Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BJL_NNnNk_-jZvMO4iQ4DK4al5U.roa
File: BJL_NNnNk_-jZvMO4iQ4DK4al5U.roa (raw, json)
Hash identifier: OgT2A8G7y5TKWi8LmX9+sAKfWLNmEQ+mDiN57m0Gvjw=
Subject key identifier: 04:92:FF:34:D9:CD:93:FF:A3:66:F3:0E:E2:24:38:0C:AE:1A:97:95
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018420563685521F64FD85ACBF6E254571B4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BJL_NNnNk_-jZvMO4iQ4DK4al5U.roa
Signing time: Fri 28 Oct 2022 20:43:51 +0000
ROA not before: Fri 28 Oct 2022 20:43:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201763
IP address blocks: 2a06:a005:2100::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:56:36:85:52:1f:64:fd:85:ac:bf:6e:25:45:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 28 20:43:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0492ff34d9cd93ffa366f30ee224380cae1a9795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:5a:58:76:82:b7:af:7e:41:cf:c9:4a:2c:
38:cd:e4:d9:45:ef:91:51:c8:21:f1:e4:36:36:95:
c9:60:a2:c9:83:b1:d3:36:90:5a:22:eb:7d:d1:2f:
14:f0:74:1c:3e:78:af:85:2a:46:f8:41:f3:ef:d9:
26:ec:80:47:b2:9d:06:9c:1b:2b:d3:20:cd:01:98:
c3:33:e7:d6:3d:f1:7f:ac:19:2e:b3:f2:c0:b1:42:
25:ff:17:c8:bd:ef:8d:99:64:9e:75:2d:1c:30:d6:
32:d1:df:9a:64:73:01:40:de:65:ae:dd:7c:3e:06:
21:30:1e:9f:2e:14:59:73:66:01:08:76:85:fe:19:
f2:12:b0:64:a5:ae:41:d1:1b:f6:50:4f:31:92:48:
2a:c5:4d:83:31:b1:20:77:2d:f2:4f:6a:c8:97:8e:
1d:8f:fe:c7:64:78:f2:5a:ca:68:03:20:15:69:4b:
fd:fc:1b:c3:58:39:b6:12:00:f3:88:ea:13:0a:07:
63:d8:17:e8:5a:3d:f9:6b:fa:1c:0f:c5:27:3a:1d:
35:c4:10:60:9e:4a:64:c7:54:7d:1d:b6:3b:f1:9d:
b8:d0:ef:19:ba:c4:b3:a0:df:36:7c:6b:ed:6b:0d:
38:a1:33:26:1e:e4:a7:c7:a6:a8:0a:78:31:3a:ff:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:FF:34:D9:CD:93:FF:A3:66:F3:0E:E2:24:38:0C:AE:1A:97:95
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BJL_NNnNk_-jZvMO4iQ4DK4al5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2100::/44
Signature Algorithm: sha256WithRSAEncryption
2c:ca:f1:66:47:53:9e:f3:f1:7b:45:49:21:6f:bd:72:22:a5:
3a:07:21:0f:91:7e:fe:72:a3:bb:bf:e0:a9:37:b3:24:17:65:
f9:db:15:6d:3b:54:02:f2:35:86:34:20:59:46:ce:9e:b0:f9:
ca:51:9b:11:8b:be:8b:64:c6:a1:6f:ac:4a:49:49:18:01:fe:
78:ae:fb:da:bc:b6:eb:50:9b:bd:63:9e:7a:12:bd:65:73:d3:
f0:9f:22:90:2c:24:aa:46:05:6b:ab:ed:66:fa:0d:4b:6f:1f:
f2:8a:3f:b8:64:b9:a7:d2:09:5d:81:f1:09:5b:d6:09:ff:4e:
7e:bd:1c:20:2c:63:a5:15:0e:85:e6:ac:8f:d7:40:76:6b:11:
4f:8e:57:d1:3d:fc:ef:40:bc:da:76:cc:ff:7e:2d:8a:3d:f0:
2d:36:75:f5:39:59:ce:f3:ec:eb:4f:74:11:32:10:92:de:aa:
6b:64:ff:d7:db:9a:fc:89:61:c6:5b:65:6d:2b:b3:f8:95:fa:
1d:29:ec:43:c6:64:4d:ff:43:3a:40:af:9d:18:18:74:d1:da:
ec:5a:c0:42:2d:be:30:22:0a:50:4d:08:58:ec:ab:7f:5b:4d:
b6:39:a2:54:42:b5:cc:e9:3a:e6:16:4e:e4:24:9e:50:9f:b3:
ad:fc:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:56:32 2025 by rpki-client