Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/BNKGe-ht2hcSulYhtX_BDOnApKk.roa
File: BNKGe-ht2hcSulYhtX_BDOnApKk.roa (raw, json)
Hash identifier: MT5SBY5Cr4ceL4nApPXUjKrYW8/LQYB7TfOD6HNXcnQ=
Subject key identifier: 04:D2:86:7B:E8:6D:DA:17:12:BA:56:21:B5:7F:C1:0C:E9:C0:A4:A9
Certificate issuer: /CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
Certificate serial: 05B4D92E
Authority key identifier: C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/BNKGe-ht2hcSulYhtX_BDOnApKk.roa
Signing time: Sat 01 Jan 2022 01:01:59 +0000
ROA not before: Sat 01 Jan 2022 01:01:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212657
IP address blocks: 45.131.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95738158 (0x5b4d92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
Validity
Not Before: Jan 1 01:01:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04d2867be86dda1712ba5621b57fc10ce9c0a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:08:69:59:f6:54:ec:49:e9:8c:b4:51:10:
f6:6f:e2:f9:26:57:1a:c9:e7:8e:c9:22:dc:3d:1f:
af:c2:b2:ef:0a:79:66:e1:bc:cc:a0:65:0f:f9:8a:
da:e4:a3:1b:7c:60:53:be:43:8b:36:e4:f0:8c:3a:
df:3d:02:e2:7d:3f:26:7b:d4:79:24:20:76:42:24:
4b:7c:03:a1:fe:49:02:c8:d4:d7:96:20:93:d5:85:
ce:f7:a8:3f:a9:3d:2b:4f:6d:0e:db:4e:08:48:c7:
2d:b0:15:df:fb:d3:1f:61:06:b9:be:9b:69:cb:72:
96:cc:de:44:7e:0a:70:80:96:18:e4:19:ea:74:3e:
10:b7:be:c7:e1:f4:d3:21:01:52:1f:2c:9a:71:79:
bf:85:0d:4c:5d:0b:47:7a:e7:fc:2c:a3:3a:73:ad:
69:f2:0a:81:81:bd:5a:cf:4c:0c:8c:7e:ee:85:ff:
93:07:98:33:4b:0d:9e:49:1c:e1:aa:85:b3:23:00:
c4:61:96:04:68:69:ea:5e:d3:61:0f:a8:fd:d5:9a:
92:6d:7b:f3:3a:09:2d:e8:d2:2e:11:fb:c6:0e:57:
40:35:a8:a8:24:f0:45:6d:ee:22:3d:31:51:dc:a5:
f7:c5:62:94:6d:a6:de:0b:20:f7:59:d8:00:85:d3:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:86:7B:E8:6D:DA:17:12:BA:56:21:B5:7F:C1:0C:E9:C0:A4:A9
X509v3 Authority Key Identifier:
keyid:C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/BNKGe-ht2hcSulYhtX_BDOnApKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1b:07:ea:c0:2b:64:64:cb:1a:c9:9c:19:7c:ba:7c:5a:6b:
93:32:f9:1b:3c:e5:2f:79:1b:02:7b:ad:60:45:2b:bb:10:66:
91:aa:69:00:46:be:88:57:6e:d2:2a:2b:65:dd:79:1e:16:d3:
54:b3:c3:fe:7a:65:00:86:08:dc:23:96:97:6b:3b:4e:4e:c8:
87:7c:d5:2b:69:24:92:75:9f:70:58:04:61:bc:bc:cd:8e:96:
4e:7e:7d:05:20:c2:ba:de:88:36:c3:dd:d4:93:e9:ca:4c:cb:
fd:36:5a:fd:cb:ef:87:2d:84:ef:c8:70:b2:85:a6:b7:c9:95:
36:e6:22:71:64:20:10:20:71:c0:d0:b4:88:57:22:72:1e:6b:
eb:bb:2a:0c:81:da:ed:f5:9f:55:df:68:98:cd:d1:d7:28:28:
a4:e5:f0:66:79:5d:6d:b8:9f:77:8a:dd:ed:e6:f4:0c:22:00:
2e:c3:96:d2:2f:dc:fd:33:46:47:53:1e:51:93:ec:69:59:7a:
5f:73:cc:a9:30:37:6e:c1:05:bc:ee:c8:6f:78:7c:bc:de:0c:
e3:ec:bb:db:53:07:96:b2:46:40:0b:5c:ee:14:e9:c2:87:e6:
2f:65:ab:71:1b:0f:26:13:9b:36:62:28:b0:cd:40:4f:20:10:
5c:0c:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:13 2025 by rpki-client