Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/BnljwavNkQCXWsk7tMzvFWz_sBA.roa
File: BnljwavNkQCXWsk7tMzvFWz_sBA.roa (raw, json)
Hash identifier: fI2WJXHu/BO5sVfwpen8XEeTCYP1fDPRG4Q6Vtn6WA4=
Subject key identifier: 06:79:63:C1:AB:CD:91:00:97:5A:C9:3B:B4:CC:EF:15:6C:FF:B0:10
Certificate issuer: /CN=473e040742bbaee62af29508a529a85a6f7851a9
Certificate serial: 01C733AC
Authority key identifier: 47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/BnljwavNkQCXWsk7tMzvFWz_sBA.roa
Signing time: Sat 01 Jan 2022 10:02:06 +0000
ROA not before: Sat 01 Jan 2022 10:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25091
IP address blocks: 85.8.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29832108 (0x1c733ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473e040742bbaee62af29508a529a85a6f7851a9
Validity
Not Before: Jan 1 10:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067963c1abcd9100975ac93bb4ccef156cffb010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:45:d0:2b:0f:61:91:65:ff:b5:d5:23:e4:
70:7a:b4:93:3a:42:26:ef:5f:9b:ba:d3:34:34:b0:
31:c8:82:f4:f9:8a:ea:45:65:74:c5:a1:1d:f1:5d:
b5:b5:a5:19:75:c1:e1:17:12:ed:a4:9d:6f:6c:29:
6d:5b:24:3e:f9:3a:45:f7:0b:aa:3a:ed:98:2c:dd:
3f:27:8b:f6:13:ea:d9:9c:40:16:c4:08:cf:73:64:
c6:c6:ef:1c:9e:71:fc:64:1d:06:ed:1d:5e:dc:d0:
1a:c1:75:e1:cf:6b:b8:d4:ee:9d:d9:30:99:d3:13:
6c:7a:6e:e8:f2:ef:6b:b1:86:bb:f8:f2:07:bc:ba:
5d:b2:89:ae:ea:7f:a9:ff:a5:04:bc:a5:d7:7a:c1:
61:4a:98:de:02:47:2f:8c:3e:b8:bb:1c:a4:79:88:
03:68:75:ae:5a:98:21:1a:5e:8e:2d:db:1e:3f:fa:
40:9c:38:65:5a:b4:f8:21:b6:f3:b9:d2:76:be:5a:
23:7d:53:7f:80:88:6e:cf:5e:c7:42:18:84:7d:90:
24:a9:96:5b:52:d9:a3:a8:12:4a:cf:c7:d6:d7:19:
27:3d:27:fc:0c:76:29:38:c2:03:c6:17:6f:f5:4f:
3c:f2:49:0c:ce:b3:10:c9:33:2c:44:43:10:f5:eb:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:63:C1:AB:CD:91:00:97:5A:C9:3B:B4:CC:EF:15:6C:FF:B0:10
X509v3 Authority Key Identifier:
keyid:47:3E:04:07:42:BB:AE:E6:2A:F2:95:08:A5:29:A8:5A:6F:78:51:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz4EB0K7ruYq8pUIpSmoWm94Uak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/BnljwavNkQCXWsk7tMzvFWz_sBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/14731b-508d-4d34-9e60-cecec4f05e87/1/Rz4EB0K7ruYq8pUIpSmoWm94Uak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cb:8f:d9:bd:06:f3:1b:8a:1f:14:89:2f:76:6b:1b:fc:16:
3e:b1:21:7f:40:9e:93:5a:78:18:a8:36:59:74:33:c5:e1:83:
a7:55:6e:18:0a:ce:ac:af:bd:b7:8a:30:ef:22:bc:79:53:4f:
ef:1e:7d:e6:7d:7a:84:8b:d7:f8:8a:7a:bb:b0:42:0c:c8:4a:
d4:a0:77:cf:12:78:11:03:74:ed:35:c1:0c:74:4e:e8:fd:9f:
ac:b1:4b:8e:bf:95:8b:e9:65:e5:74:1f:24:7d:ca:cb:f8:61:
2b:48:fb:08:84:b1:e7:c5:17:8d:a2:dd:c8:bf:05:3d:4d:39:
9d:14:11:27:a6:cb:e8:28:11:68:36:0f:2f:17:37:89:1d:48:
c4:41:44:76:f0:8c:88:72:d5:e4:d5:72:9f:1e:45:7b:02:4d:
6b:56:99:f2:7d:53:bc:ac:d4:46:54:82:3c:30:57:29:45:ea:
cf:b9:97:18:b6:b8:86:1f:6a:4f:af:ce:08:62:78:4f:b4:f4:
63:3a:95:dd:1a:5f:27:c7:62:b5:2e:d0:b4:75:f2:5f:36:a9:
eb:93:a6:fc:60:34:c7:f5:e0:95:21:50:be:a4:ed:92:ee:bf:
d8:91:3d:bc:6f:c2:1d:e7:03:9e:f0:15:1a:38:b6:a2:e2:27:
db:71:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:19:30 2025 by rpki-client