Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/BOWQbfcOHD5Kwd0MrFPYPznyYvU.roa
File: BOWQbfcOHD5Kwd0MrFPYPznyYvU.roa (raw, json)
Hash identifier: iYL//vWmaUWG68hTsot53RYzmLFMRclo6dUdsJGke28=
Subject key identifier: 04:E5:90:6D:F7:0E:1C:3E:4A:C1:DD:0C:AC:53:D8:3F:39:F2:62:F5
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 018CC49241C0F34964FEB433C4F6A1FD6695
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/BOWQbfcOHD5Kwd0MrFPYPznyYvU.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54900
IP address blocks: 45.139.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:41:c0:f3:49:64:fe:b4:33:c4:f6:a1:fd:66:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04e5906df70e1c3e4ac1dd0cac53d83f39f262f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:ce:18:9c:88:33:c7:ed:b8:f7:8c:aa:8d:
4d:d6:3a:07:b6:8b:e4:32:40:ff:80:c1:89:1c:69:
6e:73:0e:f4:06:b0:be:19:53:43:7c:a8:6a:ef:fb:
a9:60:96:b4:c2:8e:fc:28:0e:af:57:cc:f7:26:71:
ff:f1:39:cc:ef:8f:41:10:0e:35:72:ce:10:34:7e:
b6:44:9b:f1:1d:7d:32:f1:03:65:7b:7c:da:c1:40:
b0:cc:20:5d:2f:14:ed:22:7c:27:4c:01:e8:fa:47:
83:40:b9:7f:e9:f3:4f:61:9a:a8:9d:b7:f1:cd:11:
d8:06:01:5e:73:87:45:de:a9:66:99:64:17:8c:35:
d8:8f:34:ad:50:51:04:c8:c4:c8:c1:a1:87:99:e1:
c9:09:fc:75:ed:03:c2:a6:d8:f7:dc:d9:dc:77:68:
69:30:22:55:09:59:7b:0d:f4:3c:4d:a1:56:d8:74:
e2:81:93:83:b4:e0:45:93:bf:fb:5b:ef:7d:a5:85:
c1:25:ec:b4:1c:10:3e:4a:65:6f:2e:6c:0e:21:c1:
59:42:42:1f:a0:b7:23:7e:4b:70:55:b4:8d:ac:d3:
0e:2d:8e:6a:a9:e6:82:95:5d:38:47:c6:1d:45:05:
7e:a7:50:77:25:48:2b:68:39:49:6d:e6:10:ed:49:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:90:6D:F7:0E:1C:3E:4A:C1:DD:0C:AC:53:D8:3F:39:F2:62:F5
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/BOWQbfcOHD5Kwd0MrFPYPznyYvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.208.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:5c:0c:95:4b:b3:78:4e:5d:53:cc:0b:32:af:04:ce:96:74:
23:ce:f7:58:b3:f6:7d:d0:f7:6d:64:ab:b2:b1:64:22:5e:e1:
4a:1f:dd:19:e8:22:de:b5:4d:be:22:1a:f6:0b:31:20:e7:9e:
52:0e:61:8e:f3:3e:21:c9:8c:9b:b0:21:c5:f7:f2:2b:04:85:
1b:70:cc:65:d2:61:0e:92:94:e1:25:6f:02:b2:3f:d5:0c:c5:
52:6c:47:a9:2a:e4:e6:6d:b3:28:80:b8:f3:86:5e:89:f5:62:
51:bc:f9:3b:19:66:5f:48:a6:3d:fb:ae:69:85:1e:82:db:28:
56:b6:89:6a:42:5d:7f:66:7c:77:77:6d:01:f1:84:57:b5:15:
b8:1d:ea:89:fc:f8:ce:4b:77:a7:d9:37:06:3c:a3:2c:41:59:
0a:7b:c4:d7:ca:cf:54:b0:64:e1:27:20:75:d3:eb:d6:09:52:
49:4e:0f:dc:1d:4f:01:18:e1:47:28:59:8b:f3:45:92:75:ad:
fb:4a:81:f5:b8:e8:9f:01:d4:41:3c:b7:da:9d:0c:b3:48:99:
b2:cd:8d:6f:9f:3a:b0:b4:45:1b:e9:95:4c:88:11:a4:7f:26:
9e:55:f6:c8:ca:7c:c3:4b:45:65:ab:88:7f:39:95:b0:10:3e:
c8:5c:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:11 2025 by rpki-client