Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/BdOIN-x7p5NQNZFat3HBRk8aNP8.roa
File: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (raw, json)
Hash identifier: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=
Subject key identifier: 05:D3:88:37:EC:7B:A7:93:50:35:91:5A:B7:71:C1:46:4F:1A:34:FF
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 019425FDB3AFCB15D426F2BEDC9ED18E0099
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/BdOIN-x7p5NQNZFat3HBRk8aNP8.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209454
IP address blocks: 2a03:4bc0:3150::/48 maxlen: 48
2a03:4bc0:3151::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b3:af:cb:15:d4:26:f2:be:dc:9e:d1:8e:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d38837ec7ba7935035915ab771c1464f1a34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:1d:54:ee:09:8f:5c:35:30:cd:2a:57:a7:
7e:de:cc:90:9b:07:fa:b9:5a:c3:67:fa:45:79:f9:
4e:1c:ea:74:69:f6:90:58:a1:1d:a6:2b:8e:6e:b4:
0a:f6:d0:f9:bc:96:03:7b:4b:7b:97:9d:71:af:59:
b6:3d:ba:cc:23:30:c0:ed:a8:dd:d3:0e:d2:96:c9:
56:3f:a6:74:01:21:92:62:eb:88:b9:2e:33:80:1c:
87:fe:25:8d:ee:4a:c1:69:69:1b:6b:3c:5c:b4:3c:
84:fd:14:2a:b1:31:c2:68:1e:f3:54:47:3a:a9:81:
53:57:93:f3:da:b3:89:5c:13:da:54:f2:09:b9:1c:
f0:6d:ba:06:d5:85:f5:99:43:46:14:d8:6f:cc:47:
f3:c8:d2:e3:ec:e1:f4:2a:b8:4f:cc:e2:0d:bc:4e:
be:15:d9:fc:04:98:5e:7a:75:0d:38:c4:dd:b1:27:
4a:95:e4:d4:7a:29:87:79:1e:e0:ec:e2:79:74:22:
f3:5f:bb:37:d4:e5:a7:69:11:17:33:36:1a:ad:54:
e9:4b:54:8d:02:82:47:c3:c2:31:11:d7:56:d3:c8:
49:62:58:11:e5:a1:9f:a7:9e:89:e9:f2:25:af:3a:
52:7b:64:0b:9a:0a:97:d1:bc:4c:c0:8d:0a:71:c6:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:88:37:EC:7B:A7:93:50:35:91:5A:B7:71:C1:46:4F:1A:34:FF
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/BdOIN-x7p5NQNZFat3HBRk8aNP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:4bc0:3150::/47
Signature Algorithm: sha256WithRSAEncryption
61:e1:d3:65:ad:8b:49:eb:4c:10:e5:7b:10:ae:eb:eb:a9:94:
b3:34:76:8f:df:b6:3e:5e:3d:aa:7d:8d:9a:03:0b:21:89:f5:
e4:69:e3:5c:cb:ac:30:14:72:e7:b2:b7:fc:ca:71:db:50:aa:
78:68:fc:4c:45:e4:ab:fb:00:10:d0:58:52:66:43:08:f7:5a:
93:c9:58:11:6d:06:e3:8f:56:68:cc:cb:36:a3:12:68:6f:05:
3d:3a:1b:cd:63:69:9d:3e:d8:17:33:c4:a0:b5:3e:2f:92:88:
89:fb:28:fc:d4:4b:3d:ba:71:fc:d6:dc:bb:a8:28:d5:f8:b7:
9d:95:9d:27:2b:f3:c7:09:d2:f8:a7:bc:23:93:d8:88:a1:52:
1a:b5:18:99:83:3c:9a:45:93:b0:a3:e9:4f:6d:82:3e:70:8c:
78:55:14:ce:7d:2e:66:35:9e:95:74:14:4c:8b:93:97:ae:3a:
91:29:34:83:06:41:a1:3c:b3:32:24:f1:17:ef:8b:08:43:39:
74:cf:24:e6:2f:6c:cb:9e:42:b8:ec:28:8c:17:39:c5:0c:e3:
45:ba:c3:0c:a9:35:2e:6e:17:37:99:fb:1b:3c:08:46:7f:51:
dd:d6:0a:d7:3a:c7:b3:fe:53:3f:f1:8b:8c:83:cd:22:02:58:
ce:43:a0:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/bOvyxXUJvK+3J7RjgCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDA3NGFhODQ0OTgzMGRhOWIyMGIzYWZiMDY4MmQzYzAz
MmY5ZmUwHhcNMjUwMTAyMDc0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWQzODgzN2VjN2JhNzkzNTAzNTkxNWFiNzcxYzE0NjRmMWEzNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXgdVO4Jj1w1MM0qV6d+3syQmwf6
uVrDZ/pFeflOHOp0afaQWKEdpiuObrQK9tD5vJYDe0t7l51xr1m2PbrMIzDA7ajd
0w7SlslWP6Z0ASGSYuuIuS4zgByH/iWN7krBaWkbazxctDyE/RQqsTHCaB7zVEc6
qYFTV5Pz2rOJXBPaVPIJuRzwbboG1YX1mUNGFNhvzEfzyNLj7OH0KrhPzOINvE6+
Fdn8BJheenUNOMTdsSdKleTUeimHeR7g7OJ5dCLzX7s31OWnaREXMzYarVTpS1SN
AoJHw8IxEddW08hJYlgR5aGfp56J6fIlrzpSe2QLmgqX0bxMwI0KccZDfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAXTiDfse6eTUDWRWrdxwUZPGjT/MB8GA1UdIwQY
MBaAFLZAdKqESYMNqbILOvsGgtPAMvn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEt
MzUxNzFhZWRkMzEzLzEvQmRPSU4teDdwNU5RTlpGYXQzSEJSazhhTlA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mYzdjODItMzE1OS00ZDU0LWEwYTEtMzUxNzFhZWRkMzEz
LzEvdGtCMHFvUkpndzJwc2dzNi13YUMwOEF5LWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgNLwDFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBh4dNlrYtJ60wQ5XsQruvrqZSzNHaP37Y+Xj2q
fY2aAwshifXkaeNcy6wwFHLnsrf8ynHbUKp4aPxMReSr+wAQ0FhSZkMI91qTyVgR
bQbjj1ZozMs2oxJobwU9OhvNY2mdPtgXM8SgtT4vkoiJ+yj81Es9unH81ty7qCjV
+LedlZ0nK/PHCdL4p7wjk9iIoVIatRiZgzyaRZOwo+lPbYI+cIx4VRTOfS5mNZ6V
dBRMi5OXrjqRKTSDBkGhPLMyJPEX74sIQzl0zyTmL2zLnkK47CiMFznFDONFusMM
qTUubhc3mfsbPAhGf1Hd1grXOsez/lM/8YuMg80iAljOQ6DS
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:55 2025 by rpki-client