Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BHxUpz4IsFTYmgbkHcPyv5Svfxk.roa
File: BHxUpz4IsFTYmgbkHcPyv5Svfxk.roa (raw, json)
Hash identifier: wEh2jqbRZff59bSY84WDKluJaynoAnML3QqVn8UoH0o=
Subject key identifier: 04:7C:54:A7:3E:08:B0:54:D8:9A:06:E4:1D:C3:F2:BF:94:AF:7F:19
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019427B63C7C3FB4907846A60C0733327A31
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BHxUpz4IsFTYmgbkHcPyv5Svfxk.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 45.90.248.0/22 maxlen: 22
212.60.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3c:7c:3f:b4:90:78:46:a6:0c:07:33:32:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=047c54a73e08b054d89a06e41dc3f2bf94af7f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:ca:81:8d:e0:db:d6:f3:45:ba:f7:93:8c:
12:89:72:88:98:d9:96:bc:62:74:a1:41:4d:13:70:
05:78:29:0e:d2:13:f3:25:a5:a9:9f:57:8d:de:e8:
90:35:cf:f2:d5:02:56:5c:af:79:87:6d:cb:47:a1:
e5:0e:43:1f:1e:bb:38:ec:d6:10:56:69:4c:82:27:
6c:45:6b:48:82:0d:ff:dd:a1:d6:20:5c:8d:1a:37:
e2:94:32:02:15:bc:6b:db:04:3c:7e:5f:5f:43:b1:
13:a5:45:ce:a6:22:9b:bb:49:93:ff:ce:ef:b9:eb:
47:6d:f5:93:9b:69:d7:cd:db:d2:7d:8d:67:e8:b3:
8c:c2:05:89:36:6b:9b:7c:2f:99:cd:4f:27:b8:43:
48:30:d8:fb:fc:27:85:1e:65:9c:6a:52:af:7b:f9:
32:b1:0f:e5:a8:77:df:04:2c:db:e3:2b:b0:af:3e:
16:df:f7:c7:9b:3d:ed:04:89:87:32:4c:48:45:c8:
2d:f7:e3:01:f8:04:1f:68:a0:d2:7e:3d:be:7e:b5:
f1:d9:98:8e:01:43:58:2f:a7:5f:9d:1d:ac:f1:51:
f6:54:4d:a7:55:3f:b2:58:74:d9:32:c8:30:17:cb:
c3:db:3c:8f:2c:8a:64:00:21:ac:35:40:da:41:6d:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:54:A7:3E:08:B0:54:D8:9A:06:E4:1D:C3:F2:BF:94:AF:7F:19
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BHxUpz4IsFTYmgbkHcPyv5Svfxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.248.0/22
212.60.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:af:5e:32:01:0c:01:8a:94:f0:8c:fd:83:69:86:71:bb:8a:
1a:86:de:1d:f2:3a:30:62:e1:b8:0e:41:64:73:80:3d:7a:2f:
49:fb:86:bf:6a:07:ae:d2:a5:3c:32:24:a5:bf:48:98:15:85:
37:ad:a3:f6:f8:ab:5d:56:20:f9:de:9f:d5:e8:03:de:4d:2b:
24:81:d1:2e:77:cf:dc:69:8c:65:58:f0:fd:f4:5f:b2:bc:2c:
8f:5e:e5:c4:ad:5f:f1:59:c3:47:d9:c5:f4:e3:4f:fd:02:83:
8e:64:44:3b:36:83:1c:12:29:78:9d:a5:5a:5a:82:06:cf:04:
4a:c9:40:42:e2:78:4c:c8:10:43:1c:e8:1b:a7:07:ab:1e:fd:
ef:81:f9:8f:6e:b6:89:d2:50:ec:03:8a:c5:f7:f0:36:ea:2e:
be:30:53:20:a2:0d:9e:8c:80:0d:be:f3:55:5d:2d:04:bf:31:
b3:c3:2f:a0:28:0a:bb:a6:88:2a:1a:d2:92:e7:5a:8b:b1:ce:
e2:94:d2:e1:55:cd:b7:88:ce:db:b0:f9:9e:fb:24:91:6a:91:
44:81:81:c5:11:df:46:48:76:87:7c:9c:4d:79:f3:97:52:48:
e6:5e:be:d3:8e:9c:bc:49:4a:52:c2:c0:c7:92:5f:a3:1e:b0:
13:3f:c4:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntjx8P7SQeEamDAczMnoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjUwMTAyMTU1MDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDdjNTRhNzNlMDhiMDU0ZDg5YTA2ZTQxZGMzZjJiZjk0YWY3ZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/3KgY3g29bzRbr3k4wSiXKImNmW
vGJ0oUFNE3AFeCkO0hPzJaWpn1eN3uiQNc/y1QJWXK95h23LR6HlDkMfHrs47NYQ
VmlMgidsRWtIgg3/3aHWIFyNGjfilDICFbxr2wQ8fl9fQ7ETpUXOpiKbu0mT/87v
uetHbfWTm2nXzdvSfY1n6LOMwgWJNmubfC+ZzU8nuENIMNj7/CeFHmWcalKve/ky
sQ/lqHffBCzb4yuwrz4W3/fHmz3tBImHMkxIRcgt9+MB+AQfaKDSfj2+frXx2ZiO
AUNYL6dfnR2s8VH2VE2nVT+yWHTZMsgwF8vD2zyPLIpkACGsNUDaQW2YiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAR8VKc+CLBU2JoG5B3D8r+Ur38ZMB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvQkh4VXB6NElzRlRZbWdia0hjUHl2NVN2ZnhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVr4AwQC
1DwAMA0GCSqGSIb3DQEBCwUAA4IBAQCKr14yAQwBipTwjP2DaYZxu4oaht4d8jow
YuG4DkFkc4A9ei9J+4a/ageu0qU8MiSlv0iYFYU3raP2+KtdViD53p/V6APeTSsk
gdEud8/caYxlWPD99F+yvCyPXuXErV/xWcNH2cX040/9AoOOZEQ7NoMcEil4naVa
WoIGzwRKyUBC4nhMyBBDHOgbpwerHv3vgfmPbraJ0lDsA4rF9/A26i6+MFMgog2e
jIANvvNVXS0EvzGzwy+gKAq7pogqGtKS51qLsc7ilNLhVc23iM7bsPme+ySRapFE
gYHFEd9GSHaHfJxNefOXUkjmXr7Tjpy8SUpSwsDHkl+jHrATP8SP
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:38 2025 by rpki-client