Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/BxevXOZBdFUOOljteOuO-Rxt-CY.roa
File: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (raw, json)
Hash identifier: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=
Subject key identifier: 07:17:AF:5C:E6:41:74:55:0E:3A:58:ED:78:EB:8E:F9:1C:6D:F8:26
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019426D9CFCBC5FF54B50EB71A4B0CFF1197
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/BxevXOZBdFUOOljteOuO-Rxt-CY.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 216.245.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cf:cb:c5:ff:54:b5:0e:b7:1a:4b:0c:ff:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0717af5ce64174550e3a58ed78eb8ef91c6df826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:42:98:cf:a9:90:fc:92:9a:32:76:ff:be:
ca:e9:38:42:a2:78:5e:c5:25:ed:18:83:99:b7:8d:
bb:5a:ef:6e:50:39:14:8d:e5:22:d0:05:58:ce:77:
3d:4c:c8:db:34:24:07:a4:b2:62:ca:30:65:02:e9:
e6:10:d7:4b:8e:b2:e7:4f:a1:17:bd:ba:12:cd:c4:
5e:9e:25:5a:b2:e0:a3:c8:f8:d0:f9:dc:1f:3d:b9:
78:bb:ac:af:84:da:b0:44:ba:11:c9:fc:4a:c6:b5:
0b:6b:7b:d9:e0:72:d8:32:75:eb:25:ed:80:1f:b7:
6d:19:ea:fc:26:ec:5f:00:c9:d2:9c:3d:45:2b:8f:
01:86:d1:d3:b1:c4:5f:a4:f5:79:8b:8c:c6:47:a4:
09:d7:c6:8d:62:6f:5f:5f:0a:f8:05:9f:49:1f:2a:
6f:58:44:fe:60:2c:e7:f5:2d:23:d0:39:a8:4b:1f:
d5:9f:66:a8:79:fb:6f:0f:ab:15:15:bc:0e:eb:72:
7f:e7:5e:9d:a2:0e:d5:63:ef:93:d5:2f:91:27:80:
bd:ef:d9:6b:d4:ba:f1:6b:f1:a2:60:98:a1:c1:32:
d4:c6:0c:e8:79:78:87:83:b6:95:bd:70:bb:6f:0d:
65:31:01:f9:81:10:92:35:9b:2e:16:e2:88:9a:41:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:17:AF:5C:E6:41:74:55:0E:3A:58:ED:78:EB:8E:F9:1C:6D:F8:26
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/BxevXOZBdFUOOljteOuO-Rxt-CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c1:11:04:67:7f:5c:8c:34:4d:dc:cc:08:d6:b3:3e:33:fb:
8e:a7:fa:0a:df:aa:85:e0:36:ac:69:93:19:d1:b2:06:86:c3:
35:07:a0:52:53:e1:e0:ee:c4:08:5c:59:f7:eb:29:70:e2:b1:
a4:04:03:73:f3:51:44:b9:e6:2b:f3:ab:6d:ab:e9:1d:66:76:
a0:c8:73:5a:49:c4:30:c4:9b:8d:b9:62:b8:f2:96:4b:78:6d:
b5:7f:bd:7a:a7:5d:9b:4d:f3:77:ff:bb:1f:83:ae:3e:44:09:
90:e8:2d:2c:0d:0d:e5:7a:19:db:3c:3d:4d:0a:6d:3c:f7:a7:
d3:e7:7f:b8:c6:f7:c0:44:65:b8:55:07:30:79:41:c1:cf:bf:
83:49:5e:7f:5e:30:8e:58:b3:a2:8d:9d:11:5c:57:f6:a3:89:
15:c6:20:1d:27:5c:4a:47:67:73:6a:e4:63:9b:db:b9:74:98:
1d:f5:c9:bd:04:65:ee:6f:8d:46:2b:24:81:ae:c2:31:b6:f5:
37:60:17:66:24:c0:05:69:82:2a:65:7e:74:cb:99:ce:28:86:
d0:79:02:1c:7f:c6:c0:3d:a6:4c:45:b8:21:9d:a7:c1:e1:c2:
ec:f2:8f:45:ad:e7:08:57:1a:a4:16:f2:8c:30:a8:33:22:0c:
74:52:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:38 2025 by rpki-client