Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/bq3CHdF3ToMivmK2PU155LcLlRo.roa
File: bq3CHdF3ToMivmK2PU155LcLlRo.roa (raw, json)
Hash identifier: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=
Subject key identifier: 6E:AD:C2:1D:D1:77:4E:83:22:BE:62:B6:3D:4D:79:E4:B7:0B:95:1A
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 019427B673429D72123EBB8F4F4070FA075C
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/bq3CHdF3ToMivmK2PU155LcLlRo.roa
Signing time: Thu 02 Jan 2025 15:50:56 +0000
ROA not before: Thu 02 Jan 2025 15:50:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 195.189.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:73:42:9d:72:12:3e:bb:8f:4f:40:70:fa:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Jan 2 15:50:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eadc21dd1774e8322be62b63d4d79e4b70b951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:9e:79:36:77:e6:5d:f8:4b:37:21:ad:b9:
dc:1c:ce:ed:29:7b:d3:12:24:58:44:45:f6:67:28:
e5:03:44:5e:9d:28:df:5c:3e:ba:c3:f8:c4:2b:0b:
de:45:0c:73:0a:fa:ff:72:64:3e:36:6e:fb:94:63:
67:75:bb:f2:a1:52:f8:22:e3:9b:22:26:0a:66:20:
fc:10:12:81:61:47:0c:f8:92:00:09:f9:f0:07:3f:
be:54:31:39:16:86:ae:ee:ad:81:f2:51:57:fa:db:
35:6f:6b:0d:d6:b1:d6:5c:14:aa:a7:5f:4e:b4:ee:
a9:89:bb:e6:69:18:c2:94:ed:49:05:71:57:45:d8:
b3:c3:8b:24:18:b9:00:5a:8f:6f:2f:a7:93:b4:22:
70:23:ad:e6:73:4f:41:70:1b:46:15:0b:14:ec:34:
e6:9e:b6:e6:95:53:d1:40:c3:b2:5e:88:83:23:6a:
8c:95:e1:1b:5b:76:8a:01:d3:ee:e6:b5:eb:0e:20:
d4:0f:4e:87:d2:03:11:c2:ef:a6:9b:f4:d1:39:7a:
14:b7:4b:48:24:7f:b5:99:25:d3:8a:c5:01:18:c6:
14:f5:13:8d:5c:b6:8f:b7:56:a2:88:30:a7:85:5f:
b4:aa:01:b9:b5:6d:d4:5d:44:aa:d0:77:5d:8a:d9:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:C2:1D:D1:77:4E:83:22:BE:62:B6:3D:4D:79:E4:B7:0B:95:1A
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/bq3CHdF3ToMivmK2PU155LcLlRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.36.0/22
Signature Algorithm: sha256WithRSAEncryption
74:37:65:a0:70:83:d6:3e:77:2f:4a:74:23:0b:df:4e:08:b3:
88:b4:1a:4a:9c:5a:f3:a7:00:1c:83:ff:29:c6:73:31:6e:64:
21:2d:08:93:21:41:e2:d8:71:a4:64:a1:84:ad:63:c3:ce:08:
f4:79:e4:10:50:1d:d9:30:5c:7f:1f:cd:f2:28:af:95:75:b9:
c1:28:25:29:23:42:00:91:c6:67:4a:64:60:7e:fd:dc:e6:15:
9a:b7:2f:fc:b3:6c:ad:bf:e8:a4:b9:c1:5a:1d:77:b8:67:33:
1c:4b:bf:20:8c:71:84:d2:f9:93:c7:dc:27:25:9c:32:1f:07:
38:a9:3e:02:97:3f:de:fc:73:38:9b:06:42:fd:33:54:8b:41:
e2:8e:c3:45:60:7c:8d:cf:71:c3:2d:ac:94:6e:89:6e:12:5f:
04:3a:3e:bf:ae:76:74:ae:79:7d:7e:87:34:9f:63:cd:83:60:
23:2d:e2:2a:6e:bd:b9:9e:61:3e:aa:f1:8c:57:10:14:36:b7:
9f:e6:2f:cc:1f:ea:8d:b6:38:4d:a1:b1:54:9a:c8:dc:f1:0f:
8d:c1:0e:cd:c4:10:e0:a1:2c:d8:92:2f:3c:c8:4a:65:4c:e6:
33:ad:a2:66:ab:67:a1:84:db:8c:6a:92:c1:94:3a:b3:0f:a7:
90:52:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:46:30 2025 by rpki-client