Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BejABneJ3ikPg8c1lIMPi7RYw_0.roa
File: BejABneJ3ikPg8c1lIMPi7RYw_0.roa (raw, json)
Hash identifier: WgqZlC064ebA8qaXgAEL/tn0xBpORl4Z40fi5ZbEs/c=
Subject key identifier: 05:E8:C0:06:77:89:DE:29:0F:83:C7:35:94:83:0F:8B:B4:58:C3:FD
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0184E9CAE9E563D565ED1FC7ADF298CD5F1B
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BejABneJ3ikPg8c1lIMPi7RYw_0.roa
Signing time: Tue 06 Dec 2022 23:35:00 +0000
ROA not before: Tue 06 Dec 2022 23:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.209.229.0/24 maxlen: 24
85.209.230.0/24 maxlen: 24
45.95.215.0/24 maxlen: 24
5.181.187.0/24 maxlen: 24
2.59.60.0/24 maxlen: 24
194.31.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e9:ca:e9:e5:63:d5:65:ed:1f:c7:ad:f2:98:cd:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 6 23:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e8c0067789de290f83c73594830f8bb458c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:46:3e:89:c4:fb:41:d3:c4:f1:d9:06:9c:
29:1d:fa:2d:32:6b:18:0e:ca:25:68:3b:1d:43:76:
6b:6d:aa:20:56:11:cd:73:5a:01:0f:9d:fc:54:b3:
64:a1:31:01:f2:d1:90:56:5f:75:d0:11:0e:a5:9d:
65:79:57:74:50:8e:f6:7e:85:a7:82:c1:e7:d7:2f:
0f:1f:b6:4d:01:d2:55:11:20:d0:4b:19:5a:cd:70:
ea:b7:10:11:30:89:d8:86:2e:aa:db:38:08:e3:9a:
22:72:0f:76:19:c9:41:cb:27:40:40:7a:e8:48:3c:
20:d0:2a:19:9a:9c:d8:66:fa:4a:40:42:64:e2:eb:
dd:c2:bd:d8:8d:a1:76:c0:59:a8:f0:1e:b2:d6:18:
68:01:2b:2a:a7:c5:6e:6d:8b:4f:2e:3d:9c:a8:8e:
27:27:44:5b:76:ef:d6:9d:0c:1a:23:55:26:0b:06:
e6:29:95:4f:b2:0a:50:85:4f:25:ee:85:37:f2:61:
2f:89:33:f0:7e:f0:8e:82:d5:a2:ad:90:21:14:0d:
d1:bd:cc:19:28:fc:3f:f3:96:7b:d1:c3:08:da:03:
32:1d:fc:b1:62:79:ba:fa:a3:78:20:66:64:04:c3:
41:70:d5:f8:95:bf:4c:05:b4:49:00:ad:37:bd:bd:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:C0:06:77:89:DE:29:0F:83:C7:35:94:83:0F:8B:B4:58:C3:FD
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/BejABneJ3ikPg8c1lIMPi7RYw_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.60.0/24
5.181.187.0/24
45.95.215.0/24
85.209.229.0-85.209.230.255
194.31.196.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:16:87:42:14:cd:9b:be:f5:70:59:9a:dc:18:64:4c:f4:08:
75:88:86:86:67:67:e3:a8:1d:6e:33:72:f8:cb:f3:5f:80:e6:
6f:1c:15:db:8c:b8:7a:cc:a5:8c:58:bf:df:49:13:16:83:13:
92:73:7b:bd:d4:fa:4c:52:c7:8b:74:9a:63:2f:fd:7e:e8:cc:
82:1c:28:fb:e0:7d:28:ce:61:76:5f:7a:4b:59:5a:c0:57:c5:
e9:52:b2:0b:fc:cd:d8:96:09:a0:9d:2a:f8:d4:98:c3:01:53:
fc:a9:bf:10:78:dd:a5:2c:bb:7f:dd:79:8b:49:99:13:a8:8d:
28:d1:09:d3:df:b2:73:ac:b6:b0:cb:1b:b6:ea:c1:5e:5b:ea:
c2:02:59:83:f1:6c:0b:59:de:a7:e7:a6:2b:21:fa:82:23:56:
99:04:53:6a:c7:58:16:b6:9f:4d:ae:b7:ad:78:93:a1:f2:ac:
f4:c9:62:a1:a7:de:ed:16:fc:3b:d7:07:0a:00:80:a9:86:d7:
ef:f4:04:0d:cc:6d:6e:28:7c:b3:de:14:3d:84:11:0a:ec:76:
c3:16:a8:76:8e:e5:33:dd:6f:87:29:60:74:f7:09:6e:68:32:
d0:1f:93:82:d7:7d:21:1a:f4:dc:c1:97:58:39:10:95:7d:8b:
2e:25:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:48 2025 by rpki-client