Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bhpqzTiYF_XItW_KgjAHHIbUW2s.roa
File: bhpqzTiYF_XItW_KgjAHHIbUW2s.roa (raw, json)
Hash identifier: EpvcVSUT7veiAD0rpn0+CGDzzfuKxWTOqapMQz0B3ag=
Subject key identifier: 6E:1A:6A:CD:38:98:17:F5:C8:B5:6F:CA:82:30:07:1C:86:D4:5B:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246699EE3128EB81AE43C78E6343D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bhpqzTiYF_XItW_KgjAHHIbUW2s.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 194.55.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:66:99:ee:31:28:eb:81:ae:43:c7:8e:63:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e1a6acd389817f5c8b56fca8230071c86d45b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:5a:ed:71:6f:13:17:b8:39:ed:79:c0:68:
30:d3:c8:71:e8:3b:32:5b:0d:73:1a:e7:1f:d6:a3:
e8:5c:48:c9:07:89:5f:41:33:77:4f:d3:d3:8f:80:
d3:f9:22:c4:be:51:ae:4e:10:8f:2f:ce:1c:bf:0e:
4d:e0:5e:e9:00:1c:c2:84:e7:2f:85:75:80:1b:c6:
d0:e9:d1:6b:91:4d:4f:d6:f8:c0:28:4c:5b:bf:18:
36:97:a0:40:c4:b0:77:5f:27:58:78:57:d8:52:b9:
f2:fd:a3:5d:4d:df:8d:0b:fc:58:c4:49:47:76:26:
7f:cc:e8:66:3d:f3:1d:43:5d:fe:f3:9e:83:31:f0:
d1:41:77:28:1d:2c:ef:78:b5:8b:f9:be:cc:6f:70:
4d:be:2b:54:26:53:9f:8c:3a:af:a8:f3:22:21:e5:
5a:9f:c1:0d:16:86:9f:29:08:3e:da:ac:77:69:26:
b5:6c:f9:09:54:b5:7c:14:41:fa:8e:10:cb:e4:79:
45:91:3b:89:e9:ef:cb:25:d7:98:73:97:1c:f7:ed:
f2:86:fa:f8:8f:fa:af:19:02:32:92:b6:57:ae:5c:
ed:e3:b5:0a:46:db:05:51:c8:08:78:59:26:ed:fb:
56:3a:4d:68:28:b3:1b:59:79:ae:e1:92:6b:9d:2f:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:6A:CD:38:98:17:F5:C8:B5:6F:CA:82:30:07:1C:86:D4:5B:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bhpqzTiYF_XItW_KgjAHHIbUW2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b6:62:71:2a:3b:ca:0f:97:14:b9:b2:dd:06:a4:22:50:e0:
9c:a0:ac:d1:f1:6e:40:4b:58:15:d6:2f:bd:7b:56:8e:28:f4:
91:7f:8a:36:71:59:5b:dd:b3:7e:e2:d6:57:e4:db:3e:d4:e7:
08:57:a6:6e:9d:f7:d8:6f:2e:ef:fc:30:f5:b7:bc:09:38:66:
90:1f:67:91:78:ce:ea:24:1a:e2:b4:93:4e:40:aa:4d:6a:b7:
3d:be:d1:6e:6d:97:39:6a:69:ba:35:fc:f7:17:85:34:ca:1c:
73:a4:46:4d:1f:5b:39:45:db:34:71:af:6a:c1:4f:b7:22:a9:
a9:db:64:dc:70:0c:ab:26:9a:25:16:ce:91:ad:83:7e:25:ea:
8b:7a:20:82:1e:88:ce:8d:95:67:b6:34:84:17:17:f9:e6:76:
a1:e9:93:0d:b3:f5:62:3b:1c:99:ca:84:cf:f4:69:66:c5:9c:
82:d9:e2:4c:cb:62:4d:26:0b:7a:57:ed:03:d1:96:4d:5c:78:
d4:8a:8a:cd:70:07:c9:f1:6f:83:f1:30:cf:28:19:d5:f2:78:
99:f9:80:39:7b:85:d6:68:ec:bb:7d:20:b4:c3:ee:70:db:27:
ea:cf:1d:3c:7b:29:fc:cd:f6:40:c7:83:af:df:6a:e2:c9:3d:
14:b4:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:36 2025 by rpki-client