Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/BpKBJDS5UXhAVOaGf7QGgYPZ3BY.roa
File: BpKBJDS5UXhAVOaGf7QGgYPZ3BY.roa (raw, json)
Hash identifier: zaUQ0y/lBMu8J5Bwmffnl0gWeHnr7cI56GxMUu0MQSk=
Subject key identifier: 06:92:81:24:34:B9:51:78:40:54:E6:86:7F:B4:06:81:83:D9:DC:16
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 01856D53DD4F467ADCEB95DF59A56055CDE4
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/BpKBJDS5UXhAVOaGf7QGgYPZ3BY.roa
Signing time: Sun 01 Jan 2023 12:34:50 +0000
ROA not before: Sun 01 Jan 2023 12:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210344
IP address blocks: 2a11:29c0:3df4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:dd:4f:46:7a:dc:eb:95:df:59:a5:60:55:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jan 1 12:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0692812434b951784054e6867fb4068183d9dc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:3e:9f:c3:ea:d2:ef:a7:aa:c2:08:0c:4b:
ce:b1:1d:65:a8:8d:c4:5b:e7:69:b1:0f:38:59:dd:
e3:02:02:0d:d3:32:78:7a:6f:61:fc:b3:7d:04:9d:
13:49:b2:99:4d:d6:2a:55:43:46:bb:0f:ae:5b:ec:
1c:be:f4:c4:da:da:bd:e3:bc:a6:86:c2:62:dc:7c:
6f:fd:0d:a7:e2:4a:dc:2f:b1:e1:1f:cf:89:76:21:
39:67:f7:5f:b0:0e:b1:43:cb:8f:60:39:69:5d:a0:
a1:2b:a1:bc:95:3f:f2:1a:f8:22:85:90:19:8e:3c:
c0:3c:3e:2f:d6:1d:89:c4:8c:04:5e:6a:11:b3:df:
15:ed:8f:ff:7f:a7:e5:9a:47:e2:e0:ca:07:c4:49:
8c:ad:57:86:e1:5a:49:fd:e0:3a:e2:ac:3e:2a:e0:
a4:98:5c:6a:21:bf:84:d1:48:b9:76:75:fd:72:ff:
24:36:42:dd:ea:57:d9:f9:88:19:6f:70:13:d6:1b:
69:31:06:81:23:db:6b:ca:de:c4:98:b7:dc:df:f0:
58:f9:2e:a8:be:b0:9a:cd:1f:61:e8:5e:55:bc:4f:
00:ea:b3:25:c7:86:77:5f:3b:20:64:a4:1a:2c:8d:
b7:40:d0:62:1a:42:4d:b8:7a:3d:5c:f3:d8:42:38:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:81:24:34:B9:51:78:40:54:E6:86:7F:B4:06:81:83:D9:DC:16
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/BpKBJDS5UXhAVOaGf7QGgYPZ3BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df4::/48
Signature Algorithm: sha256WithRSAEncryption
82:d2:25:b8:03:81:77:93:53:cf:33:e3:21:e1:83:7d:70:db:
1d:43:bc:05:01:ab:5a:bf:c7:2d:40:f1:aa:cc:83:02:1d:26:
12:18:64:83:10:ad:aa:2a:09:e5:03:21:cf:91:36:c8:46:ed:
8b:00:69:12:12:c3:cc:ab:89:ad:82:b0:a8:de:80:e5:32:a0:
d7:19:29:d4:06:e5:9a:b1:23:8b:af:fe:cf:42:71:e4:94:da:
02:ba:3d:78:da:f5:1a:0b:2d:0c:12:dd:f3:16:71:08:9b:13:
11:47:f6:c6:b9:38:e9:e5:47:eb:87:60:a8:21:b9:2f:9a:64:
f1:94:62:55:29:06:91:a4:70:89:5a:00:7c:ea:8c:8d:09:5b:
65:2c:57:52:9e:45:88:89:f3:34:5b:7f:e9:38:6b:52:61:37:
00:b8:ba:65:81:ed:3d:5b:20:f0:8a:7b:d6:a3:07:2b:a1:31:
54:78:b9:64:50:a8:2a:43:90:69:3c:58:6b:a4:f7:a7:c0:92:
fe:a3:b2:48:fe:d4:e3:32:ab:c1:ad:cb:96:39:d6:88:ff:66:
20:0c:cd:2c:75:3f:36:00:15:e6:a0:48:73:b0:60:97:54:41:
8f:2f:2f:77:b2:10:41:40:6a:ea:cf:f1:17:7d:a6:6f:98:ca:
94:ea:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:18 2025 by rpki-client