Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Bbcxb5b8BlUtXI78dBS8ALX1n_I.roa
File: Bbcxb5b8BlUtXI78dBS8ALX1n_I.roa (raw, json)
Hash identifier: 26phTWokyQtplh+9Ozu3DEXgAaqIS5nyX7/OILlJ1Yk=
Subject key identifier: 05:B7:31:6F:96:FC:06:55:2D:5C:8E:FC:74:14:BC:00:B5:F5:9F:F2
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01942C8545D3E966FDEB20E3C2653BBC225C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Bbcxb5b8BlUtXI78dBS8ALX1n_I.roa
Signing time: Fri 03 Jan 2025 14:15:19 +0000
ROA not before: Fri 03 Jan 2025 14:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.150.32.0/24 maxlen: 24
45.150.33.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:85:45:d3:e9:66:fd:eb:20:e3:c2:65:3b:bc:22:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 3 14:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05b7316f96fc06552d5c8efc7414bc00b5f59ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:bc:2e:ed:7a:9a:ff:20:78:f0:80:d3:ee:
29:98:d8:99:28:a2:48:8f:77:f9:a2:0f:2e:bb:c3:
53:a7:20:04:03:30:ea:d2:8e:ec:62:f8:e4:86:30:
85:f2:ec:0e:63:c9:8f:34:65:5b:ec:e2:db:bf:5b:
6f:1f:8f:6d:30:ee:67:7e:cf:ab:22:0d:89:9c:87:
ea:e0:91:16:2a:ba:9d:b3:2d:c6:13:21:7a:6a:ca:
82:62:ff:28:13:9d:91:37:c6:e8:db:02:dd:4f:f6:
c9:3f:0a:e7:ee:2b:14:03:1a:3a:eb:62:e7:c4:7a:
a2:c0:e5:3d:c5:32:f5:46:57:e1:8a:3a:25:05:5b:
7a:44:3b:34:80:fe:28:f0:e2:be:c4:fc:7c:a2:bc:
cb:80:dc:cb:85:1b:ca:82:47:98:d1:bf:cf:d1:4c:
9f:0c:59:2e:2e:bb:04:d1:70:f6:27:96:31:c8:e4:
84:4b:14:a5:ff:1c:18:7b:e2:91:c1:c5:36:d7:c9:
b0:1d:23:80:38:0c:3d:24:5c:2a:27:ab:cf:e8:cd:
45:37:21:aa:46:42:92:a0:ad:88:9c:e9:c9:bc:68:
83:cc:c6:13:82:96:ae:2c:6a:c1:4c:10:2e:a1:00:
9f:c0:f4:a5:29:c0:7d:37:64:4e:85:8b:37:cf:f8:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:31:6F:96:FC:06:55:2D:5C:8E:FC:74:14:BC:00:B5:F5:9F:F2
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Bbcxb5b8BlUtXI78dBS8ALX1n_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/23
104.238.29.0/24
Signature Algorithm: sha256WithRSAEncryption
18:af:e5:00:11:08:30:4f:66:0f:78:91:a6:72:1d:c8:12:31:
45:84:12:c3:49:ec:2e:c8:38:cc:85:20:ea:f6:5d:59:74:b1:
5c:bb:9e:2c:a8:6d:35:f2:b6:08:52:71:41:81:9e:d3:b1:57:
75:4c:df:48:52:8b:7f:fc:ca:de:60:e9:ab:28:ff:44:5a:db:
ab:f5:60:e3:14:1a:4b:1b:51:a3:c7:bf:74:a4:87:7f:58:04:
6e:71:f3:ae:15:38:f9:cd:df:65:ed:d1:3b:27:df:f4:2a:38:
25:00:aa:a9:96:81:84:8a:00:03:6d:2d:29:00:38:4f:9a:9b:
f5:91:83:57:f2:b9:9a:fa:3c:02:a1:ee:24:43:87:cb:d2:2f:
65:2d:91:98:24:6b:f1:89:e1:91:bb:75:43:b2:f1:c1:d4:28:
d7:f3:15:50:10:cd:13:c4:c6:ed:43:91:cc:0b:c2:f7:f4:0f:
9a:db:88:35:46:eb:82:53:26:4b:e6:f2:2b:89:00:e6:31:f5:
8f:50:3c:c4:10:c7:e5:82:15:90:53:71:98:dd:c6:b3:74:23:
d1:de:c1:be:c8:9c:76:b2:ed:56:d9:7e:c0:56:2f:c5:96:9a:
eb:91:45:69:a7:8b:3a:e3:79:3d:71:86:16:10:77:1f:0e:44:
a1:38:9e:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQshUXT6Wb96yDjwmU7vCJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAzMTQxNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWI3MzE2Zjk2ZmMwNjU1MmQ1YzhlZmM3NDE0YmMwMGI1ZjU5ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQe8Lu16mv8gePCA0+4pmNiZKKJI
j3f5og8uu8NTpyAEAzDq0o7sYvjkhjCF8uwOY8mPNGVb7OLbv1tvH49tMO5nfs+r
Ig2JnIfq4JEWKrqdsy3GEyF6asqCYv8oE52RN8bo2wLdT/bJPwrn7isUAxo662Ln
xHqiwOU9xTL1RlfhijolBVt6RDs0gP4o8OK+xPx8orzLgNzLhRvKgkeY0b/P0Uyf
DFkuLrsE0XD2J5YxyOSESxSl/xwYe+KRwcU218mwHSOAOAw9JFwqJ6vP6M1FNyGq
RkKSoK2InOnJvGiDzMYTgpauLGrBTBAuoQCfwPSlKcB9N2ROhYs3z/gydQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAW3MW+W/AZVLVyO/HQUvAC19Z/yMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvQmJjeGI1YjhCbFV0WEk3OGRCUzhBTFgxbl9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZYgAwQA
aO4dMA0GCSqGSIb3DQEBCwUAA4IBAQAYr+UAEQgwT2YPeJGmch3IEjFFhBLDSewu
yDjMhSDq9l1ZdLFcu54sqG018rYIUnFBgZ7TsVd1TN9IUot//MreYOmrKP9EWtur
9WDjFBpLG1Gjx790pId/WARucfOuFTj5zd9l7dE7J9/0KjglAKqploGEigADbS0p
ADhPmpv1kYNX8rma+jwCoe4kQ4fL0i9lLZGYJGvxieGRu3VDsvHB1CjX8xVQEM0T
xMbtQ5HMC8L39A+a24g1RuuCUyZL5vIriQDmMfWPUDzEEMflghWQU3GY3cazdCPR
3sG+yJx2su1W2X7AVi/FlprrkUVpp4s643k9cYYWEHcfDkShOJ40
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:14:27 2025 by rpki-client