Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bsnrRTWHQCKfKKTl4x9hvwmJTDg.roa
File: bsnrRTWHQCKfKKTl4x9hvwmJTDg.roa (raw, json)
Hash identifier: +4OdsPmlAVXGy3muibkw5lVnP2hyeGuxOgJJjNQbfSk=
Subject key identifier: 6E:C9:EB:45:35:87:40:22:9F:28:A4:E5:E3:1F:61:BF:09:89:4C:38
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 01946EC27A0EED2E033452400D5B58C5A492
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bsnrRTWHQCKfKKTl4x9hvwmJTDg.roa
Signing time: Thu 16 Jan 2025 10:57:06 +0000
ROA not before: Thu 16 Jan 2025 10:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57137
IP address blocks: 45.129.148.0/22 maxlen: 22
45.129.148.0/24 maxlen: 24
45.129.149.0/24 maxlen: 24
45.129.150.0/24 maxlen: 24
45.129.151.0/24 maxlen: 24
2a0e:4c40::/29 maxlen: 29
2a0e:4c41::/32 maxlen: 32
2a0e:4c47::/32 maxlen: 32
2a0e:4c47:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:c2:7a:0e:ed:2e:03:34:52:40:0d:5b:58:c5:a4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Jan 16 10:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ec9eb45358740229f28a4e5e31f61bf09894c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:7c:a2:f9:51:44:bd:86:60:0f:31:d7:17:
27:46:eb:bd:60:b9:43:44:98:59:51:5d:ca:8e:67:
f5:e5:12:03:e8:43:42:6c:7e:dc:d0:53:81:ae:05:
db:02:22:94:56:b2:77:a5:63:e1:dc:12:0d:1b:83:
78:1c:4a:32:83:4a:cf:1c:12:65:52:e8:ea:86:0d:
bb:3a:31:e2:50:a1:76:77:bb:3f:07:a8:88:a8:6c:
58:b4:00:62:2c:da:60:e0:d7:6c:b8:84:a9:06:a8:
05:72:99:69:96:b3:9d:10:3b:f5:cb:45:0b:da:a9:
41:04:d7:d0:f8:7d:73:a3:fe:f8:7a:1d:f8:85:09:
d1:39:7e:08:2c:72:f2:50:5d:e0:a1:28:ca:12:eb:
d5:51:ce:b5:b9:63:b2:ae:d7:7d:35:d1:17:2a:d6:
be:c7:6b:91:d3:83:cf:16:68:b7:c0:45:39:14:80:
de:25:3f:12:7e:60:db:76:96:31:81:8d:d7:70:e7:
32:b2:2c:0f:f0:b0:35:bf:f2:1d:a2:4f:d1:8c:27:
ad:7b:90:e7:94:b3:11:98:4a:d9:63:94:b5:9f:7a:
30:87:4f:b1:25:98:d9:57:5c:f3:92:cc:0f:28:be:
f2:08:dd:33:14:4b:59:bc:37:7e:9d:3d:5e:e0:1a:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:EB:45:35:87:40:22:9F:28:A4:E5:E3:1F:61:BF:09:89:4C:38
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/bsnrRTWHQCKfKKTl4x9hvwmJTDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.148.0/22
IPv6:
2a0e:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
43:0e:c0:80:90:6c:ba:14:41:e8:a6:ea:20:bd:75:6d:5f:83:
d1:26:79:0a:52:b2:6b:bf:02:92:37:40:16:4a:f9:5a:d2:a9:
0a:6f:30:ec:75:82:f0:20:aa:ba:13:85:32:ed:f5:1b:07:8c:
c3:5a:6a:02:73:89:63:27:a3:5b:8c:c3:1f:fa:d7:67:ae:bb:
52:01:68:3d:88:20:ba:26:4b:6f:50:82:06:b2:6a:f2:62:e2:
e6:4f:eb:d8:01:3e:57:15:f2:9c:67:ff:aa:0f:e8:cd:fc:0f:
99:d9:80:63:e1:e6:11:92:51:47:bb:8c:bb:96:5b:3d:92:0b:
e3:03:ab:be:7a:44:10:c4:4e:ec:1d:63:77:41:eb:9d:9a:e2:
b0:88:69:86:42:0c:65:1b:cb:c4:30:3e:c3:60:8a:c9:90:30:
61:cb:e7:ca:3e:e1:e9:b2:13:15:86:a3:b9:86:a4:1d:5a:99:
c9:32:4f:b3:36:86:9b:dd:15:67:8e:14:a1:d1:e1:ca:77:36:
ed:30:01:7d:e2:f7:e3:05:ed:3d:10:31:1f:04:a5:17:c7:24:
4c:13:d0:10:31:b9:fd:9e:03:7f:1f:3d:14:b4:22:4c:03:e7:
08:64:0f:bc:e9:88:5e:6f:91:7c:82:4a:91:b4:f7:4f:25:52:
15:de:1b:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZRuwnoO7S4DNFJADVtYxaSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4
OTZiOWMwHhcNMjUwMTE2MTA1NzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWM5ZWI0NTM1ODc0MDIyOWYyOGE0ZTVlMzFmNjFiZjA5ODk0YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMR8ovlRRL2GYA8x1xcnRuu9YLlD
RJhZUV3Kjmf15RID6ENCbH7c0FOBrgXbAiKUVrJ3pWPh3BING4N4HEoyg0rPHBJl
Uujqhg27OjHiUKF2d7s/B6iIqGxYtABiLNpg4NdsuISpBqgFcplplrOdEDv1y0UL
2qlBBNfQ+H1zo/74eh34hQnROX4ILHLyUF3goSjKEuvVUc61uWOyrtd9NdEXKta+
x2uR04PPFmi3wEU5FIDeJT8SfmDbdpYxgY3XcOcysiwP8LA1v/Idok/RjCete5Dn
lLMRmErZY5S1n3owh0+xJZjZV1zzkswPKL7yCN0zFEtZvDd+nT1e4Bob4wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG7J60U1h0Ainyik5eMfYb8JiUw4MB8GA1UdIwQY
MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt
MTI4YjVjM2QwNTNhLzEvYnNuclJUV0hRQ0tmS0tUbDR4OWh2d21KVERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh
LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYGUMA0E
AgACMAcDBQMqDkxAMA0GCSqGSIb3DQEBCwUAA4IBAQBDDsCAkGy6FEHopuogvXVt
X4PRJnkKUrJrvwKSN0AWSvla0qkKbzDsdYLwIKq6E4Uy7fUbB4zDWmoCc4ljJ6Nb
jMMf+tdnrrtSAWg9iCC6JktvUIIGsmryYuLmT+vYAT5XFfKcZ/+qD+jN/A+Z2YBj
4eYRklFHu4y7lls9kgvjA6u+ekQQxE7sHWN3QeudmuKwiGmGQgxlG8vEMD7DYIrJ
kDBhy+fKPuHpshMVhqO5hqQdWpnJMk+zNoab3RVnjhSh0eHKdzbtMAF94vfjBe09
EDEfBKUXxyRME9AQMbn9ngN/Hz0UtCJMA+cIZA+86Yheb5F8gkqRtPdPJVIV3hvn
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:25 2025 by rpki-client