Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/bkRmQjWJBwfVbU9ajVJMWkV5o2M.roa
File: bkRmQjWJBwfVbU9ajVJMWkV5o2M.roa (raw, json)
Hash identifier: KZexUAxxU1qIxkA02gdRcX28VbUHePiJNmc8TfYPkzk=
Subject key identifier: 6E:44:66:42:35:89:07:07:D5:6D:4F:5A:8D:52:4C:5A:45:79:A3:63
Certificate issuer: /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial: 046A8A
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/bkRmQjWJBwfVbU9ajVJMWkV5o2M.roa
Signing time: Tue 01 Mar 2022 20:17:42 +0000
ROA not before: Tue 01 Mar 2022 20:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.46.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289418 (0x46a8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Validity
Not Before: Mar 1 20:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e44664235890707d56d4f5a8d524c5a4579a363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:63:a5:c5:4a:7a:90:27:21:1f:dc:28:14:65:
19:e0:06:dc:52:73:72:6d:ba:90:3a:a6:a9:95:bc:
00:b2:9b:94:ff:75:c9:2b:1d:cb:98:8f:ac:cf:42:
06:d2:8e:d9:f3:97:f2:4b:aa:18:97:b2:8d:04:7a:
73:38:54:b9:23:54:63:7d:b3:07:ef:5c:9b:d4:76:
11:d4:2b:bd:24:0c:c8:b8:b5:22:67:67:f5:3f:68:
74:4c:1f:cb:ea:a5:8c:49:c7:e9:c7:94:f4:ac:c1:
43:07:56:a3:15:fe:3c:f0:26:fd:f5:54:0c:79:44:
14:08:00:e9:f7:b3:42:af:64:6d:ac:34:61:67:54:
7d:7e:9e:ee:b9:db:72:54:26:98:e9:93:38:e6:3f:
f9:e0:00:e1:fb:20:1c:24:72:d7:bf:bf:17:09:39:
ef:c0:47:49:de:59:42:84:41:10:f5:9e:a4:4c:81:
11:df:3e:4a:de:41:fb:a4:72:51:b7:78:c6:7f:8e:
9f:ac:b2:b2:5f:2c:b6:23:ba:93:11:56:8a:20:32:
62:44:b8:8e:4a:08:08:4e:f1:01:7c:ec:22:28:ce:
cb:5a:e8:d7:0e:47:42:fc:d0:be:79:f9:e7:91:1f:
24:c8:d9:e6:59:75:f5:5f:84:4e:9c:ca:2b:21:03:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:44:66:42:35:89:07:07:D5:6D:4F:5A:8D:52:4C:5A:45:79:A3:63
X509v3 Authority Key Identifier:
keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/bkRmQjWJBwfVbU9ajVJMWkV5o2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b4:77:c9:b3:f9:91:f5:bf:dd:d4:b2:0e:f3:c6:d5:4a:c8:
59:6d:90:7e:e0:57:1b:cc:77:05:a6:c2:f0:83:fb:f2:e9:4f:
30:80:08:83:bc:38:60:48:f5:b7:8f:60:8e:dd:4f:b5:61:35:
a2:3b:b6:04:11:40:a8:08:10:b7:25:c9:d8:21:87:75:6e:0d:
05:b1:92:21:e3:28:ed:da:b9:55:08:31:32:9d:3a:d6:c2:76:
db:36:c1:05:ea:fd:4d:66:ba:39:5c:39:5f:5a:77:70:5f:e2:
24:02:a7:12:eb:46:26:d8:15:1d:68:63:4f:4f:3d:be:9a:62:
98:a3:de:fd:e0:a5:ee:1a:96:ad:b3:d3:f9:8e:51:c1:40:d1:
ac:b7:b5:d1:33:7e:50:79:c1:80:90:39:1d:c9:6e:b1:2c:29:
7d:fb:7e:7b:13:db:5c:f9:40:8b:f1:a8:f1:2e:7a:58:46:55:
cd:fb:ac:b4:67:4c:2e:99:31:df:81:9f:c3:f9:d5:11:ff:d3:
82:ba:c2:5c:76:b0:86:9a:d2:47:53:76:6a:21:53:47:70:00:
75:6c:e7:66:fd:9c:e3:d9:89:a6:25:d4:07:ad:91:b1:ca:a7:
64:fb:8a:75:00:f2:08:93:c5:ab:dc:a6:15:79:1e:85:65:5c:
87:24:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:34 2025 by rpki-client