Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BJuQW4oHUyQNTuuLw0L3iIQ5yqE.roa
File: BJuQW4oHUyQNTuuLw0L3iIQ5yqE.roa (raw, json)
Hash identifier: 2NVxFO7lJMH1WFzpVKYZ3VRwY8LUQ1Z8zLOWL4u/cbk=
Subject key identifier: 04:9B:90:5B:8A:07:53:24:0D:4E:EB:8B:C3:42:F7:88:84:39:CA:A1
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0186C7406C0075DD274541BBF63EDA81FC4C
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BJuQW4oHUyQNTuuLw0L3iIQ5yqE.roa
Signing time: Thu 09 Mar 2023 16:42:13 +0000
ROA not before: Thu 09 Mar 2023 16:42:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200815
IP address blocks: 212.243.60.0/24 maxlen: 24
212.243.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:40:6c:00:75:dd:27:45:41:bb:f6:3e:da:81:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Mar 9 16:42:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=049b905b8a0753240d4eeb8bc342f7888439caa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:ce:c7:33:fc:b5:df:69:06:54:50:a8:7c:
0b:1f:a7:5e:95:aa:c5:ba:30:95:5d:4a:cb:44:68:
b0:c4:35:2f:af:20:80:12:43:28:b6:31:d3:5b:b0:
8f:8e:24:1c:2b:3e:17:26:bb:11:71:83:3d:61:c0:
32:45:e7:4f:e6:39:ff:bc:82:91:bd:56:b3:d8:77:
ec:ce:02:26:92:d9:9a:8c:72:69:51:f2:de:0a:75:
99:bc:43:05:dd:b0:05:a3:bc:e2:25:07:c0:2b:39:
02:29:0d:14:ba:11:7b:e4:26:31:51:ed:44:b9:99:
f9:64:11:d1:40:81:4e:9a:f7:21:7b:b9:0f:8a:65:
bf:03:8a:e7:da:04:fe:0b:9a:d8:ee:64:f5:e8:af:
34:be:b7:59:09:6a:71:93:e4:44:51:34:9f:64:ee:
89:db:43:f3:23:e2:f7:b0:f2:9f:41:53:f3:9c:25:
9b:e6:98:49:a5:01:45:6d:1e:fe:88:b8:b1:fa:bb:
5b:ff:b7:8f:c2:6a:2a:58:c7:9d:84:f0:dd:86:24:
b1:15:f9:c5:0e:8c:20:23:50:36:64:37:60:81:a1:
fa:fd:30:59:62:c5:1d:65:2c:80:f2:b6:c1:ee:86:
13:5b:7b:79:f3:57:a4:2a:80:94:d9:aa:1b:36:08:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9B:90:5B:8A:07:53:24:0D:4E:EB:8B:C3:42:F7:88:84:39:CA:A1
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BJuQW4oHUyQNTuuLw0L3iIQ5yqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.60.0/24
212.243.66.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0d:04:c8:08:b1:d7:3b:6a:65:8d:9f:18:5f:a6:91:64:55:
d9:fb:2d:72:25:8a:ce:ac:01:03:20:be:50:8b:fd:6d:69:f8:
d7:4d:5f:eb:3c:e6:6d:57:81:9d:35:5b:4c:29:94:bf:a9:d3:
ef:ce:3c:94:62:1f:49:dd:3f:6d:1d:55:6a:88:1e:f6:12:0e:
1d:40:e0:13:f4:d2:12:df:6f:02:84:7b:7d:be:49:49:92:f8:
7d:d6:b1:f8:e4:45:c2:48:79:bd:a7:1c:de:8f:c9:7b:e4:25:
df:10:e9:49:63:fb:92:5e:39:bc:41:d9:0d:58:97:3a:d0:0f:
fe:3a:8a:a3:1d:ed:8e:4a:f8:72:3c:55:cc:6b:d3:3a:b7:0f:
25:e3:f8:aa:ab:16:bb:6d:60:7a:c5:8a:b1:ac:9c:07:e4:ce:
50:5d:75:19:8a:0f:e1:04:55:9b:94:6c:e8:69:5c:73:14:f5:
1d:b4:7a:56:35:0d:05:77:0e:65:1b:79:d8:f9:3c:27:51:87:
fa:a3:db:5f:18:41:8c:dd:f8:df:80:f9:e0:ae:71:9c:19:e7:
d0:2c:29:77:a9:93:cc:d1:7d:21:77:ed:b7:3d:a7:bb:78:41:
18:54:e9:23:9c:32:1e:1c:ea:44:a2:ad:ae:ca:7a:a5:62:1d:
03:55:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:06 2025 by rpki-client