Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BnPwGmnzqKEyhR2bB1-NT-mPzDo.roa
File: BnPwGmnzqKEyhR2bB1-NT-mPzDo.roa (raw, json)
Hash identifier: VvC9FL6bd0HiinGx0OnXo4B5xNg4cTjjKSNSroVxZcA=
Subject key identifier: 06:73:F0:1A:69:F3:A8:A1:32:85:1D:9B:07:5F:8D:4F:E9:8F:CC:3A
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195C3E6601D6D6E4825BC0C281687DAC2DE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BnPwGmnzqKEyhR2bB1-NT-mPzDo.roa
Signing time: Sun 23 Mar 2025 16:46:49 +0000
ROA not before: Sun 23 Mar 2025 16:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.229.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:e6:60:1d:6d:6e:48:25:bc:0c:28:16:87:da:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 23 16:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0673f01a69f3a8a132851d9b075f8d4fe98fcc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:e3:4f:81:33:03:cb:a0:0b:0b:9d:6b:5b:
e0:c0:c6:9a:59:3f:a8:18:52:3f:39:03:c9:84:e3:
fb:2c:59:b5:ca:49:61:9e:cf:9c:6e:d3:c0:d6:d0:
65:6c:bf:39:9b:43:ca:55:6c:1c:31:7a:47:89:b9:
88:fd:85:2c:9e:e7:90:bf:7e:d8:4f:49:cc:a9:f6:
f8:ba:c7:7c:a6:e7:c3:a3:06:fc:24:0a:2e:40:18:
f2:c1:b7:3c:1f:f3:14:94:50:28:62:5a:99:67:69:
fc:c5:a2:3e:da:e3:f1:3e:a9:da:9d:96:5a:f4:7d:
c3:80:03:af:6f:65:18:7b:7b:d7:83:89:91:81:0c:
98:ba:84:1e:fe:ab:e4:aa:fb:df:a4:06:10:d4:d5:
bb:6a:37:94:59:a6:31:ac:e2:95:fd:2f:4d:2e:5d:
a1:d0:dc:e2:55:8b:bb:ee:63:13:8b:3b:05:6d:2f:
c1:1b:19:3b:14:a9:08:ff:39:80:8f:e9:1a:17:3f:
23:d0:ca:6e:46:9a:68:67:52:c7:55:7c:5d:a7:e0:
2c:bd:a4:6b:ce:4e:51:57:de:3f:16:ba:d2:27:ae:
a7:2d:b6:76:6e:c9:fc:10:b4:5d:c4:64:3d:c3:90:
82:70:4d:e7:41:84:81:95:60:b2:4f:a9:2a:f7:2d:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:F0:1A:69:F3:A8:A1:32:85:1D:9B:07:5F:8D:4F:E9:8F:CC:3A
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BnPwGmnzqKEyhR2bB1-NT-mPzDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.125.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ce:5c:d0:e4:72:c1:9a:1f:1e:5b:84:9c:d5:cf:4e:65:98:
a1:fc:2c:be:88:ea:33:81:fc:97:6d:31:14:df:3d:3a:ef:74:
be:0b:6d:5b:8c:c9:bb:af:09:d8:5e:0d:7b:1c:0d:e3:c7:af:
2a:08:e6:13:5e:32:70:4f:6b:53:ef:c8:f4:59:ae:fb:92:77:
68:3d:59:5b:8c:55:e1:ed:6f:6d:45:8e:75:42:ea:76:6a:0b:
f9:77:bd:b9:94:4b:e1:c0:96:d0:cf:ab:3b:6c:dc:ee:fc:6c:
63:19:a7:bd:a2:f7:18:b2:fb:dd:40:10:43:15:2b:13:a5:63:
b8:a3:5e:3c:42:e5:5a:a1:50:1d:bc:1e:51:d8:78:34:37:16:
82:16:e2:7b:21:2d:ba:bf:a8:ff:dd:b4:43:ac:ca:2f:14:62:
b5:67:25:62:9d:48:6d:9f:35:d4:a4:ad:80:b6:19:22:36:3b:
90:14:62:9c:7b:5b:af:df:3f:8d:dd:e8:88:ea:68:17:5a:af:
f2:cd:1d:dd:33:f8:b8:e2:e9:56:ea:c0:7e:e9:2d:99:5d:b2:
cc:3d:3d:2d:b4:f5:d5:d7:96:b9:c5:7c:a3:e4:1d:b6:b1:a3:
d9:e5:ef:d9:93:92:89:a6:19:f3:ac:dd:14:bd:eb:8c:fd:01:
f1:a8:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:48 2025 by rpki-client