:1c:8f:76:1b:a7:7d:fb:4d:e8:d0:3d:
eb:4e:f8:b1:cd:ef:cf:ee:00:1e:d4:46:be:3e:ac:91:2a:35:
6a:2f:9e:47:db:ab:d9:4a:ee:3e:75:91:4d:92:df:8a:3a:85:
4b:3d:b1:b9:c8:d9:f3:70:22:bb:68:da:e4:65:b6:b4:73:34:
d2:a8:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:26 2025 by rpki-client