Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BCuCDqT5sGNe8ZNRtcsDBKzkX7Q.roa
File: BCuCDqT5sGNe8ZNRtcsDBKzkX7Q.roa (raw, json)
Hash identifier: K0haCCmcMIKPwgAMwmP/cNWq401frX1yJHe8duYemAk=
Subject key identifier: 04:2B:82:0E:A4:F9:B0:63:5E:F1:93:51:B5:CB:03:04:AC:E4:5F:B4
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BCFDE04334289D2B5F196495C81C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BCuCDqT5sGNe8ZNRtcsDBKzkX7Q.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201519
IP address blocks: 81.15.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bc:fd:e0:43:34:28:9d:2b:5f:19:64:95:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042b820ea4f9b0635ef19351b5cb0304ace45fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:78:87:5e:e7:fc:53:a6:47:80:6e:75:f8:
e7:14:e6:a6:83:c9:cf:a7:46:c3:42:a7:2b:24:87:
9e:98:3f:db:29:2d:89:a3:c9:a4:e9:7e:03:70:2e:
ea:e5:00:76:04:d8:ec:97:32:63:93:e9:79:58:11:
b5:5a:5c:96:15:7d:47:2b:87:0f:59:85:8d:3b:08:
31:f3:59:ff:ee:2d:46:a3:17:b3:2b:42:26:14:f9:
9a:f6:0d:51:35:ee:c2:0a:18:37:8e:98:c2:2a:b6:
f2:aa:20:49:d1:f3:34:1f:8c:3e:7b:ec:5c:64:79:
97:cd:d8:27:9d:33:59:cf:a2:96:2d:c1:0e:d7:a2:
08:b8:89:6d:b4:c4:96:42:33:ca:f2:6e:93:0f:ec:
19:1b:26:90:f3:4b:bc:42:2f:7a:0b:a2:c7:8e:9e:
d6:5f:ed:47:f3:6c:d2:9e:ad:cf:b9:aa:91:a9:82:
fe:8d:c6:14:20:da:e5:bd:67:4d:25:0d:1a:2a:13:
0d:cd:e6:a2:e8:2c:9e:dc:23:95:c2:84:60:05:ea:
18:86:65:75:a6:06:1f:77:5a:ae:91:98:a8:76:51:
80:50:f9:b9:35:de:cb:1e:a9:99:f1:08:b4:33:2c:
08:ef:7e:58:b1:b0:84:f2:e9:9b:5d:a2:a1:28:53:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2B:82:0E:A4:F9:B0:63:5E:F1:93:51:B5:CB:03:04:AC:E4:5F:B4
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/BCuCDqT5sGNe8ZNRtcsDBKzkX7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.144.0/24
Signature Algorithm: sha256WithRSAEncryption
76:18:3c:63:f5:3f:e5:89:e2:f6:23:b7:47:c2:8c:41:44:d0:
39:29:95:e5:3d:4f:54:6c:e4:57:2a:a0:5a:95:b8:e7:41:3e:
38:e2:c8:36:9c:72:6e:5a:9b:c8:7e:08:87:05:b3:8b:13:96:
5f:c5:10:90:26:7d:8e:d7:a3:97:1d:8a:43:9f:53:7b:89:61:
e4:ca:63:7e:4d:ff:f2:28:82:bd:c4:a8:f0:03:e0:54:5d:fe:
f6:b2:08:2d:0b:c9:13:77:c9:21:bb:64:ac:15:5f:d0:7f:cf:
a5:7b:ea:71:66:5f:f2:43:29:f8:1f:ca:4c:34:b2:96:f8:13:
19:3d:11:fc:75:5f:42:eb:ec:59:70:ff:6b:2b:33:b5:64:96:
0f:3a:76:4f:93:04:ee:f3:4a:80:0d:76:28:46:1a:cf:13:97:
cf:3b:3d:64:77:08:0a:16:4d:0d:a3:32:f4:4f:a6:af:3d:9c:
04:bf:bf:90:e4:dc:15:0c:75:c5:1a:1e:93:a5:af:24:60:b7:
b5:89:03:87:fd:c4:b4:70:35:05:2d:e7:e9:99:d4:2a:e8:71:
05:07:41:48:2f:8a:e9:69:43:f6:d1:0a:32:6d:d6:b7:64:c7:
48:1f:13:da:ad:45:d4:3b:33:79:96:8e:a5:74:10:c0:2a:fe:
73:97:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:09 2025 by rpki-client