Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/BXhyClSkTNjZLTmm8wf-7UwQbS8.roa
File: BXhyClSkTNjZLTmm8wf-7UwQbS8.roa (raw, json)
Hash identifier: NwkLW+Rs39Vys1hNUwPv5PesY6osCpLypHDPbcw60cc=
Subject key identifier: 05:78:72:0A:54:A4:4C:D8:D9:2D:39:A6:F3:07:FE:ED:4C:10:6D:2F
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 018CC87152E6DC4F3723977BBC6085896411
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/BXhyClSkTNjZLTmm8wf-7UwQbS8.roa
Signing time: Tue 02 Jan 2024 04:31:59 +0000
ROA not before: Tue 02 Jan 2024 04:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43847
IP address blocks: 45.149.216.0/23 maxlen: 23
2a0f:7600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:52:e6:dc:4f:37:23:97:7b:bc:60:85:89:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0578720a54a44cd8d92d39a6f307feed4c106d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:47:b6:1c:75:e5:98:7b:cd:a2:8b:69:c5:
8d:eb:d1:87:08:31:e9:23:10:64:fa:61:c1:15:91:
05:c4:f1:c3:26:89:25:f1:b9:bf:1f:b6:dd:f3:6f:
ab:28:74:02:45:53:75:65:98:6c:de:41:76:62:3f:
8c:b4:32:b5:3a:79:9a:95:0c:72:92:b0:b8:80:d7:
8f:23:93:20:47:6c:ca:29:65:a0:30:1a:0e:2b:ff:
1b:22:e6:72:0d:65:7e:bb:d8:89:07:40:f8:6a:ad:
61:ce:c7:ad:2f:0a:e2:52:f8:3a:48:e4:bf:a8:ba:
c5:55:43:94:5b:16:c4:2d:21:78:be:26:f0:68:12:
7e:9a:cc:f5:5e:c5:e2:8f:b0:82:58:d9:51:26:25:
a4:6a:8b:ef:31:ce:63:8f:1b:f0:92:60:35:0d:f5:
ad:3f:ed:2d:ec:79:0b:1e:f2:2f:83:89:6b:4a:ed:
70:6d:1c:6d:22:b5:19:47:c2:8d:cf:32:d9:07:bd:
0c:aa:41:08:07:4b:28:55:38:91:14:41:f4:14:7d:
65:3b:17:c6:cb:d8:42:d5:a3:88:b9:6e:4c:a0:44:
8c:b5:e5:e2:ba:8a:78:bc:18:e6:85:b0:9a:91:be:
41:25:e7:f4:10:9f:82:76:4d:f2:0b:db:55:92:ed:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:72:0A:54:A4:4C:D8:D9:2D:39:A6:F3:07:FE:ED:4C:10:6D:2F
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/BXhyClSkTNjZLTmm8wf-7UwQbS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.216.0/23
IPv6:
2a0f:7600::/32
Signature Algorithm: sha256WithRSAEncryption
26:84:26:6f:64:25:f8:3f:8f:19:89:44:8a:16:b0:4d:8c:8c:
be:b3:64:6d:b2:46:3e:3c:4a:d9:c5:00:60:cf:89:4d:02:b5:
b3:af:64:b9:9d:2e:02:5c:98:36:55:4a:9c:0b:7b:94:e9:23:
00:04:cc:a2:83:3b:84:9c:9f:73:4c:83:e9:f9:3a:9a:85:ac:
7b:a9:6a:04:c8:07:10:e8:73:ef:a8:6f:54:31:37:95:e8:9e:
4e:40:db:fe:86:37:b2:f3:e9:e7:d5:25:72:e8:61:34:19:87:
a8:fa:dd:62:18:0a:e2:56:16:ec:69:94:e8:9e:2f:e8:49:fe:
9d:64:8b:84:8a:8e:c0:48:5d:38:98:d7:2c:61:80:26:37:9c:
07:d3:56:d6:ed:75:e3:e2:ae:a5:51:04:39:f3:5c:55:84:1e:
16:31:c0:ab:72:ac:ad:3d:d9:99:de:6f:0d:1f:ce:d3:51:ec:
9d:4d:56:22:48:c1:e0:a3:28:e6:f9:1d:7e:2c:e1:f8:de:5a:
35:35:dd:b0:59:b6:38:44:1e:5b:2a:48:30:30:09:23:17:9f:
28:42:43:74:2a:f5:f2:53:0f:7e:62:c3:10:2c:e0:49:a9:80:
fd:82:46:b4:25:25:a4:0c:39:b9:1d:a4:39:05:2d:c4:ee:7f:
cb:b3:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:02 2025 by rpki-client