Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BZ_jCR87Q5v1jeFm9GkY2zD9hUQ.roa
File: BZ_jCR87Q5v1jeFm9GkY2zD9hUQ.roa (raw, json)
Hash identifier: VnFOVkPxOJ7nWXTj/75vRvJYgcQ7PRgKas1hW16A+7I=
Subject key identifier: 05:9F:E3:09:1F:3B:43:9B:F5:8D:E1:66:F4:69:18:DB:30:FD:85:44
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0181CF09B4E521A7109203838108E9307D03
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BZ_jCR87Q5v1jeFm9GkY2zD9hUQ.roa
Signing time: Tue 05 Jul 2022 15:45:28 +0000
ROA not before: Tue 05 Jul 2022 15:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.228.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.214.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:09:b4:e5:21:a7:10:92:03:83:81:08:e9:30:7d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jul 5 15:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=059fe3091f3b439bf58de166f46918db30fd8544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bd:6f:44:c6:e0:93:26:61:96:2a:64:a1:8e:
50:6f:e4:97:e1:e9:56:85:67:ed:55:d6:69:10:89:
13:96:d7:b3:40:61:19:58:69:a8:94:e8:83:49:93:
3a:df:27:5d:50:f2:63:87:53:c4:02:fe:ec:ef:dc:
44:fe:b2:cc:cc:36:7d:6f:ed:6f:f7:0c:df:16:e5:
e8:47:a8:44:2d:b0:58:fb:e9:56:53:a5:fa:2f:f4:
9b:8f:be:80:b7:99:40:e6:ba:10:54:91:f0:62:db:
fa:72:11:b2:29:7b:d9:f0:52:86:cd:22:65:2d:0c:
93:8f:f7:52:0a:65:e2:d1:b5:dc:a2:38:2d:a6:dc:
a6:58:a4:01:d7:3e:28:69:e7:1e:91:fe:df:65:47:
f6:b0:73:b4:37:64:20:98:3a:69:38:74:74:d8:d5:
e5:4a:fc:fc:4b:e4:03:2e:95:48:1b:dc:1b:f4:b2:
e7:5a:99:37:69:59:b2:f4:4d:b0:c2:60:8d:26:3e:
94:d2:5c:6a:a2:4f:7b:dc:00:3a:d5:31:70:24:e5:
43:8a:0b:5e:08:b5:bc:1c:08:b5:a8:74:0f:03:80:
d8:3e:0d:97:61:e6:15:85:f6:ac:68:f7:1a:89:b6:
6d:7b:f2:21:3a:f1:e3:bc:b5:93:b1:af:a2:b8:1f:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:E3:09:1F:3B:43:9B:F5:8D:E1:66:F4:69:18:DB:30:FD:85:44
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BZ_jCR87Q5v1jeFm9GkY2zD9hUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
45.95.214.0/24
85.209.228.0/24
85.209.230.0/24
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ea:25:e4:03:b6:9c:30:0f:ef:cb:c2:3b:03:d3:f2:fd:63:
70:68:52:df:d2:32:83:74:3f:bb:38:00:66:60:62:3c:a4:4e:
ae:b7:13:7e:ef:e7:fe:8d:c8:21:6d:a6:e0:77:2c:c9:33:4a:
00:91:88:50:89:01:00:79:92:62:11:99:b2:45:98:1a:d3:f0:
80:1a:b1:9f:67:5d:8a:26:2a:66:2b:c6:4c:5d:60:9a:4b:01:
20:fa:14:20:f4:ea:20:36:e4:60:50:2b:43:4a:dd:02:09:16:
84:36:c5:77:9a:1c:32:d6:7a:39:07:e2:d2:34:1f:71:71:a7:
c6:6c:dd:ff:00:dc:e3:a9:45:d3:08:ef:cb:21:5c:53:2f:f6:
f9:97:f2:e1:7d:3e:9b:cb:be:3a:61:8a:2c:98:4b:4d:88:1b:
b2:a9:7f:7e:51:30:c4:27:2f:31:53:92:5b:c5:0a:b9:54:4d:
40:c6:a8:67:f2:60:3d:79:91:18:80:42:99:9d:a4:c1:fb:ee:
97:5e:19:89:f8:1d:40:a9:05:2d:b2:c5:ea:29:05:56:00:63:
f1:a2:33:57:32:ea:ac:dd:14:92:bf:df:5b:92:ba:5f:4c:38:
33:2d:e6:cf:06:89:01:50:d4:97:07:87:2b:87:83:e5:f7:d8:
f7:e0:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:19 2025 by rpki-client