Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BGb8PojootywM4xUz8SL8PtxAYc.roa
File: BGb8PojootywM4xUz8SL8PtxAYc.roa (raw, json)
Hash identifier: SIRukHSOrZT0due7Q616vCv6geHpHEjEOM8wyPhbMho=
Subject key identifier: 04:66:FC:3E:88:E8:A2:DC:B0:33:8C:54:CF:C4:8B:F0:FB:71:01:87
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8B4F9CDBC53A32BF646BA256BC79
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BGb8PojootywM4xUz8SL8PtxAYc.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 46.173.240.0/21 maxlen: 21
91.233.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:4f:9c:db:c5:3a:32:bf:64:6b:a2:56:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0466fc3e88e8a2dcb0338c54cfc48bf0fb710187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:0f:1f:4a:0b:0c:f4:23:f4:e8:e3:1d:2c:
d2:7e:61:77:54:54:68:59:a7:48:8e:b9:79:47:9c:
d2:41:9c:35:aa:90:88:b8:5d:43:30:cc:21:a4:f2:
26:65:09:13:a2:ba:01:68:f2:65:d6:c7:12:e4:8c:
12:a7:3d:3d:ff:8a:63:74:93:dd:cc:96:bc:bd:e1:
00:62:62:64:d7:a2:d8:fc:2f:44:a4:95:b8:c4:3b:
62:14:3a:fd:07:70:34:81:8c:fe:d3:04:7a:00:81:
fd:32:43:f8:ab:a1:69:20:05:cb:14:3d:ef:5f:b9:
9c:b3:7c:93:a9:c4:58:10:2a:3a:b7:b4:94:c1:e1:
11:be:92:ce:a3:ec:d5:a0:47:68:ac:f6:2d:00:5c:
92:c2:bf:45:2d:e7:01:a7:57:70:e7:7c:1d:03:6a:
e1:27:24:38:75:6d:f8:5f:f4:f7:6e:b8:23:c8:cf:
94:7a:5b:66:6b:d6:77:a3:84:b5:67:a4:3f:c0:ec:
3d:9a:47:c8:32:65:f9:38:c6:0b:ea:21:39:3c:2b:
62:02:50:87:ab:6e:a3:db:64:36:71:ca:43:98:0c:
a1:21:aa:ea:8a:cf:dd:dd:63:fc:9c:b7:2e:4e:b5:
25:44:53:8d:5d:8b:af:7f:cd:5b:b1:a4:d9:7a:d7:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:FC:3E:88:E8:A2:DC:B0:33:8C:54:CF:C4:8B:F0:FB:71:01:87
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BGb8PojootywM4xUz8SL8PtxAYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
91.233.0.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:32:65:3a:da:f0:23:3e:5c:ba:79:1a:9a:74:3f:26:0b:73:
97:71:60:02:3f:e2:e1:8c:8a:24:d2:9e:d2:1f:8a:a7:b7:73:
e5:20:dc:4a:bc:7b:ad:7f:1b:c8:15:9b:00:74:48:f4:a3:92:
65:63:85:59:b1:65:3d:79:57:7f:24:e3:55:8a:78:41:cf:85:
7b:f6:95:79:06:7e:51:8e:57:44:4a:c3:be:f4:a3:a9:57:dc:
14:cf:01:08:1f:fc:d7:4a:32:6b:81:05:f4:59:2b:58:91:bd:
8a:c8:87:36:ec:cc:c3:08:cf:6a:0f:4d:e7:71:3a:d5:01:94:
fb:6d:3a:20:12:c2:01:dd:7b:78:6b:c2:1c:41:1e:e2:5a:5f:
f2:04:b8:aa:f5:d3:5b:e1:3c:bc:72:e0:58:d3:61:36:d5:32:
ff:f3:64:8f:10:96:fd:e0:2e:6f:fa:f9:0c:10:6b:1c:ef:c3:
18:3a:78:26:56:ce:95:68:23:aa:1e:0e:ec:1f:e5:06:47:03:
63:fa:2c:07:d5:a8:1d:cb:77:d6:36:8b:36:54:b4:5a:16:e7:
fe:b5:9a:a4:66:e8:ac:0b:a3:fd:b9:6f:53:3a:7f:29:e1:a8:
2f:ab:9f:62:f4:ad:e7:d7:3d:4a:d6:06:b4:c0:49:6d:63:e3:
ff:aa:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:06 2025 by rpki-client