Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BUS2AIrnAV7zM1jQH3DsldPMNdY.roa
File: BUS2AIrnAV7zM1jQH3DsldPMNdY.roa (raw, json)
Hash identifier: uvLOq0VCjcO+Pe8I7jp8vqQ0+Ww97KZaxTfG6aOhtYo=
Subject key identifier: 05:44:B6:00:8A:E7:01:5E:F3:33:58:D0:1F:70:EC:95:D3:CC:35:D6
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C14F0FC8EC90D445F467642EACF9
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BUS2AIrnAV7zM1jQH3DsldPMNdY.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16079
IP address blocks: 194.209.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:4f:0f:c8:ec:90:d4:45:f4:67:64:2e:ac:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0544b6008ae7015ef33358d01f70ec95d3cc35d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:fc:29:eb:88:31:ff:03:b1:de:ee:d7:30:
40:97:03:f5:74:be:4a:4a:93:54:23:51:8b:25:69:
82:04:f8:ec:3e:c3:1c:5e:41:61:4a:52:9e:49:89:
8b:31:15:3d:88:20:63:cf:69:e7:de:c8:ac:26:10:
3d:95:5e:8e:4a:6c:ee:a8:7a:1e:4c:11:7d:d5:e1:
d0:19:bd:0a:50:c2:66:0e:3c:f8:68:08:ef:d8:13:
1a:3d:0b:c0:c8:d9:1d:bd:c9:f6:d8:eb:11:b5:3b:
0e:ed:c3:c5:39:e9:59:82:57:0f:cb:31:82:a2:88:
e5:98:0d:c8:5e:21:6c:13:d2:e1:41:79:b5:f9:a3:
e9:e5:33:41:41:b2:bc:b1:ae:98:c1:e3:65:8e:1b:
f8:dc:a0:8d:42:06:48:0c:58:09:fd:b3:ec:93:8d:
09:2f:fe:8e:c1:37:51:41:05:8d:eb:87:58:55:61:
b7:01:91:b3:d5:21:01:bf:53:17:1b:68:6a:bb:e1:
49:fb:37:e6:c8:7d:9a:69:3e:01:76:f9:a5:71:26:
01:9c:c4:fb:c5:21:f4:2c:ae:a1:36:8c:44:9d:d1:
86:8f:58:8c:26:1c:ea:60:d3:39:4c:76:94:61:72:
50:9d:d8:1a:f5:d8:07:13:2d:f0:60:42:97:f1:cf:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:B6:00:8A:E7:01:5E:F3:33:58:D0:1F:70:EC:95:D3:CC:35:D6
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BUS2AIrnAV7zM1jQH3DsldPMNdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9e:e4:0c:08:6f:ba:24:34:f7:ce:b1:62:73:90:d2:91:a2:
ee:c5:cd:48:b7:9a:2a:ad:d4:b8:71:72:77:c9:1e:a8:da:ad:
5f:fd:b9:5c:24:59:ef:ca:95:d3:67:72:4d:43:6e:3e:48:83:
b3:2e:76:8a:bc:a6:0f:4a:33:05:d4:74:4a:d6:08:0d:59:44:
b4:21:87:e2:9d:a4:4b:a5:bf:91:bf:0c:68:8c:5c:ff:13:fb:
45:57:30:35:10:38:d4:c1:e7:28:c1:57:ad:de:d1:1d:41:38:
b6:68:95:e4:52:a2:82:cb:6a:19:5e:3c:64:ec:2d:9b:ca:c7:
e9:76:a0:09:da:54:8b:24:e7:91:8d:1b:c4:a9:f8:ea:40:13:
cf:2e:c2:9d:49:66:1e:ab:69:13:49:f7:3d:8a:ad:5c:d3:59:
92:97:fc:68:76:0f:79:92:16:d4:87:c5:2d:62:39:ab:56:c1:
8e:5e:0f:35:2f:14:0d:50:a9:73:bf:18:e6:99:b3:77:35:7f:
16:9e:e9:ec:82:f0:0a:39:48:0a:dd:16:b4:62:c0:96:53:fb:
93:39:8b:4a:4f:fa:b2:88:56:f9:01:fe:3c:2b:30:5b:38:2a:
91:8e:05:86:66:da:0d:56:ca:83:67:64:cc:98:10:0e:91:84:
46:66:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:12 2025 by rpki-client