Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/BJ5F2LijK5X_LLKB9fPJf2xKl6E.roa
File: BJ5F2LijK5X_LLKB9fPJf2xKl6E.roa (raw, json)
Hash identifier: UK/9Q3dZ9EwyaeoaeYQRllbwAt0TpYnxs1NctZF46+c=
Subject key identifier: 04:9E:45:D8:B8:A3:2B:95:FF:2C:B2:81:F5:F3:C9:7F:6C:4A:97:A1
Certificate issuer: /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial: 01856D8ABC664EF714F6BC4A1E5439F757FF
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/BJ5F2LijK5X_LLKB9fPJf2xKl6E.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204300
IP address blocks: 195.225.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:bc:66:4e:f7:14:f6:bc:4a:1e:54:39:f7:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049e45d8b8a32b95ff2cb281f5f3c97f6c4a97a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:24:45:64:ca:c3:91:5e:3f:1d:c6:05:f7:66:
83:e5:5b:09:1e:3b:a1:cb:b5:f9:d5:b9:90:0a:d6:
0e:56:9a:6e:c7:34:55:a1:7b:20:c2:48:44:ae:df:
16:42:81:a9:69:d2:7a:e7:78:ce:70:06:16:85:38:
ab:00:a1:ff:e4:76:6b:85:74:06:3c:aa:85:a3:ef:
03:22:69:35:be:b8:fe:4e:d8:73:e5:84:b2:33:32:
e7:81:28:93:6e:bd:44:32:5d:d0:48:9c:49:03:cf:
6b:c6:f1:02:08:5a:da:7b:60:0a:9b:15:5b:9e:6e:
5c:dd:7a:37:d8:62:c8:7f:01:a2:22:06:6b:25:ab:
c3:e4:96:94:12:84:94:05:37:35:49:ae:3d:fd:87:
e8:9a:b3:17:53:3b:e4:60:94:98:1c:6b:49:06:08:
03:80:e2:65:9b:7a:05:91:08:8c:e5:a2:2a:68:23:
04:74:b0:db:86:d6:aa:1e:41:f6:18:e6:eb:cb:59:
71:d8:58:ba:cd:75:dc:04:10:c2:0d:9f:72:21:eb:
d1:dd:6f:9e:ba:8e:2c:be:83:c2:cd:32:eb:44:5e:
9f:9c:54:99:ef:5f:db:35:f7:4e:d9:17:f1:d6:50:
e4:25:68:ee:eb:58:85:2b:ab:a8:d7:9c:8d:58:81:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:45:D8:B8:A3:2B:95:FF:2C:B2:81:F5:F3:C9:7F:6C:4A:97:A1
X509v3 Authority Key Identifier:
keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/BJ5F2LijK5X_LLKB9fPJf2xKl6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:85:8d:1a:35:23:20:6f:69:fe:b3:f0:f9:d9:f1:5b:5c:8b:
08:2a:d0:9c:08:56:6a:4e:1f:7e:a7:46:cd:43:af:a9:ee:44:
6a:bd:60:1f:6a:6e:dd:fb:5d:ac:ea:a2:d9:cc:12:cc:39:31:
c0:4f:70:93:18:0e:2c:0c:61:85:cf:94:e9:f6:8c:2a:9a:b1:
d3:35:b0:8a:48:b4:10:25:41:b1:68:5e:48:7c:c7:77:41:9a:
e0:25:5d:b7:77:68:a4:6c:df:5d:5e:b4:0f:ad:2a:b2:ec:14:
08:03:99:e7:a9:4b:65:ba:ab:ca:73:84:33:42:ae:74:23:db:
87:1b:05:30:c2:12:d9:1f:6e:e5:71:60:06:eb:7e:b6:e6:a2:
a4:38:26:ae:c7:b5:56:1b:55:a1:6c:8f:5b:88:fc:3c:93:d7:
7d:30:aa:e6:00:4a:70:0b:42:1b:5b:b2:05:f9:9a:97:c5:8c:
4f:d5:f2:33:4e:57:94:0b:eb:ce:b5:f6:f0:b9:e3:d8:e3:13:
c3:10:0e:8c:09:92:b4:a5:ed:6f:ee:9c:37:21:bf:9c:87:54:
86:22:a8:56:ed:d2:0a:2e:f0:50:cc:22:cb:20:97:df:8c:37:
54:6e:c6:7e:e8:2c:4d:11:90:98:f9:81:8e:a2:97:7d:09:a0:
00:fd:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:29 2025 by rpki-client