Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BPnLchZ5eaff_Txl2HsyiCoZeD8.roa
File: BPnLchZ5eaff_Txl2HsyiCoZeD8.roa (raw, json)
Hash identifier: ea2YSPSOGF9z6JHafxJIW9lVHsadoP3mGOg/OZ8Dh7U=
Subject key identifier: 04:F9:CB:72:16:79:79:A7:DF:FD:3C:65:D8:7B:32:88:2A:19:78:3F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C2A1396EA2B05B36BE9A34D047BD
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BPnLchZ5eaff_Txl2HsyiCoZeD8.roa
Signing time: Wed 01 Jan 2025 19:48:41 +0000
ROA not before: Wed 01 Jan 2025 19:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 14.102.16.0/22 maxlen: 24
103.138.79.0/24 maxlen: 24
107.150.168.0/24 maxlen: 24
107.150.172.0/24 maxlen: 24
162.218.176.0/24 maxlen: 24
162.218.179.0/24 maxlen: 24
167.160.0.0/24 maxlen: 24
167.160.3.0/24 maxlen: 24
185.192.212.0/24 maxlen: 24
185.192.215.0/24 maxlen: 24
185.203.148.0/24 maxlen: 24
185.203.151.0/24 maxlen: 24
185.212.172.0/24 maxlen: 24
185.212.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c2:a1:39:6e:a2:b0:5b:36:be:9a:34:d0:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04f9cb72167979a7dffd3c65d87b32882a19783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:b7:83:16:39:88:78:b9:fd:04:fc:94:17:
2d:84:ad:5a:d0:d1:af:34:ae:2a:97:70:81:e5:38:
cb:5e:67:a6:27:fc:eb:76:f5:db:12:a2:75:a1:ff:
d2:99:e0:f4:c5:19:99:05:af:e6:95:8b:5a:5d:69:
d9:0e:f0:cc:da:3b:94:1a:1e:ab:11:4d:61:e1:ff:
52:fd:90:e9:6c:ae:09:32:ef:a9:10:6b:ff:b1:9b:
0a:8a:6d:d3:5c:bc:36:c0:e3:59:14:0e:7a:9c:d3:
c6:0c:a4:96:ff:55:bc:ba:19:0c:e9:17:0d:3a:4b:
85:81:6d:87:86:62:53:08:32:36:da:98:87:f8:01:
35:c4:2a:a5:2b:ee:5a:e5:5b:af:ad:6d:1d:c9:56:
2c:88:46:6c:e2:b6:fe:b5:27:3c:87:8b:ce:97:8f:
e5:3f:77:b6:61:e5:48:ad:42:f9:3e:af:dd:90:e3:
b6:28:ef:0f:02:68:60:a4:6e:b4:25:61:ee:3c:25:
a9:bd:0d:54:df:80:87:de:b3:6b:27:66:ca:a1:d7:
4e:42:b6:93:c4:00:d6:cb:12:94:c5:5d:56:a0:eb:
32:32:da:ac:c8:aa:ff:8c:72:36:26:a3:57:38:13:
0b:1a:08:ef:2c:3a:72:c4:b4:86:52:c0:c8:b4:f7:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:CB:72:16:79:79:A7:DF:FD:3C:65:D8:7B:32:88:2A:19:78:3F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BPnLchZ5eaff_Txl2HsyiCoZeD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.16.0/22
103.138.79.0/24
107.150.168.0/24
107.150.172.0/24
162.218.176.0/24
162.218.179.0/24
167.160.0.0/24
167.160.3.0/24
185.192.212.0/24
185.192.215.0/24
185.203.148.0/24
185.203.151.0/24
185.212.172.0/24
185.212.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:21:5c:86:1e:8f:ed:f5:49:60:59:57:d8:fd:8e:a4:61:2b:
82:33:03:f3:8b:0d:c3:76:68:bd:41:48:a1:ac:d3:65:90:db:
d0:01:54:2a:42:3f:83:bc:b9:cd:0c:9f:c1:fe:10:4d:9c:a3:
36:36:0e:1d:98:ac:04:46:3b:45:18:a4:1d:1e:23:d6:54:d8:
35:c5:b9:af:28:bd:47:f7:e6:8e:53:3f:83:00:0d:fb:36:40:
8a:de:64:d7:83:4e:97:40:4e:f2:4e:d2:e7:18:4c:34:95:8b:
f8:0e:a0:b1:e1:c7:5f:f3:20:cd:07:57:ee:bb:36:18:84:b4:
e1:55:b1:e8:43:d7:cd:2c:fc:9c:03:6d:72:77:a2:3c:53:f2:
17:e6:05:f0:b6:a8:bb:0d:0a:20:d2:d4:22:0c:be:a8:62:6b:
44:2d:71:f1:60:db:72:79:2c:0a:82:ca:12:53:b9:f0:1b:de:
94:ad:3c:02:4c:a1:b4:d3:80:3c:4a:ba:44:94:23:ac:af:e5:
7b:e9:ab:9b:8c:12:0f:8d:a3:c6:e4:15:ba:b3:1b:d6:3e:08:
d5:c8:0f:b9:73:8b:75:1c:59:d3:01:44:09:b8:03:c3:dc:d4:
c7:40:7c:10:6e:35:62:90:6a:75:1a:00:cb:54:1d:a6:85:01:
67:01:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:24:26 2025 by rpki-client