Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BCSQvSTJfZyx6wU8ZbLEL0G9ClI.roa
File: BCSQvSTJfZyx6wU8ZbLEL0G9ClI.roa (raw, json)
Hash identifier: W6XbS2lCVy3Z+0X46+sOE4fPNyqN06hdDKrxX/NA/hY=
Subject key identifier: 04:24:90:BD:24:C9:7D:9C:B1:EB:05:3C:65:B2:C4:2F:41:BD:0A:52
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193E83FDE821FD184ECDEC5095DB27E9EFD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BCSQvSTJfZyx6wU8ZbLEL0G9ClI.roa
Signing time: Sat 21 Dec 2024 08:05:20 +0000
ROA not before: Sat 21 Dec 2024 08:05:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214695
IP address blocks: 151.242.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:3f:de:82:1f:d1:84:ec:de:c5:09:5d:b2:7e:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 21 08:05:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=042490bd24c97d9cb1eb053c65b2c42f41bd0a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:c1:c5:e4:8d:83:92:eb:42:4b:98:be:f3:
66:99:39:1c:a5:95:7c:67:53:03:ea:94:ff:7a:92:
47:87:c0:d3:85:11:2e:d9:5a:e7:23:3b:77:88:c9:
74:20:3a:f9:65:8a:54:b8:ef:87:5a:a5:ed:fa:c1:
72:8b:30:69:d3:c3:84:a7:6f:7c:25:cd:86:8d:e1:
d0:61:e0:a4:69:ee:ad:79:9f:2c:c3:19:92:4d:59:
ff:aa:07:3d:d4:99:50:44:0a:56:d3:e4:91:58:dc:
74:20:72:80:7c:c5:2c:da:e8:6f:ce:65:c3:00:85:
cc:93:25:e6:6f:9e:30:db:47:d2:f1:73:e1:ef:48:
56:de:be:24:4c:71:12:4d:f9:12:5e:68:30:af:c8:
37:d2:6a:5d:e6:d3:1b:4c:a4:24:6b:17:17:6b:9c:
2f:6e:83:3f:00:67:bd:1f:d0:26:e9:61:83:da:97:
1f:66:6d:a4:1d:b1:3a:54:90:46:17:86:66:af:be:
fd:e3:9f:cb:c7:32:22:55:0a:85:8d:fe:16:f7:22:
b8:0d:09:53:f4:fc:7b:11:1f:78:fa:0a:1d:c8:44:
ac:8a:59:c8:fa:ae:62:a3:c3:06:11:63:32:79:8c:
7a:3e:4c:44:c6:ae:2b:b2:3f:dc:49:c4:d8:e6:bd:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:90:BD:24:C9:7D:9C:B1:EB:05:3C:65:B2:C4:2F:41:BD:0A:52
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BCSQvSTJfZyx6wU8ZbLEL0G9ClI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.0.0/17
Signature Algorithm: sha256WithRSAEncryption
94:71:97:8f:a3:63:4b:d4:60:d1:7a:2b:23:fc:e5:ef:1f:49:
08:0c:56:68:e6:1f:cb:bd:3f:0c:84:85:af:85:af:50:4a:f3:
55:56:ec:ba:76:5b:e1:3b:96:da:48:30:0d:cc:88:19:c0:e0:
3b:4d:f7:21:09:11:0b:40:c3:b6:d2:0f:8f:25:d7:a1:85:d5:
9c:35:71:8d:f4:20:78:34:da:8e:72:1f:66:e8:72:61:f3:08:
75:6f:4a:20:6f:62:3c:1c:0b:95:3d:3a:9d:a4:87:d8:77:d7:
42:db:a6:72:66:84:e2:ef:06:dd:a5:60:32:38:96:85:be:cc:
99:3e:40:76:ba:c1:04:68:8d:95:60:21:1f:ea:e5:7a:ec:80:
be:21:11:82:32:e4:f2:a4:b5:52:c0:84:7d:a0:b4:b0:81:1e:
19:49:af:36:9a:7d:69:90:6c:20:80:4d:31:4a:3f:d3:36:62:
ae:fe:af:48:fd:5b:0f:30:40:08:c9:2b:e8:d3:69:57:2d:15:
3c:e3:ab:7c:31:ad:aa:a7:d1:2d:0a:9d:f9:63:05:ad:59:53:
51:ea:28:ab:55:39:c2:1f:c2:d8:4f:0e:ef:25:25:14:87:25:
4f:98:cc:a2:91:f9:b2:e3:f8:8c:54:12:96:bc:74:20:7c:bc:
c7:4b:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:55 2025 by rpki-client