Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bf6om5xfCNeSx1p99HxGLXWOJUs.roa
File: Bf6om5xfCNeSx1p99HxGLXWOJUs.roa (raw, json)
Hash identifier: s4vt8V9/ejw5+b8uzvQ/S0otdd/zhAkQiO1mXnR0uic=
Subject key identifier: 05:FE:A8:9B:9C:5F:08:D7:92:C7:5A:7D:F4:7C:46:2D:75:8E:25:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B425900426455AC16DF96C5B8294
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bf6om5xfCNeSx1p99HxGLXWOJUs.roa
Signing time: Thu 02 Jan 2025 17:51:21 +0000
ROA not before: Thu 02 Jan 2025 17:51:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207557
IP address blocks: 45.141.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b4:25:90:04:26:45:5a:c1:6d:f9:6c:5b:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05fea89b9c5f08d792c75a7df47c462d758e254b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:d4:98:56:a6:02:e0:ae:8c:38:13:3f:10:
d6:0c:e7:53:02:90:a2:db:5e:c9:fc:22:dc:43:01:
34:9a:eb:b7:ca:e8:f3:8f:e0:d0:06:ef:b6:b3:15:
f3:c2:89:5b:58:aa:97:a6:7e:25:0f:de:dd:f0:38:
84:b2:f2:26:32:eb:9f:55:c0:63:19:75:13:de:7b:
0c:0c:89:8a:f4:9d:69:18:f0:4f:be:1d:4c:0d:90:
b8:14:56:6d:4d:12:b0:a4:86:6e:23:21:8f:1e:40:
cd:a2:ab:e5:e9:4d:9d:32:7d:24:f2:b8:5a:ea:a3:
d4:84:69:73:44:e5:8c:05:da:54:38:93:cf:d2:03:
a7:74:f6:da:19:f8:fd:cc:0e:24:13:0c:59:e1:6e:
7c:40:1c:b9:62:96:51:d7:1f:d1:26:f8:15:99:17:
06:6c:05:0c:95:68:12:d9:b2:f3:ef:06:12:8e:b4:
25:a3:78:f0:66:c7:af:c2:b0:64:75:35:41:8d:ea:
dc:fb:26:31:2a:33:ef:3b:16:bc:a7:2b:39:65:81:
19:44:ac:48:78:f4:c1:64:c9:07:41:42:48:6a:8b:
7e:fd:d5:99:f3:2e:40:22:81:f5:a0:1c:b7:ce:26:
5d:fc:b4:54:a2:5d:41:c2:95:9e:e1:c4:c9:3d:67:
8c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:A8:9B:9C:5F:08:D7:92:C7:5A:7D:F4:7C:46:2D:75:8E:25:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Bf6om5xfCNeSx1p99HxGLXWOJUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c4:aa:c1:42:00:63:fe:de:54:2a:05:71:b6:f8:1f:8d:0e:
c9:b6:d4:66:c6:1a:92:9b:3a:45:81:36:50:e5:64:e0:ec:c1:
d7:ce:ba:b0:7d:18:04:a7:7e:8f:c6:75:a1:ef:a1:c7:fd:1f:
bd:33:73:c9:97:d9:a7:37:93:26:c0:40:fd:7b:f7:c0:0d:4a:
e7:57:9b:89:56:cb:cc:71:b4:f0:fb:3e:36:98:c9:74:d3:45:
b4:ca:f0:10:9b:27:fc:fa:ec:12:18:77:39:c2:a9:e6:d2:23:
a6:02:3e:e2:b3:82:6f:a6:7d:fe:db:40:9d:7f:e3:7d:84:e3:
df:2c:6f:d1:f4:79:b2:38:ee:89:d8:bf:70:d6:66:c4:93:54:
01:b0:b3:4a:49:2f:c7:3c:22:5b:40:3a:d7:da:44:e3:0e:6c:
02:16:a0:5c:75:96:b2:44:94:4c:40:91:53:ae:ca:84:40:fc:
af:0c:68:f3:71:0c:51:9f:18:f6:10:8e:74:4f:8c:6c:47:7b:
1e:31:db:e2:fa:39:94:16:8d:bb:bf:88:d7:a1:e1:e3:b1:77:
e1:5e:50:e4:64:76:53:b3:cf:20:6f:ab:5d:6c:c8:71:17:db:
97:79:14:10:31:a3:ce:38:d2:05:b7:98:86:3c:b1:58:44:77:
37:3b:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:28 2025 by rpki-client