Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BWfclOHX97lw_VFKdFqtedqeJfI.roa
File: BWfclOHX97lw_VFKdFqtedqeJfI.roa (raw, json)
Hash identifier: o13BqbtUlgA5DGcA1sn9VSVn1AtTeuJGZnfQ9fbkUbQ=
Subject key identifier: 05:67:DC:94:E1:D7:F7:B9:70:FD:51:4A:74:5A:AD:79:DA:9E:25:F2
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092A99A1
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BWfclOHX97lw_VFKdFqtedqeJfI.roa
Signing time: Sat 01 Jan 2022 12:58:44 +0000
ROA not before: Sat 01 Jan 2022 12:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34150
IP address blocks: 2a02:2698:9c00::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153786785 (0x92a99a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0567dc94e1d7f7b970fd514a745aad79da9e25f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:a3:85:ea:cd:e4:9f:d8:e9:2c:63:f7:eb:
b3:d6:fd:3b:65:6e:ce:9c:35:70:ce:9a:5d:5f:8e:
14:ee:b6:6a:7e:45:5b:f4:ea:59:a7:6d:3e:28:fb:
40:ec:92:4e:7f:83:00:11:bf:24:b6:65:3b:ec:29:
47:db:79:77:c7:e9:3b:28:ee:fb:3f:56:ef:59:fb:
fe:9a:5d:95:7d:6c:b8:88:ce:b7:3b:91:f1:ef:95:
0b:40:d3:c5:c7:06:8c:81:c0:99:1e:c3:dd:f9:4e:
4b:91:41:cc:e8:69:86:54:37:a9:e9:22:eb:eb:b6:
42:a6:67:ed:26:fa:a9:6e:22:5b:bd:00:55:30:f0:
62:40:3d:28:b8:59:41:9b:7f:b4:6c:fb:dd:c7:8f:
21:8e:5a:60:76:7b:f6:f6:e4:bb:7f:06:60:78:a3:
9a:4a:d8:fb:02:e0:92:28:75:e9:d0:a2:a0:6d:aa:
89:da:06:fd:0a:81:78:9f:1f:a6:70:4c:df:59:15:
b5:03:48:1c:35:9c:d2:44:5e:92:30:c0:9c:54:d5:
b8:26:b7:5a:bd:e0:a3:7c:f1:e6:af:23:58:95:e6:
85:30:5c:d1:bb:14:f2:31:ff:dd:cb:7c:5b:94:50:
c3:f7:d1:ce:37:f1:40:6b:f0:32:30:54:1b:3e:47:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:67:DC:94:E1:D7:F7:B9:70:FD:51:4A:74:5A:AD:79:DA:9E:25:F2
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BWfclOHX97lw_VFKdFqtedqeJfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
07:7d:d2:ce:cf:64:6d:16:26:e7:e7:60:4c:f1:62:f3:92:5d:
cb:93:3d:c0:75:d2:5d:b0:cd:2d:5f:42:c2:66:4d:22:58:ae:
df:0f:7e:f7:f1:64:c9:e8:61:a2:22:9a:67:6c:42:34:a5:5a:
02:33:67:6f:98:b2:3d:22:49:e3:a1:a8:77:f8:99:9f:4e:82:
7f:65:ad:d3:82:fb:1a:74:9d:12:2e:07:4d:b6:c5:8a:e2:5e:
27:bb:55:45:9c:08:7f:5a:2b:05:84:2b:8d:2e:ce:0e:9d:47:
cd:b8:af:66:8c:4f:1f:3a:67:7f:41:4f:30:d7:06:bc:eb:0f:
0d:07:19:a9:aa:86:20:70:94:66:28:a8:31:4c:0d:b3:09:6b:
35:66:dd:a8:b2:9f:99:fd:92:0f:82:9b:a5:f7:cc:e5:e9:ed:
7a:39:f8:c2:35:82:5f:7c:93:b8:18:a9:2e:ce:84:3b:69:a5:
7a:ce:bb:e7:14:ec:7f:ea:d5:fe:34:bc:d0:27:b0:93:e1:9b:
4b:ed:be:b2:39:43:c5:ac:33:14:d3:00:7f:3b:55:19:5f:5a:
99:a1:56:1f:2a:41:f5:d0:9d:7e:94:0d:20:fe:5a:9a:2e:ad:
48:aa:03:24:f7:51:01:12:05:96:a1:85:3f:05:3e:c4:d0:cd:
c0:b2:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:14 2025 by rpki-client