Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BHBfqT4DyAI2BXPBx0EVqdpQzsM.roa
File: BHBfqT4DyAI2BXPBx0EVqdpQzsM.roa (raw, json)
Hash identifier: uOFC3c/TG0776yK1nB6AgEERFfbtz9BXWk0wIqq6mVw=
Subject key identifier: 04:70:5F:A9:3E:03:C8:02:36:05:73:C1:C7:41:15:A9:DA:50:CE:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916E6955911D59D88A87C30779F4F2B128
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BHBfqT4DyAI2BXPBx0EVqdpQzsM.roa
Signing time: Tue 20 Aug 2024 06:11:22 +0000
ROA not before: Tue 20 Aug 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:69:55:91:1d:59:d8:8a:87:c3:07:79:f4:f2:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 20 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04705fa93e03c802360573c1c74115a9da50cec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:45:17:59:ed:cb:ad:df:21:d3:ad:c9:c3:
21:a8:b0:87:12:21:fd:52:3d:50:74:be:d1:00:96:
3f:96:65:79:80:1a:5f:5d:40:2e:89:2f:8c:95:73:
1d:22:a4:c8:c9:95:e9:22:69:bd:42:89:5a:32:79:
d0:7c:cf:17:48:60:b2:0d:2d:15:a1:71:16:6a:d8:
d7:af:0a:a7:a4:c8:62:57:8f:17:04:8f:23:30:d5:
68:76:aa:c4:13:49:fd:36:08:23:3c:70:02:24:41:
89:26:03:00:44:6d:61:1a:ae:98:2c:7b:dc:89:d5:
23:c7:86:86:4d:82:ac:96:cc:aa:80:89:a0:2a:6d:
50:60:ac:a6:65:f7:c8:4f:b4:ac:3f:c6:4d:ea:68:
f2:2c:0b:c2:59:ad:22:25:fe:14:c3:d1:d2:47:40:
fe:81:96:6e:8c:30:b0:20:e4:67:ff:6a:99:25:31:
64:d4:2f:50:8c:d7:80:21:c0:94:4f:f3:88:08:75:
71:93:aa:36:50:e6:86:3c:52:c7:b9:2e:d9:af:1a:
47:74:cb:49:99:31:6d:50:39:7b:bf:68:5e:87:cd:
aa:e5:0f:6b:93:2e:41:44:7e:b1:66:1a:39:b8:1c:
78:0a:86:09:08:9d:49:09:a5:60:98:49:d6:b5:bb:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:5F:A9:3E:03:C8:02:36:05:73:C1:C7:41:15:A9:DA:50:CE:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/BHBfqT4DyAI2BXPBx0EVqdpQzsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
49:8c:30:a6:08:dc:cd:c0:66:5f:65:c8:29:96:32:c9:40:e0:
cf:cd:89:88:b7:95:13:df:11:10:ba:af:d8:86:5d:2d:dd:f0:
d9:02:a2:ed:79:39:37:36:e3:17:3c:d1:b0:62:ae:ce:81:22:
4d:18:35:0a:6b:ff:9e:0b:f5:b0:4d:0e:98:42:4d:0a:12:71:
51:92:ba:a4:26:05:c6:23:77:f9:76:f5:3c:f3:a8:fa:ba:ab:
a8:2e:66:bd:43:5c:03:8d:49:e4:79:13:40:19:90:ae:74:ed:
bd:7e:5f:32:3c:04:82:4e:bb:5b:9c:49:8e:b0:29:b1:d0:18:
ff:50:aa:02:f0:43:5e:fb:5f:8c:5c:de:fc:5f:ff:2c:eb:0b:
14:77:6b:59:fb:77:eb:0b:51:14:b7:92:f4:58:58:44:2f:80:
c7:98:d4:ce:d3:b0:19:96:15:83:2e:ef:88:41:99:67:14:d2:
fc:00:e5:80:ea:50:19:34:11:20:22:e5:42:df:66:90:fc:84:
b9:d1:16:3a:c7:82:4a:4d:60:f3:65:4a:4d:65:70:34:a0:bf:
ec:b6:5f:e4:b0:22:4a:96:83:16:09:86:07:e8:57:ca:8f:40:
65:40:c7:16:92:5e:e0:47:18:ad:b6:79:d3:c4:35:c2:51:e5:
e9:4d:4f:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:32 2025 by rpki-client