Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bzu60UYZgdvsGySjdxG93c3YY_s.roa
File: Bzu60UYZgdvsGySjdxG93c3YY_s.roa (raw, json)
Hash identifier: zSnsSsp5gRzDz/DIyieDq4uB5qJA5X3ccGBBBDATEHk=
Subject key identifier: 07:3B:BA:D1:46:19:81:DB:EC:1B:24:A3:77:11:BD:DD:CD:D8:63:FB
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0188D8477F49C5DE140EA3C14DEF0FD89EA5
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bzu60UYZgdvsGySjdxG93c3YY_s.roa
Signing time: Tue 20 Jun 2023 10:09:04 +0000
ROA not before: Tue 20 Jun 2023 10:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396881
IP address blocks: 185.255.113.0/24 maxlen: 24
185.255.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:47:7f:49:c5:de:14:0e:a3:c1:4d:ef:0f:d8:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 20 10:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=073bbad1461981dbec1b24a37711bdddcdd863fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:22:83:53:8a:56:a6:76:8c:12:ed:44:47:
c6:60:96:1e:9f:8f:1f:c2:e1:84:56:a5:1a:09:65:
bf:10:6c:52:ab:d1:97:a8:12:a7:af:ba:55:7b:e4:
9c:ba:2d:f5:f3:5d:4b:0d:81:8a:88:28:64:72:53:
4f:64:dd:dd:50:35:26:44:7c:1a:74:b4:50:b4:50:
f9:58:97:09:9a:20:c3:34:5c:ca:e6:b3:ca:55:5f:
f2:24:8e:a8:7f:a0:48:b0:3b:46:4f:17:cf:05:93:
ec:2d:e6:e1:8a:f9:c5:04:f3:7b:ae:a7:e2:a6:cd:
a3:27:bb:d4:9f:fa:08:be:25:d8:df:fb:4b:f6:ce:
75:05:da:07:cc:d7:e5:5a:5a:97:89:18:df:88:70:
cd:82:c5:55:cb:dd:be:71:85:70:f7:d5:02:41:51:
10:db:7b:b5:ee:e9:5f:95:05:4b:50:de:24:ec:52:
c9:37:32:5e:9e:b5:8a:c7:40:91:4d:ef:56:32:cb:
7f:aa:b1:1f:1d:bb:8b:6b:51:ce:36:62:b0:f1:c9:
1d:d0:89:99:a8:99:30:eb:dc:21:74:91:73:43:ca:
29:e2:37:04:45:38:b0:d1:40:aa:24:d5:04:0b:d6:
b3:c8:fd:16:49:f0:68:1c:a2:4d:8a:c9:4b:6b:3d:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:BA:D1:46:19:81:DB:EC:1B:24:A3:77:11:BD:DD:CD:D8:63:FB
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bzu60UYZgdvsGySjdxG93c3YY_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.113.0-185.255.114.255
Signature Algorithm: sha256WithRSAEncryption
73:8f:a4:16:68:42:c8:10:30:e0:a7:25:b9:86:17:64:2f:47:
36:95:43:ca:95:eb:a9:ac:34:d8:ac:ea:f0:c2:09:1f:94:7b:
12:72:79:36:7b:d4:18:76:80:b4:1f:28:20:de:19:6a:35:ab:
20:41:39:41:45:e3:0c:f9:d1:d6:09:4d:8f:5d:b9:63:e8:7e:
1e:ed:8b:c5:37:cd:fb:2e:ca:19:a3:d8:e0:59:22:be:5a:d4:
9d:fc:de:52:1c:ec:9f:5e:65:c3:44:c7:07:2a:eb:b0:2c:42:
69:5c:a0:7a:72:4f:6a:69:9e:66:05:30:c6:44:3a:89:58:50:
5c:ad:43:ad:55:12:56:02:43:15:79:c7:a1:5a:56:01:a9:ea:
73:65:6d:8b:04:08:1c:6f:cc:03:f4:7f:b7:b3:da:cd:06:b7:
60:d9:ae:93:0b:d1:98:b4:96:7e:1c:87:ad:c8:12:1f:d0:82:
84:b2:0b:4c:df:b7:c7:35:87:6d:b6:d8:ea:b5:ac:38:fd:84:
aa:a5:82:6b:94:0f:26:a2:e4:60:be:d2:e0:34:35:34:81:f6:
65:e4:f5:f7:81:44:ae:b4:19:0e:42:9e:8f:20:e2:fd:9e:5b:
4d:d3:d9:9d:1b:3a:49:03:18:e0:6c:bf:95:83:80:8c:90:67:
93:d5:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:59 2025 by rpki-client