Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BGjOsejiH1AKAtpZ7dKiAsXqVL4.roa
File: BGjOsejiH1AKAtpZ7dKiAsXqVL4.roa (raw, json)
Hash identifier: hqsfP8zv2rWJq1NCJMu5Xcdi5bE5jODOs3LPrkK9Zeo=
Subject key identifier: 04:68:CE:B1:E8:E2:1F:50:0A:02:DA:59:ED:D2:A2:02:C5:EA:54:BE
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 01942826ED1807B411FB25DD5BEE3ED18127
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BGjOsejiH1AKAtpZ7dKiAsXqVL4.roa
Signing time: Thu 02 Jan 2025 17:53:47 +0000
ROA not before: Thu 02 Jan 2025 17:53:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42612
IP address blocks: 46.231.120.0/21 maxlen: 24
46.231.120.0/24 maxlen: 24
82.98.128.0/18 maxlen: 24
185.192.220.0/22 maxlen: 24
2a02:be8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:ed:18:07:b4:11:fb:25:dd:5b:ee:3e:d1:81:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 2 17:53:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0468ceb1e8e21f500a02da59edd2a202c5ea54be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:f2:e6:44:51:a9:66:90:76:c7:70:3a:68:
9c:c5:ff:3c:ae:20:c6:44:90:e9:e8:4d:b4:db:db:
20:ac:df:24:9b:18:0c:4f:53:9b:d2:00:03:0f:df:
23:ed:2d:33:1e:55:1c:cc:07:55:f4:a5:2c:6f:39:
0b:15:02:7d:6b:c2:50:45:fa:b0:7f:73:ca:ee:49:
ec:be:db:b9:0a:68:32:b4:eb:60:bd:05:fc:91:7a:
fb:1e:10:e7:85:4e:98:a6:2c:92:0b:c2:44:97:4b:
0a:6f:90:1f:76:70:f6:01:3f:b7:e7:08:e1:93:57:
db:c5:22:b6:cc:6a:ce:c8:f9:e7:bd:10:e0:c5:ce:
f8:34:4e:fd:5a:ed:35:fd:9d:15:fb:15:41:70:e1:
d6:f1:fe:7d:33:79:87:d8:24:55:79:fc:ad:d9:ce:
7e:88:60:b2:eb:eb:a7:d0:4d:f3:0b:d0:c4:32:0f:
04:7b:08:83:23:02:f5:74:b8:16:8c:a8:a7:cd:74:
eb:d5:eb:f4:45:de:ed:15:ff:37:ae:b0:cc:3b:a8:
0a:5c:5e:ea:80:1b:fc:8c:3a:da:ac:8a:35:fe:7c:
f5:04:c8:60:45:7c:a5:f6:db:9f:a3:1c:91:14:8c:
3a:89:a4:ab:2b:78:b9:65:c1:a0:61:eb:4a:01:a3:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:CE:B1:E8:E2:1F:50:0A:02:DA:59:ED:D2:A2:02:C5:EA:54:BE
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/BGjOsejiH1AKAtpZ7dKiAsXqVL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.120.0/21
82.98.128.0/18
185.192.220.0/22
IPv6:
2a02:be8::/32
Signature Algorithm: sha256WithRSAEncryption
c7:46:ec:62:da:7e:3e:e0:94:44:65:3c:5a:f3:50:bc:64:5d:
c0:30:56:50:71:20:38:95:e3:2d:de:20:c2:44:9e:f2:08:c7:
86:18:7b:2a:e7:98:3c:32:be:77:4a:08:c0:6f:15:47:cd:51:
b6:80:24:ee:85:a6:b7:1b:fc:7b:99:59:32:8c:35:2c:fe:a8:
94:86:89:3f:c6:43:9a:9f:4e:4d:a7:ca:36:66:6a:16:06:05:
8c:b8:30:fe:a7:71:ba:56:23:ee:0a:47:eb:e1:d6:31:97:27:
20:0e:5e:91:9a:a2:bc:36:11:22:20:30:3e:17:3a:da:60:3d:
b9:6d:30:98:13:2d:74:70:34:1c:8d:8f:73:5b:64:ce:35:fb:
58:5e:97:61:b3:7f:83:2e:3e:a1:40:ba:51:00:96:93:c4:fc:
e1:c0:98:da:01:95:41:22:d8:d5:55:29:66:d0:29:f2:f0:3f:
c8:4b:9b:8e:3c:b6:96:03:7e:be:6b:ce:90:d2:eb:d1:57:70:
0c:68:4c:71:bf:d8:19:cf:66:6c:89:e6:e6:81:34:a5:80:06:
28:f3:60:0c:9c:67:d2:19:e3:1d:fc:be:66:d2:0a:7f:84:c1:
aa:25:f6:dc:c1:24:b7:a1:1e:71:4c:cd:17:2e:e9:26:39:77:
f5:ab:de:2b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQoJu0YB7QR+yXdW+4+0YEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWU3MjVjYWNmODNjOTdmNDU3YTU2NzYyY2Y4NDZkNjQz
MTE3Y2QwHhcNMjUwMTAyMTc1MzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDY4Y2ViMWU4ZTIxZjUwMGEwMmRhNTllZGQyYTIwMmM1ZWE1NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMLy5kRRqWaQdsdwOmicxf88riDG
RJDp6E2029sgrN8kmxgMT1Ob0gADD98j7S0zHlUczAdV9KUsbzkLFQJ9a8JQRfqw
f3PK7knsvtu5CmgytOtgvQX8kXr7HhDnhU6YpiySC8JEl0sKb5AfdnD2AT+35wjh
k1fbxSK2zGrOyPnnvRDgxc74NE79Wu01/Z0V+xVBcOHW8f59M3mH2CRVefyt2c5+
iGCy6+un0E3zC9DEMg8EewiDIwL1dLgWjKinzXTr1ev0Rd7tFf83rrDMO6gKXF7q
gBv8jDrarIo1/nz1BMhgRXyl9tufoxyRFIw6iaSrK3i5ZcGgYetKAaOH6wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFARozrHo4h9QCgLaWe3SogLF6lS+MB8GA1UdIwQY
MBaAFDNeclys+DyX9FelZ2LPhG1kMRfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmIt
ODJjMDU2MDU5NWNkLzEvQkdqT3NlamlIMUFLQXRwWjdkS2lBc1hxVkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmItODJjMDU2MDU5NWNk
LzEvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLud4AwQG
UmKAAwQCucDcMA0EAgACMAcDBQAqAgvoMA0GCSqGSIb3DQEBCwUAA4IBAQDHRuxi
2n4+4JREZTxa81C8ZF3AMFZQcSA4leMt3iDCRJ7yCMeGGHsq55g8Mr53SgjAbxVH
zVG2gCTuhaa3G/x7mVkyjDUs/qiUhok/xkOan05Np8o2ZmoWBgWMuDD+p3G6ViPu
Ckfr4dYxlycgDl6RmqK8NhEiIDA+FzraYD25bTCYEy10cDQcjY9zW2TONftYXpdh
s3+DLj6hQLpRAJaTxPzhwJjaAZVBItjVVSlm0Cny8D/IS5uOPLaWA36+a86Q0uvR
V3AMaExxv9gZz2ZsiebmgTSlgAYo82AMnGfSGeMd/L5m0gp/hMGqJfbcwSS3oR5x
TM0XLukmOXf1q94r
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:32 2025 by rpki-client