Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BZUsEOH5p1n8xDT3rBmc9QYnr48.roa
File: BZUsEOH5p1n8xDT3rBmc9QYnr48.roa (raw, json)
Hash identifier: ouY4+UdepNSE8txZYWR3lRPiYxWpI6tXu0gJmRvOF3I=
Subject key identifier: 05:95:2C:10:E1:F9:A7:59:FC:C4:34:F7:AC:19:9C:F5:06:27:AF:8F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EC14AAA278429DECA6918C0CD663B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BZUsEOH5p1n8xDT3rBmc9QYnr48.roa
Signing time: Thu 02 Jan 2025 05:48:20 +0000
ROA not before: Thu 02 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:aa06:504::/48 maxlen: 48
2a0e:aa06:505::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c1:4a:aa:27:84:29:de:ca:69:18:c0:cd:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05952c10e1f9a759fcc434f7ac199cf50627af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:15:48:c5:47:74:6a:50:eb:55:fd:bc:dc:
69:4f:7d:ad:ae:27:22:00:94:ee:b9:64:2c:3f:6a:
e3:d1:7b:f5:4f:92:80:51:b3:ff:c5:64:85:d0:f6:
fa:b2:f9:c3:a5:40:6a:7b:4f:11:65:47:23:64:11:
b6:9f:ae:54:5e:d8:b1:27:f1:d6:ae:d7:ea:aa:73:
b9:b1:eb:07:b3:58:27:ca:7a:3c:82:54:63:62:04:
bd:e1:1d:0c:f1:3e:67:c5:de:5b:89:31:8a:46:79:
2e:10:9c:0d:ba:e9:9c:05:b3:73:80:d3:5e:c7:6e:
ba:a2:04:39:28:b4:d9:36:00:38:a9:b2:91:37:44:
10:30:df:87:a1:57:90:6f:28:4a:29:e5:d6:cc:42:
ed:3b:c4:6f:81:08:bb:eb:3f:4e:29:ed:78:5e:37:
03:eb:2f:df:2f:37:c7:2b:03:a6:62:a3:c6:53:8a:
98:e2:4e:f9:59:c2:91:4c:4c:9d:f6:7b:ca:d8:bf:
47:77:a4:24:a5:3a:52:44:f4:5b:4b:17:a7:bc:3d:
41:9b:30:b3:2b:d0:37:2a:ed:ba:56:3b:a7:13:4b:
dc:00:45:12:8a:f6:05:09:5f:1c:0e:f5:6d:ed:b3:
a1:58:13:30:20:7e:eb:fa:44:0a:c4:4f:0b:bb:7d:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:2C:10:E1:F9:A7:59:FC:C4:34:F7:AC:19:9C:F5:06:27:AF:8F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BZUsEOH5p1n8xDT3rBmc9QYnr48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:504::/47
Signature Algorithm: sha256WithRSAEncryption
b1:a1:67:83:ae:b9:b7:e8:67:bd:a8:d5:08:c3:9d:90:b5:23:
a6:34:63:4a:02:b8:f5:0b:fb:61:be:2e:c9:fc:62:d6:f9:ff:
b8:3c:e0:60:91:01:db:28:fb:6d:d8:12:40:a8:5b:82:d0:f2:
ca:d1:32:56:7c:44:0b:e2:cd:66:6f:2d:8c:fc:8e:cb:0b:c6:
9c:a4:23:fa:7f:db:3e:f8:69:8c:7f:32:bb:7a:6c:0b:e7:eb:
9f:b0:98:03:ce:2a:03:57:b9:15:62:ef:71:54:f8:c3:2d:46:
08:35:ee:7f:e7:52:b3:b2:86:0f:a3:8a:ca:90:be:35:0c:68:
bc:38:32:c1:20:26:63:da:cb:a2:ae:b3:0d:65:24:9c:4a:43:
6f:c7:24:42:82:67:ea:d1:86:a8:0a:98:4e:65:ed:98:4d:1e:
15:63:89:dd:f0:87:95:31:73:e0:33:ab:55:c4:d0:56:8f:53:
c0:d1:f5:de:c6:f2:02:04:ae:48:2e:fa:bb:78:ad:cb:a5:b8:
e8:fc:d4:e6:9d:9b:29:89:8e:70:92:8f:23:97:5d:ba:dd:a2:
0f:6b:2a:87:17:af:61:ae:67:a1:dc:61:15:0b:78:bb:23:44:
e1:46:b2:7c:be:f5:e2:5a:4b:44:67:ae:e2:65:bc:52:75:68:
b1:4b:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:52 2025 by rpki-client