Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/BPsnbAY736rnhOpsb-LvumDRDKU.roa
File: BPsnbAY736rnhOpsb-LvumDRDKU.roa (raw, json)
Hash identifier: cw3wTRQFmbNQL+CajFjokOu1YYlX4dB+lTPSJQ2O5Dw=
Subject key identifier: 04:FB:27:6C:06:3B:DF:AA:E7:84:EA:6C:6F:E2:EF:BA:60:D1:0C:A5
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 019425223AAB72C5B98440BE907224C089D1
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/BPsnbAY736rnhOpsb-LvumDRDKU.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
159.101.240.0/22 maxlen: 22
159.101.252.0/23 maxlen: 23
159.101.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3a:ab:72:c5:b9:84:40:be:90:72:24:c0:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04fb276c063bdfaae784ea6c6fe2efba60d10ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:58:11:da:28:bf:52:50:cc:32:96:83:46:d5:
63:3b:f2:17:87:a4:fd:20:80:2b:b4:0f:00:19:f9:
8c:6b:7b:94:37:5f:5f:2e:ca:5b:e5:5c:f5:fe:2e:
fc:12:0f:e1:52:08:65:42:fc:0c:16:8e:3e:6d:74:
53:fc:b4:c6:18:f0:22:b7:74:99:c7:3e:1a:50:d7:
31:0a:4b:a7:c8:cc:1e:a5:97:0a:ff:95:dc:15:b2:
f1:00:7b:54:d7:d1:9a:90:2d:e4:eb:e6:0c:bb:25:
c0:eb:cd:a0:2c:2a:b9:78:39:b8:e7:11:ca:a4:60:
17:a6:6a:a4:3c:db:35:8f:82:89:b4:eb:9f:72:d3:
17:eb:63:21:fd:bd:c7:57:8a:9b:71:66:b4:af:95:
59:c5:d1:72:bc:ba:6a:40:b1:90:5c:ee:83:2e:f5:
0b:3a:80:2c:07:ac:5c:37:87:76:3b:51:26:c6:fc:
bf:ed:49:31:5e:ec:9d:7c:3b:b1:e1:62:c4:99:1f:
12:82:98:0d:dd:d5:9a:d7:cb:81:fb:59:d6:47:73:
bb:4a:02:32:f0:ca:24:c7:64:64:ca:7a:ff:71:9d:
bc:fa:f8:18:1c:b6:82:28:50:55:7a:4e:d1:6d:01:
68:bb:70:75:f6:86:e4:c4:a3:1f:b8:69:49:1e:98:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:27:6C:06:3B:DF:AA:E7:84:EA:6C:6F:E2:EF:BA:60:D1:0C:A5
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/BPsnbAY736rnhOpsb-LvumDRDKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
159.101.252.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7b:7c:cc:2d:7b:8e:6c:11:4f:98:3d:b7:74:56:8b:d8:81:
2d:24:2d:66:c5:91:22:d3:62:1f:b3:26:08:9f:71:48:2b:07:
60:89:b9:db:52:33:73:76:41:4c:ce:0d:a0:fe:95:1e:c8:ec:
73:bc:ca:0c:18:cb:92:5a:e1:fd:c5:2e:3f:01:8d:03:9a:a7:
bb:1d:7e:ec:5e:bc:8e:48:d5:07:d2:e7:cc:91:e1:2c:4b:f9:
f3:02:90:d9:19:82:dd:c1:b5:fc:5e:41:a2:85:da:52:27:c7:
51:de:e5:e9:03:0d:92:94:15:43:24:c1:c2:84:03:07:94:4d:
2b:47:00:48:98:33:45:89:f9:d4:f7:8b:b8:5a:75:28:83:53:
59:9e:ed:e6:b7:82:50:77:55:d6:4d:7b:ef:f9:8b:23:d3:54:
5d:e4:76:dc:45:42:49:e7:9e:f3:59:ee:7d:81:23:20:86:02:
76:44:c5:f5:50:f8:99:bb:af:cc:9e:ba:ef:43:8c:f8:a4:96:
e5:d4:99:d3:e9:2a:a7:26:23:41:44:57:cf:62:6e:cc:84:bd:
c6:88:43:15:e1:0e:91:84:55:47:77:95:54:4b:4c:e9:dc:9a:
c2:c9:ad:6d:3b:f0:d2:ea:fd:3b:90:18:18:23:07:06:39:73:
6a:bd:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:01 2025 by rpki-client