Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BWA0pWY8Bjx4nzrIiruGv31ZlqM.roa
File: BWA0pWY8Bjx4nzrIiruGv31ZlqM.roa (raw, json)
Hash identifier: y1UrHu2DdvrYoKox655jMJnPRp+olTOAjm4yCMYYqZw=
Subject key identifier: 05:60:34:A5:66:3C:06:3C:78:9F:3A:C8:8A:BB:86:BF:7D:59:96:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F9F3A8A6CCD85C7219E925D5DF56CCB5F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BWA0pWY8Bjx4nzrIiruGv31ZlqM.roa
Signing time: Wed 22 May 2024 07:36:04 +0000
ROA not before: Wed 22 May 2024 07:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34652
IP address blocks: 193.183.70.0/24 maxlen: 24
193.183.75.0/24 maxlen: 24
2a01:280:328::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:3a:8a:6c:cd:85:c7:21:9e:92:5d:5d:f5:6c:cb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 22 07:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=056034a5663c063c789f3ac88abb86bf7d5996a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:0a:32:6c:ea:d2:5e:fc:13:34:1e:5d:b3:
c3:a1:a5:62:c6:42:6a:63:43:ab:8c:6a:42:94:c9:
e2:06:9a:d0:74:ed:63:46:44:d3:6a:05:ce:05:c7:
7b:69:d1:de:8e:6e:b7:a2:39:5b:bd:76:7b:f9:d2:
a8:7f:e5:62:88:15:2f:07:1c:4a:8c:ee:f6:25:29:
35:86:07:43:35:5f:cd:83:48:0b:25:9a:8a:15:11:
4f:2a:70:dd:17:7d:0c:0c:30:7e:83:23:da:f8:93:
53:e1:4c:45:0e:24:0f:1a:5e:d6:d7:bb:58:ef:76:
fa:29:1b:d6:7f:14:87:b5:44:2b:d4:79:69:88:1f:
f5:ac:af:57:18:24:17:4c:fa:b1:e0:95:b6:e8:93:
80:3c:bf:4a:1e:3d:15:60:14:f8:d2:8e:a8:88:d8:
93:9f:09:e4:f3:c1:b8:23:a7:9a:4f:9c:e8:2c:26:
23:2d:a7:c3:4d:a8:d8:ec:9e:26:de:f0:99:1c:13:
17:97:47:77:a9:ff:9c:03:cc:1d:9a:ef:2c:7f:21:
b3:d9:73:f3:6a:ff:05:af:5a:a4:ad:53:d5:ff:75:
11:b5:2c:55:11:f4:ed:5b:e4:00:e0:bc:8a:84:7b:
68:12:56:de:de:47:90:44:1d:af:ab:9c:ce:7f:a4:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:34:A5:66:3C:06:3C:78:9F:3A:C8:8A:BB:86:BF:7D:59:96:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BWA0pWY8Bjx4nzrIiruGv31ZlqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.70.0/24
193.183.75.0/24
IPv6:
2a01:280:328::/48
Signature Algorithm: sha256WithRSAEncryption
12:bb:79:9e:53:5b:c2:ba:0a:53:af:d9:a4:2f:44:48:7f:8c:
98:24:6d:9e:c5:d9:68:ff:26:3d:21:2f:c0:67:6a:ef:d5:6c:
bd:2e:a5:fb:00:4a:bd:c7:75:ca:54:f9:62:17:7a:5b:c0:25:
57:4d:be:bb:0f:a5:40:4c:ba:41:4e:38:2a:1a:da:af:b1:4a:
f8:57:a3:0e:44:e2:4a:83:d8:e4:40:03:4c:15:34:ef:2d:a7:
8c:2a:47:67:91:cd:18:7f:62:dc:44:62:d8:72:55:01:2f:08:
2b:c7:e0:33:d1:73:d0:0a:20:94:19:59:92:70:84:58:7a:b3:
af:2e:9d:68:59:c3:7c:c4:74:6a:8f:da:9f:29:0b:42:2d:f8:
0b:98:1a:55:f0:bf:45:18:af:a0:ea:7b:b2:09:80:b6:bf:d0:
01:8b:eb:a3:cd:da:fd:a8:b3:03:33:85:1b:db:8b:0c:20:d3:
9a:5d:12:19:a0:e4:c6:33:f0:47:41:fc:cf:80:04:12:87:21:
e3:1a:f5:9d:68:26:be:f0:cb:6d:ff:8f:de:40:84:9b:e1:8b:
ac:f4:30:86:6c:c3:e3:79:f1:a4:03:3f:ca:a4:05:98:7c:71:
3e:f9:3e:79:09:3b:e3:06:5c:1c:b7:a2:28:68:64:3c:2e:83:
d7:63:7a:cd
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY+fOopszYXHIZ6SXV31bMtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwNTIyMDczNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTYwMzRhNTY2M2MwNjNjNzg5ZjNhYzg4YWJiODZiZjdkNTk5NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OYKMmzq0l78EzQeXbPDoaVixkJq
Y0OrjGpClMniBprQdO1jRkTTagXOBcd7adHejm63ojlbvXZ7+dKof+ViiBUvBxxK
jO72JSk1hgdDNV/Ng0gLJZqKFRFPKnDdF30MDDB+gyPa+JNT4UxFDiQPGl7W17tY
73b6KRvWfxSHtUQr1HlpiB/1rK9XGCQXTPqx4JW26JOAPL9KHj0VYBT40o6oiNiT
nwnk88G4I6eaT5zoLCYjLafDTajY7J4m3vCZHBMXl0d3qf+cA8wdmu8sfyGz2XPz
av8Fr1qkrVPV/3URtSxVEfTtW+QA4LyKhHtoElbe3keQRB2vq5zOf6TbXQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAVgNKVmPAY8eJ86yIq7hr99WZajMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQldBMHBXWThCang0bnpySWlydUd2MzFabHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwbdGAwQA
wbdLMA8EAgACMAkDBwAqAQKAAygwDQYJKoZIhvcNAQELBQADggEBABK7eZ5TW8K6
ClOv2aQvREh/jJgkbZ7F2Wj/Jj0hL8Bnau/VbL0upfsASr3HdcpU+WIXelvAJVdN
vrsPpUBMukFOOCoa2q+xSvhXow5E4kqD2ORAA0wVNO8tp4wqR2eRzRh/YtxEYthy
VQEvCCvH4DPRc9AKIJQZWZJwhFh6s68unWhZw3zEdGqP2p8pC0It+AuYGlXwv0UY
r6Dqe7IJgLa/0AGL66PN2v2oswMzhRvbiwwg05pdEhmg5MYz8EdB/M+ABBKHIeMa
9Z1oJr7wy23/j95AhJvhi6z0MIZsw+N58aQDP8qkBZh8cT75PnkJO+MGXBy3oiho
ZDwug9djes0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:36 2025 by rpki-client