Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bzxRiVGDHiR68JnnZkEHcQSeEgc.roa
File: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (raw, json)
Hash identifier: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=
Subject key identifier: 6F:3C:51:89:51:83:1E:24:7A:F0:99:E7:66:41:07:71:04:9E:12:07
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0194221F6A2640EA12B32FDC8A4A5EE45153
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bzxRiVGDHiR68JnnZkEHcQSeEgc.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 148.222.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6a:26:40:ea:12:b3:2f:dc:8a:4a:5e:e4:51:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f3c518951831e247af099e766410771049e1207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:21:a0:37:5d:19:4d:3a:4d:d6:c0:68:ca:
07:ee:97:1c:fe:de:56:d0:5b:95:1d:65:ce:4c:7b:
e9:81:1c:a8:15:01:40:b1:f0:f2:b1:15:73:04:63:
df:0e:47:e5:cc:f9:09:59:61:ca:2f:cf:23:91:0c:
1a:f9:d9:71:03:82:f7:af:e4:09:9a:59:d2:fc:b8:
1d:02:ed:41:3a:79:97:06:72:00:09:44:d0:27:71:
74:b3:ec:98:78:ad:5c:6d:c7:7a:ff:72:08:be:7f:
47:4d:85:da:8f:cb:32:62:2f:f3:c2:cf:96:70:56:
b2:b7:8f:45:3f:df:cb:4c:b7:a8:51:44:16:6e:ec:
96:78:b2:57:1b:d5:bb:56:ef:e3:7a:98:3a:71:f1:
47:7f:06:6a:6e:27:e6:0c:d4:13:b2:4c:68:b5:4e:
ff:6f:fb:0e:d4:5f:f3:b7:22:c2:6c:3c:2b:48:c7:
4a:19:3a:b2:66:c2:a3:60:31:7a:6e:9b:66:5a:71:
da:ee:99:60:18:ec:8d:48:e8:ed:d5:c1:93:75:90:
b6:65:6a:2b:d2:12:e4:38:ad:79:fa:f6:88:23:04:
f1:28:47:54:f8:a7:7e:38:7f:15:98:bc:d9:63:90:
02:1f:ff:ca:c3:67:e8:a8:ef:bb:3b:06:0e:0f:59:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:51:89:51:83:1E:24:7A:F0:99:E7:66:41:07:71:04:9E:12:07
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/bzxRiVGDHiR68JnnZkEHcQSeEgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.244.0/22
Signature Algorithm: sha256WithRSAEncryption
93:4b:57:1d:13:fb:21:02:e3:52:5a:d8:68:6b:02:f9:8a:8d:
51:e0:24:84:98:d7:e8:c5:90:a7:7f:69:4a:31:c2:c6:5c:a6:
f4:fa:f1:ed:16:6a:5e:8a:6a:24:60:5a:01:8d:93:41:84:8f:
71:ee:d6:70:b3:41:14:66:28:b4:17:ab:6b:68:07:94:29:1f:
34:d1:29:89:73:8f:ca:de:86:5e:08:e7:9f:f6:db:0c:8c:cd:
b6:20:2c:71:25:f3:be:25:c6:1a:ed:9a:76:74:75:7f:4e:7d:
20:36:4a:21:8c:03:0d:f8:83:d3:03:7b:4a:59:18:3c:4c:b8:
c9:72:7e:ef:eb:80:b9:28:fa:dc:d2:43:85:ee:67:d4:c4:b6:
a7:bb:f1:1c:85:96:c9:b6:34:39:df:98:25:ca:46:3f:99:b7:
a8:15:58:58:4b:d9:b0:33:ad:9a:5e:de:f8:43:07:e8:5f:bf:
f9:ba:5c:1f:80:f2:48:ed:b3:b1:84:ee:b5:a0:c8:b5:11:bd:
9c:50:3b:fb:d6:24:44:e6:89:92:a0:81:6e:c9:47:5f:61:31:
cf:61:6f:29:c9:ec:e1:d7:ae:25:35:0c:e0:ce:bf:96:20:25:
39:16:fd:10:81:c1:92:ed:3f:c1:7b:d1:77:a6:dc:9d:c7:58:
cf:e5:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:27:16 2025 by rpki-client