Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/Bu9k_IYv3AcfAND2QVseBJOYtEg.roa
File: Bu9k_IYv3AcfAND2QVseBJOYtEg.roa (raw, json)
Hash identifier: NYU3jshqEzyygqef0j7pzJohHZGzZB6DwglTWveelBY=
Subject key identifier: 06:EF:64:FC:86:2F:DC:07:1F:00:D0:F6:41:5B:1E:04:93:98:B4:48
Certificate issuer: /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial: 0778D16D
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/Bu9k_IYv3AcfAND2QVseBJOYtEg.roa
Signing time: Sat 01 Jan 2022 08:03:41 +0000
ROA not before: Sat 01 Jan 2022 08:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136933
IP address blocks: 45.149.17.0/24 maxlen: 24
45.149.16.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125358445 (0x778d16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Validity
Not Before: Jan 1 08:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06ef64fc862fdc071f00d0f6415b1e049398b448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:e7:4d:c3:d4:8b:ba:36:4b:9c:8f:ff:83:
a5:d1:a9:e8:6a:89:20:47:78:9f:73:12:fa:26:46:
9f:fa:61:8e:e1:77:0d:4e:2b:41:0c:51:6e:33:17:
44:ea:5b:42:13:a3:fe:30:de:71:ac:ec:6d:d3:92:
a5:70:f5:ad:c5:38:34:2a:ba:68:a2:4d:b3:74:86:
a5:50:d5:06:76:83:6c:7d:5e:1f:f1:e2:21:8d:cc:
35:15:80:b9:8b:ea:a4:05:11:af:86:af:82:23:90:
d6:1d:c5:e8:0f:5b:66:69:9f:0b:1e:12:55:8c:de:
51:25:39:59:8f:28:a1:d2:f8:62:af:e0:2f:45:11:
0f:d1:ef:1f:0a:10:d7:b9:5f:94:e3:12:87:eb:a0:
7a:62:95:73:2b:cd:de:1e:82:08:07:dd:8c:f2:34:
f4:f5:ee:10:64:77:76:e2:99:0e:78:8e:bc:9c:5e:
69:0a:2e:c7:43:d2:c9:4a:b9:9b:0a:7f:da:3b:8e:
f4:24:cb:46:00:2b:3a:3e:d8:4e:7a:59:60:07:d5:
b3:01:d3:f9:42:06:c0:cb:55:e7:93:8b:39:45:54:
b2:56:0a:86:eb:f8:ac:a1:ff:68:f4:13:39:bc:6f:
c6:50:3e:15:d7:ae:98:e6:91:4f:43:3a:50:b3:0f:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:64:FC:86:2F:DC:07:1F:00:D0:F6:41:5B:1E:04:93:98:B4:48
X509v3 Authority Key Identifier:
keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/Bu9k_IYv3AcfAND2QVseBJOYtEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
87:61:ce:74:0e:a9:79:e9:e8:d4:d5:dc:c1:7b:bd:0d:53:b6:
d9:d5:57:32:5a:37:dc:35:b9:89:0d:3b:4d:51:02:0d:54:e9:
a4:10:91:0f:c4:d9:24:fd:ff:e0:d1:3a:2d:59:94:30:3f:ab:
fc:0b:3c:66:1a:7f:76:c0:99:83:a4:16:4c:ec:85:6a:db:22:
0e:d8:2c:72:be:89:89:3c:86:72:6e:8d:ec:a4:d6:ca:45:ed:
64:9d:38:23:bf:63:c9:5a:d9:d1:5e:27:c2:2b:1a:62:dc:ef:
36:ee:9f:3c:03:ea:46:ff:41:b0:39:ab:02:41:60:c3:a4:1b:
c5:67:14:54:d0:da:4d:3c:e5:bb:1e:38:35:d5:f2:f6:e8:09:
55:73:aa:e9:10:7a:78:88:af:80:a2:78:03:ab:81:ca:b2:95:
b8:94:2a:3b:78:69:47:50:c9:95:c0:43:79:b4:87:63:c6:bb:
e8:c2:70:4c:53:46:4b:ea:38:72:36:53:ea:e8:36:9c:d8:9f:
30:7c:13:dd:c0:3d:88:6a:4b:28:54:83:04:b5:ab:eb:02:5a:
7c:4a:69:38:a3:d8:bd:31:0d:81:c1:22:ea:25:cf:bf:05:7d:
2b:b7:75:47:42:ce:2c:28:a6:36:45:80:f2:68:e9:ee:5d:9e:
36:6f:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:00:43 2025 by rpki-client