Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/UkF5OJlTcC8usrPMpMIa9hhQzsE.roa
File: UkF5OJlTcC8usrPMpMIa9hhQzsE.roa (raw, json)
Hash identifier: 6iFL5fw9jqPNKLZj+w7NjNxFgZ31JN6yW0kXgVNLpLI=
Subject key identifier: 52:41:79:38:99:53:70:2F:2E:B2:B3:CC:A4:C2:1A:F6:18:50:CE:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 0185728CA2ED68BE889A50E1928B5BC51B12
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/UkF5OJlTcC8usrPMpMIa9hhQzsE.roa
Signing time: Mon 02 Jan 2023 12:54:57 +0000
ROA not before: Mon 02 Jan 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43847
IP address blocks: 45.149.216.0/23 maxlen: 23
2a0f:7600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a2:ed:68:be:88:9a:50:e1:92:8b:5b:c5:1b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Jan 2 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=524179389953702f2eb2b3cca4c21af61850cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:d9:d4:a3:ee:c2:34:28:aa:e2:c4:a9:7c:
5e:27:c5:d2:69:06:26:37:cd:17:67:b7:5c:8b:a4:
cd:ac:2a:e9:c4:aa:11:70:25:09:64:f4:5b:2e:cd:
ed:f1:bb:04:42:39:04:36:08:af:03:d9:37:73:9a:
62:fe:08:44:2f:45:1d:49:ea:ee:8d:7f:09:7a:a7:
b7:d1:1a:b5:31:ff:f3:e8:4e:32:b0:cb:53:36:75:
fa:c4:43:20:36:52:60:57:5c:73:23:32:5d:8c:34:
ba:14:98:0c:a5:eb:f8:40:bf:95:83:c2:cc:89:d2:
5a:bd:2b:2e:9d:73:b4:e7:d1:80:22:8d:56:73:5c:
e0:f5:8e:05:5a:45:ac:21:b1:ce:42:75:0c:6a:52:
95:17:51:8c:0c:70:e2:f3:5b:be:dd:da:39:69:35:
30:c2:ea:ab:bc:3a:60:9a:56:32:4d:3d:27:36:9c:
7a:e8:06:67:f0:63:71:d0:d6:52:3d:da:61:8f:6f:
5b:8f:a2:19:6d:4e:57:f3:f9:73:71:50:18:98:b8:
82:1d:cf:9c:14:05:84:78:05:75:a0:22:0b:d7:e3:
e3:15:a8:e2:3d:a4:97:a5:c0:32:1a:37:56:a7:42:
aa:d5:4c:65:c2:e2:a3:dc:6b:ec:b3:61:ca:a3:04:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:79:38:99:53:70:2F:2E:B2:B3:CC:A4:C2:1A:F6:18:50:CE:C1
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/UkF5OJlTcC8usrPMpMIa9hhQzsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.216.0/23
IPv6:
2a0f:7600::/32
Signature Algorithm: sha256WithRSAEncryption
ac:b8:b1:3f:30:e7:b5:7a:e1:ed:7e:e5:17:14:b4:9d:5b:66:
ee:44:fd:5b:4c:e2:8b:43:48:14:e0:50:bc:ba:56:09:77:fb:
66:57:df:22:44:81:6d:54:fe:18:be:99:56:79:a0:19:a5:a0:
69:df:42:22:02:81:28:ab:36:ff:ff:ea:2f:16:33:74:e4:c8:
65:ec:83:84:fe:53:ff:94:25:2f:90:76:c5:63:85:b9:56:31:
63:56:76:23:5f:a4:97:4f:fb:9d:6a:9d:45:bf:ad:af:0f:08:
6e:77:c7:aa:eb:e3:3a:2c:34:d1:84:42:d5:a0:f9:c8:5f:28:
e4:a2:98:f2:d2:d7:df:6c:be:b4:c8:77:ed:2a:82:3f:91:74:
d1:26:8d:fd:34:34:f1:7e:a1:97:3b:db:9b:1d:e7:2b:46:79:
16:05:45:53:f0:9e:19:25:34:ac:a0:f3:43:e9:ed:e8:f9:a2:
ce:8f:df:5d:b4:7c:97:21:d4:5c:b9:30:45:1e:40:d4:1a:69:
fc:81:e9:5b:e0:33:ae:97:25:a3:3a:3e:d2:59:1d:e8:03:a7:
c8:86:4e:cc:a6:ef:6a:82:c9:73:bf:80:d3:99:b6:84:a3:54:
2e:bd:85:f1:5e:1b:6f:69:58:73:77:35:a3:7d:f2:75:b6:c6:
3c:39:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:44 2025 by rpki-client