Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BTHS_JckO9fSDpmUU7xQLBeob8c.roa
File: BTHS_JckO9fSDpmUU7xQLBeob8c.roa (raw, json)
Hash identifier: RSK2HbvLy/gmW75b7HVw74vQNfYRXN6Rk1A9wXRTqR8=
Subject key identifier: 05:31:D2:FC:97:24:3B:D7:D2:0E:99:94:53:BC:50:2C:17:A8:6F:C7
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E8FF952CDF271E19589E69B63DE5C115C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BTHS_JckO9fSDpmUU7xQLBeob8c.roa
Signing time: Sat 30 Mar 2024 15:27:45 +0000
ROA not before: Sat 30 Mar 2024 15:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:f9:52:cd:f2:71:e1:95:89:e6:9b:63:de:5c:11:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 30 15:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0531d2fc97243bd7d20e999453bc502c17a86fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:fc:c7:4d:aa:3d:b9:f6:bd:4f:f1:a8:43:
c5:1a:22:f0:65:b3:72:20:29:23:d3:97:55:bf:51:
9b:8c:5a:86:20:4a:18:03:72:34:35:a3:57:8c:b8:
ac:12:c8:c4:13:89:f2:df:04:e6:27:fb:4c:28:81:
ac:b0:3f:6d:f0:83:f3:91:db:00:94:52:77:80:82:
0b:2f:47:56:5e:52:2c:c1:56:77:df:46:b1:52:72:
70:a7:74:38:b3:1a:28:3d:58:ba:6c:12:d5:f3:6c:
12:9d:d7:cd:ce:cb:79:eb:18:c3:e0:10:66:74:0d:
09:a9:ff:43:ae:b1:5a:fc:35:85:9f:f6:eb:ee:f2:
22:22:3c:74:31:88:22:28:5e:e9:44:4a:ac:9f:a1:
be:1d:d9:22:4e:c2:81:c7:c2:9f:48:16:4f:f8:b7:
f2:0b:61:db:8a:79:be:1d:3a:fc:cc:a3:0c:fe:49:
e2:ba:39:b4:76:d4:9d:6e:f7:1b:19:10:91:ae:1b:
4b:12:73:b9:d9:72:84:ac:63:06:44:98:6b:f2:d5:
53:25:71:1f:e9:67:56:03:6a:ca:d5:e4:ab:60:12:
f5:c5:fe:86:75:96:d8:87:dc:0a:53:dc:9a:8a:11:
d3:05:4a:8c:f4:4e:a2:0d:34:3e:61:df:05:4f:53:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:D2:FC:97:24:3B:D7:D2:0E:99:94:53:BC:50:2C:17:A8:6F:C7
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/BTHS_JckO9fSDpmUU7xQLBeob8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.16.0/20
Signature Algorithm: sha256WithRSAEncryption
84:7d:cf:e1:4f:25:46:fd:6d:7b:7d:a0:c5:9e:32:21:d9:36:
ed:b6:4a:9c:36:7e:f5:6e:c1:cb:a4:23:89:9d:0a:f0:49:d8:
1f:56:c9:d5:21:e9:57:c1:66:98:22:c5:90:db:ac:cd:48:aa:
6f:0b:48:92:0c:bc:56:81:76:a1:02:0e:5c:ba:91:e9:7b:e2:
f3:7e:50:50:ed:e7:10:5e:6c:ff:20:fb:18:ee:26:34:94:b8:
f6:4d:c9:3a:96:9e:6d:95:12:90:aa:b9:cc:41:b5:3f:78:ff:
55:6b:5d:c8:54:a0:c5:fe:2d:bf:36:e7:5b:21:d8:b0:ca:50:
14:c5:de:29:90:b6:eb:66:a4:eb:44:70:e6:79:b8:ce:db:c2:
44:3e:61:aa:b9:dc:5a:10:c3:52:6d:72:48:4d:c8:a6:bc:31:
bd:82:0c:29:f9:f9:0d:a0:d3:8a:7e:77:41:ea:d2:77:d3:4c:
0b:12:02:d5:15:bc:a2:1e:28:c6:fb:3b:db:6c:79:45:16:cb:
ef:1b:3b:7e:51:44:39:65:09:92:de:15:1b:50:a3:28:4f:73:
ab:a5:e4:61:de:6c:cc:01:20:e6:07:f6:e3:2e:2f:97:cd:4d:
eb:4a:7d:78:d0:e4:d4:a5:65:11:ca:e9:de:3a:e9:fa:21:6e:
71:2c:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:42 2025 by rpki-client