Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/BVScilCB5AVz4BdoAZN-XzcZq3M.roa
File: BVScilCB5AVz4BdoAZN-XzcZq3M.roa (raw, json)
Hash identifier: Oi7kCEaMjqNz1/ABo7GXrFFSRxf0di49byHZnkWl/xY=
Subject key identifier: 05:54:9C:8A:50:81:E4:05:73:E0:17:68:01:93:7E:5F:37:19:AB:73
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 0194258F55A46CE7627FAB1433572FEC75A0
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/BVScilCB5AVz4BdoAZN-XzcZq3M.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198381
IP address blocks: 80.84.136.0/24 maxlen: 24
80.84.145.0/24 maxlen: 24
80.84.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:55:a4:6c:e7:62:7f:ab:14:33:57:2f:ec:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05549c8a5081e40573e0176801937e5f3719ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:ee:9a:dd:56:0c:64:53:99:db:5e:52:66:
11:f0:47:9d:53:6b:e4:4d:13:3b:0c:cd:85:13:7a:
0e:e8:60:82:49:2e:0f:28:7e:b0:42:56:8e:8d:20:
bd:04:87:47:06:79:d9:37:96:b8:88:2c:e0:9e:79:
4e:02:b2:f2:e6:13:e5:4b:8a:bd:9d:42:76:94:5d:
2d:67:9a:6b:80:47:1d:b1:b1:43:ff:dc:51:e0:54:
00:ae:8d:a1:2b:be:f1:2d:05:71:d4:2e:56:cd:44:
98:8d:6b:c9:82:84:87:b1:ed:83:e2:a4:59:19:c9:
6f:9f:5e:9e:a5:96:b4:95:7f:fe:4b:16:cd:94:7b:
a0:e3:38:6b:8a:14:9a:52:1a:9c:ed:5a:2c:c1:52:
4b:3a:2e:c9:02:d7:d7:b3:ad:3e:bc:8f:01:83:2e:
50:67:0a:42:de:3f:c4:75:b2:6e:7c:f9:a4:d2:55:
16:37:b0:ae:d1:19:2e:a6:c5:58:67:21:69:35:10:
77:d4:61:5c:aa:0b:44:3a:bf:6a:e2:87:0b:fe:82:
8e:3b:41:bf:6c:07:0d:02:b0:65:d2:88:c4:09:c9:
d2:a8:ed:d8:ba:a1:b3:91:ba:b4:66:a3:ed:ca:1b:
3a:57:bf:d0:c6:aa:79:ef:e0:00:86:db:c4:1b:e0:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:54:9C:8A:50:81:E4:05:73:E0:17:68:01:93:7E:5F:37:19:AB:73
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/BVScilCB5AVz4BdoAZN-XzcZq3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.136.0/24
80.84.145.0/24
80.84.149.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1e:8a:9e:61:94:52:ec:8e:78:57:d5:27:f5:0c:1d:44:42:
50:da:79:a7:63:ea:01:09:8d:b4:93:f9:a7:f0:cb:34:91:ad:
fd:4e:78:30:93:66:c6:7d:17:9b:d3:da:7b:90:bb:0a:20:cd:
c1:db:18:0b:ce:b8:c0:a4:73:45:2a:ff:8d:a2:49:9b:5f:ff:
e8:e2:b0:67:b1:13:1e:d8:3f:2b:c8:25:d7:65:97:97:87:d9:
d0:86:f9:ca:21:1a:6f:b6:c6:02:28:ce:7e:bf:30:b5:63:37:
36:fb:aa:9b:10:28:ee:b2:66:4d:a2:70:c0:a6:89:40:af:56:
91:bc:d7:49:9a:d5:66:2a:42:45:9c:39:e5:85:6d:a3:91:fa:
a4:b9:e6:df:1f:ea:7b:78:1a:0a:f8:68:19:45:1c:08:28:32:
49:f8:46:48:e9:51:82:76:7c:75:61:81:a6:6c:4b:bb:29:6e:
3f:5c:9b:7c:f0:d0:eb:27:d1:4b:5d:a4:32:e7:e8:44:47:c0:
2c:d8:d4:96:b1:5b:53:0f:28:40:8b:78:bd:e4:16:37:4e:39:
9c:b3:28:1e:07:3a:4e:1a:3e:90:95:b9:77:2f:72:08:2e:dc:
e0:89:31:b0:e4:cc:23:d5:30:5b:48:d0:f3:0d:ed:30:d0:b7:
e0:66:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:45 2025 by rpki-client