Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZL5poHaw9itzH2JBj9nHGTuwtw.roa
File: BZL5poHaw9itzH2JBj9nHGTuwtw.roa (raw, json)
Hash identifier: vzy96LZ4j+V2mEH/tE1sNm1htAyX3OUUN83rxjI3h7Y=
Subject key identifier: 05:92:F9:A6:81:DA:C3:D8:AD:CC:7D:89:06:3F:67:1C:64:EE:C2:DC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAF388678E172EDDBDF04BE41D8C35
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZL5poHaw9itzH2JBj9nHGTuwtw.roa
Signing time: Sun 01 Jan 2023 10:05:17 +0000
ROA not before: Sun 01 Jan 2023 10:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50613
IP address blocks: 192.71.218.0/24 maxlen: 24
192.36.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f3:88:67:8e:17:2e:dd:bd:f0:4b:e4:1d:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0592f9a681dac3d8adcc7d89063f671c64eec2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:74:04:67:5e:b3:c1:da:34:d1:ed:65:45:
01:e9:cc:bb:29:c5:1a:37:41:f2:66:78:0a:bb:1e:
1c:45:b8:4d:89:a3:c9:69:75:76:45:8b:01:cf:76:
3d:5e:16:56:bc:98:ab:9a:55:59:e3:af:96:b1:e5:
ab:8c:c5:62:93:26:f0:1e:f0:3a:ef:98:2e:75:86:
c2:81:84:77:b4:bd:3a:51:06:e6:ca:2d:9f:d6:24:
d7:5f:d2:ab:ed:97:f8:0c:38:ec:e1:db:f9:74:1e:
d0:a4:6f:0e:7f:fc:07:a0:c7:df:ac:25:f1:bd:c4:
1d:9f:e3:8a:bd:3c:0b:b9:99:77:3c:b2:ec:6e:46:
8f:4e:68:6b:4f:94:37:19:15:26:62:37:88:34:2c:
55:6b:11:91:b2:87:c8:19:27:aa:89:cf:e1:fc:c0:
78:75:be:88:21:bc:cd:b1:a6:d8:23:2b:ae:18:ca:
34:74:79:69:7f:bb:7c:3d:a1:16:b4:a5:61:a0:8a:
38:d2:41:24:e5:53:43:be:18:60:30:40:1f:f6:26:
5a:28:e9:9d:c6:22:58:ab:fe:33:ac:c9:55:e5:94:
d5:6a:1b:c9:46:7d:74:79:86:b8:ce:a7:97:b5:14:
ad:4c:64:cf:1c:0b:07:7d:33:68:3f:7f:81:33:9d:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:F9:A6:81:DA:C3:D8:AD:CC:7D:89:06:3F:67:1C:64:EE:C2:DC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BZL5poHaw9itzH2JBj9nHGTuwtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.57.0/24
192.71.218.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:7a:af:ea:4a:6d:a6:c7:1f:19:82:ab:88:6e:5c:2d:24:
53:73:a9:53:c7:15:c6:c7:05:ce:e8:cd:cf:e7:7c:96:20:b0:
1e:11:f2:f6:62:55:d5:a1:b6:fb:8d:10:96:22:cb:25:95:09:
ce:41:9a:30:c9:ef:95:1c:9b:2b:88:f2:a1:9b:1a:fd:58:73:
67:e7:fc:d2:30:fb:e8:cd:75:f8:fc:a5:30:fa:90:85:60:e5:
1b:80:35:d1:b4:c8:92:d8:16:fe:04:73:ef:60:78:9d:4d:75:
b3:7f:5d:d5:c5:a7:d5:78:df:22:1e:8e:b5:c3:67:49:6d:6a:
d3:11:bd:c1:71:80:dd:48:fa:40:81:57:ca:3e:bf:b9:99:3c:
36:14:55:07:f0:df:ad:71:97:68:25:2e:01:90:9c:08:fd:08:
a2:63:a7:14:a4:5e:96:67:f8:58:c9:29:0b:c4:31:fa:9b:5e:
c3:ac:85:3a:a2:29:33:aa:6a:1a:68:4f:76:ec:0d:f0:8d:17:
f2:18:5c:80:cc:fc:e7:b7:7e:4a:8b:ca:bf:29:4e:e3:7d:27:
ca:7f:85:c2:bd:58:e7:7f:4e:45:6c:93:01:1d:8f:b4:19:1f:
c7:c2:a1:31:cf:76:aa:84:7d:46:85:1c:61:de:2b:93:ce:5c:
01:db:ac:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:17 2025 by rpki-client