Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/BUh_rx5BwPP9WJuIUh0RZwxkJpE.roa
File: BUh_rx5BwPP9WJuIUh0RZwxkJpE.roa (raw, json)
Hash identifier: IYv+BLJy9Aefvb0ixLXovLJ47AdO9dCCGn7Z42eNgho=
Subject key identifier: 05:48:7F:AF:1E:41:C0:F3:FD:58:9B:88:52:1D:11:67:0C:64:26:91
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019427B58292D271089BD4B9D74DE79769D0
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/BUh_rx5BwPP9WJuIUh0RZwxkJpE.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.6.0/24 maxlen: 24
45.156.28.0/24 maxlen: 24
45.156.29.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:82:92:d2:71:08:9b:d4:b9:d7:4d:e7:97:69:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05487faf1e41c0f3fd589b88521d11670c642691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:4f:0c:ee:cd:4d:8e:24:c3:2c:c8:e4:34:
07:52:4d:79:7d:79:d6:dc:dd:c2:a9:ba:9a:07:da:
7e:6b:6e:47:11:c9:a5:3a:76:2e:c9:85:2e:f9:39:
f3:3b:43:0d:b4:8d:45:78:4d:21:d9:c0:5b:98:53:
a2:54:d8:b2:31:62:85:1f:ab:ca:78:df:79:af:7c:
70:a2:10:12:3f:d0:8c:21:69:5e:41:0b:51:23:a7:
97:a6:2f:27:de:f5:e3:f5:e0:d0:35:30:24:96:fc:
22:fe:58:6f:90:20:0c:ff:0a:dc:4c:e9:57:b1:0e:
97:a1:b4:e3:79:ee:e9:ef:6a:46:2d:08:77:1a:93:
3c:e8:56:e1:ae:f5:4c:e3:46:ea:08:a6:c3:b8:0a:
fa:1a:62:4b:b2:f7:54:ea:99:9f:33:1c:25:45:c7:
c8:90:ba:e1:66:5a:f3:90:ea:ff:d6:5a:97:e0:44:
1c:d9:2e:20:f9:4b:ed:1a:6c:43:85:71:89:72:af:
8c:42:5c:48:47:ca:0d:eb:6b:ae:30:0e:99:48:4f:
bb:5f:17:70:4b:20:5f:00:13:00:af:e6:1b:91:f2:
5f:9c:7e:db:78:98:d2:36:2f:ec:02:e4:3f:0a:2b:
72:d8:ed:d9:fe:c0:9a:82:ba:1d:e9:af:a8:41:f0:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:7F:AF:1E:41:C0:F3:FD:58:9B:88:52:1D:11:67:0C:64:26:91
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/BUh_rx5BwPP9WJuIUh0RZwxkJpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
45.156.28.0/23
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d6:d0:de:32:c7:88:65:be:68:7b:0a:a0:2c:49:e1:b4:12:
d3:ce:4c:45:4f:86:b0:e5:9d:bf:08:2d:44:32:ff:c4:12:42:
9c:c9:cb:aa:86:d2:f8:61:25:ad:bd:04:ec:d0:df:17:1d:91:
72:6c:41:93:d7:06:64:7e:8b:cc:e1:ea:77:06:aa:9a:e1:05:
cb:48:34:c4:dd:87:57:05:04:5d:5b:d3:a6:0e:99:7d:a3:7b:
a4:17:3b:a9:a8:25:94:4e:e2:31:ba:b1:e8:37:0d:84:d4:fd:
62:8c:78:6b:5a:c2:40:72:28:0c:c1:6a:9b:bd:2c:62:be:47:
10:1c:21:99:66:c8:f8:3a:b6:23:7e:0d:89:30:cb:4c:42:7d:
7b:4b:e4:53:a9:3a:2a:72:33:dc:53:e7:cb:31:64:d6:bc:21:
33:9f:66:7b:1c:58:8e:2b:36:13:5d:66:6f:2e:9f:1e:d3:23:
a3:21:30:46:73:0b:e4:59:8e:60:42:6b:17:08:31:fa:9c:ea:
53:1a:33:61:63:2c:87:b6:94:44:80:8e:f1:bb:8a:ff:c2:74:
3d:7d:cb:07:5d:a5:3e:3e:69:d0:f1:6d:65:06:4d:4d:7f:4d:
ca:78:a7:97:1e:e6:cf:78:01:0a:d4:ad:ce:ff:3a:2c:4d:97:
8b:a8:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:30 2025 by rpki-client