Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa
File: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (raw, json)
Hash identifier: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=
Subject key identifier: 6F:00:06:F3:6B:E0:BB:FF:9F:DD:7B:AC:DD:5F:F8:34:AD:96:43:24
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D635D350148A42A61518BC4987B6A7
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 45.90.20.0/22 maxlen: 24
45.131.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:d3:50:14:8a:42:a6:15:18:bc:49:87:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f0006f36be0bbff9fdd7bacdd5ff834ad964324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:98:41:23:5b:4a:83:d0:31:7c:c2:63:e7:
c2:c2:8d:92:36:eb:ff:07:cc:4e:c0:4f:cc:b9:10:
5e:eb:b1:b9:44:3b:cd:7d:6f:a9:ba:05:04:0a:d3:
9c:b3:4c:e4:ee:0b:1e:dd:06:07:b8:4f:72:aa:e5:
19:88:4f:9f:fc:64:34:0b:dc:24:71:bc:4c:99:e3:
db:f0:52:f0:06:d6:26:f0:bc:11:25:9b:19:25:90:
ed:bd:05:d2:7c:c1:ff:43:ee:8d:dd:6f:38:54:f7:
19:ed:71:af:4f:85:7b:7d:0f:4e:d1:15:de:2d:99:
4b:1d:97:6d:11:8b:cc:aa:fc:5a:24:c4:d4:98:91:
b8:7e:85:fa:f1:f1:44:6a:c1:ad:2b:36:f2:d8:86:
38:fb:6a:0c:88:d8:75:c9:b3:53:2c:55:08:ac:43:
fb:44:d7:0a:ef:77:ff:f5:8f:c7:e6:0e:43:d0:51:
1a:db:6d:44:9d:b1:6e:12:d3:78:fc:d6:66:0e:bc:
e0:4c:03:fc:1c:9b:ad:8f:c2:1d:7b:74:b2:b1:56:
1c:10:e8:82:77:af:b6:61:0b:7e:b1:80:49:e9:11:
1e:3e:51:96:ab:8c:e0:76:6a:e0:9c:21:6f:05:e7:
16:54:fd:09:2c:54:df:61:cb:36:d5:6c:40:ca:da:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:06:F3:6B:E0:BB:FF:9F:DD:7B:AC:DD:5F:F8:34:AD:96:43:24
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.20.0/22
45.131.76.0/23
Signature Algorithm: sha256WithRSAEncryption
64:08:bc:91:28:fc:f7:79:3b:95:13:10:e9:94:e6:a3:eb:25:
aa:13:f4:7c:f9:a4:8e:cf:ec:27:56:66:5f:50:cb:dd:ad:8d:
97:41:07:f2:97:fa:65:7e:3b:99:6c:e7:02:fa:a8:de:e9:80:
43:67:37:8a:7d:01:d6:21:d2:c7:ee:3a:8b:f8:9c:db:b6:f2:
1e:2f:9e:c4:43:bc:74:32:2c:7b:29:85:31:80:27:17:f5:20:
08:70:12:c3:35:47:6a:cd:1b:04:62:ee:e9:25:fd:2c:e7:0d:
3c:0d:bb:09:32:bb:07:80:6d:7d:d3:c5:09:8f:b1:8f:d6:ef:
20:e3:a9:95:f6:53:6d:bc:86:7b:af:5f:a2:35:a4:90:ad:e4:
c5:78:a5:53:91:24:d9:86:be:68:2c:47:58:bb:00:8c:9c:ad:
bb:92:2a:7c:62:5b:cf:0e:08:ad:ea:50:80:90:b9:53:07:92:
f9:7d:1c:11:b6:09:8d:a6:dd:79:f4:d4:11:6b:f8:ea:9c:5c:
d7:9d:2c:0d:c3:fe:20:c3:7a:24:ff:46:3d:8d:a6:36:e5:16:
f2:53:7a:dc:15:2f:86:7e:6b:1b:c8:0d:f5:69:4d:46:a7:d7:
d2:db:8c:49:e9:95:0f:95:2f:7f:83:bd:66:95:66:a6:cd:fb:
d0:7c:b3:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1jXTUBSKQqYVGLxJh7anMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjUwMTAxMDc0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjAwMDZmMzZiZTBiYmZmOWZkZDdiYWNkZDVmZjgzNGFkOTY0MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz26YQSNbSoPQMXzCY+fCwo2SNuv/
B8xOwE/MuRBe67G5RDvNfW+pugUECtOcs0zk7gse3QYHuE9yquUZiE+f/GQ0C9wk
cbxMmePb8FLwBtYm8LwRJZsZJZDtvQXSfMH/Q+6N3W84VPcZ7XGvT4V7fQ9O0RXe
LZlLHZdtEYvMqvxaJMTUmJG4foX68fFEasGtKzby2IY4+2oMiNh1ybNTLFUIrEP7
RNcK73f/9Y/H5g5D0FEa221EnbFuEtN4/NZmDrzgTAP8HJutj8Ide3SysVYcEOiC
d6+2YQt+sYBJ6REePlGWq4zgdmrgnCFvBecWVP0JLFTfYcs21WxAytp3mwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG8ABvNr4Lv/n917rN1f+DStlkMkMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvYndBRzgydmd1Xy1mM1h1czNWXzROSzJXUXlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVoUAwQB
LYNMMA0GCSqGSIb3DQEBCwUAA4IBAQBkCLyRKPz3eTuVExDplOaj6yWqE/R8+aSO
z+wnVmZfUMvdrY2XQQfyl/plfjuZbOcC+qje6YBDZzeKfQHWIdLH7jqL+JzbtvIe
L57EQ7x0Mix7KYUxgCcX9SAIcBLDNUdqzRsEYu7pJf0s5w08DbsJMrsHgG1908UJ
j7GP1u8g46mV9lNtvIZ7r1+iNaSQreTFeKVTkSTZhr5oLEdYuwCMnK27kip8YlvP
Dgit6lCAkLlTB5L5fRwRtgmNpt159NQRa/jqnFzXnSwNw/4gw3ok/0Y9jaY25Rby
U3rcFS+GfmsbyA31aU1Gp9fS24xJ6ZUPlS9/g71mlWamzfvQfLMP
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:28 2025 by rpki-client