Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/684f9c-8bb7-4ac5-9b18-a32e6c7c97b1/1/BXqaa6RK7UJ4FdsXCV_8u8xvuQ0.roa
File: BXqaa6RK7UJ4FdsXCV_8u8xvuQ0.roa (raw, json)
Hash identifier: PdC+mkxautb0bLiqrgPLIWczYVKHCtmvua+Q5JtYKeA=
Subject key identifier: 05:7A:9A:6B:A4:4A:ED:42:78:15:DB:17:09:5F:FC:BB:CC:6F:B9:0D
Certificate issuer: /CN=25058f4d7fb3963ac2bea252830f697d1743ee9b
Certificate serial: 01856286D47DD492BFA42D8DE8E2D50F20FA
Authority key identifier: 25:05:8F:4D:7F:B3:96:3A:C2:BE:A2:52:83:0F:69:7D:17:43:EE:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQWPTX-zljrCvqJSgw9pfRdD7ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/684f9c-8bb7-4ac5-9b18-a32e6c7c97b1/1/BXqaa6RK7UJ4FdsXCV_8u8xvuQ0.roa
Signing time: Fri 30 Dec 2022 10:14:41 +0000
ROA not before: Fri 30 Dec 2022 10:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25516
IP address blocks: 195.43.52.0/22 maxlen: 22
2001:67c:14e0::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:86:d4:7d:d4:92:bf:a4:2d:8d:e8:e2:d5:0f:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25058f4d7fb3963ac2bea252830f697d1743ee9b
Validity
Not Before: Dec 30 10:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=057a9a6ba44aed427815db17095ffcbbcc6fb90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:82:32:9a:9b:80:12:98:f5:b6:0b:eb:ec:
62:e2:6a:50:57:44:93:c3:be:b6:68:7a:e0:ee:04:
e9:48:b6:24:b1:f6:61:73:dc:8f:c1:1e:23:2b:04:
94:54:68:a8:1b:9c:ac:26:04:82:40:0f:da:ce:02:
e9:81:f2:3a:9e:5a:53:5d:ad:ce:c9:95:a6:df:f3:
85:58:b2:41:f4:f5:c9:23:ed:67:4a:c5:fa:ae:e3:
5f:b6:7a:95:bd:d8:8f:2a:b4:16:fd:f7:7a:1c:a1:
0d:7b:cc:9d:9a:0d:b7:40:4b:2d:f9:94:1d:cd:56:
bd:a5:60:36:45:25:7f:32:57:c2:ed:36:43:47:00:
a4:98:f4:3c:9a:3f:f8:71:e0:67:b1:64:0d:90:52:
40:2e:e6:09:eb:a1:08:dd:ed:9e:ca:67:76:66:60:
68:44:08:0d:db:6a:23:e1:76:ea:0c:61:9a:3e:f4:
a0:c3:8c:6b:92:50:13:f2:dd:a3:65:b4:bc:39:b8:
48:a7:e2:41:2f:66:5a:99:72:ba:e5:6a:3b:64:d2:
29:3f:d7:8a:66:0b:8c:7b:fd:2e:eb:8b:4b:9c:ea:
46:79:ae:da:cd:3c:a3:26:c4:c7:07:5d:f6:9e:0b:
48:b2:16:db:1e:7a:f4:75:e9:c8:59:76:ec:c1:15:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7A:9A:6B:A4:4A:ED:42:78:15:DB:17:09:5F:FC:BB:CC:6F:B9:0D
X509v3 Authority Key Identifier:
keyid:25:05:8F:4D:7F:B3:96:3A:C2:BE:A2:52:83:0F:69:7D:17:43:EE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQWPTX-zljrCvqJSgw9pfRdD7ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/684f9c-8bb7-4ac5-9b18-a32e6c7c97b1/1/BXqaa6RK7UJ4FdsXCV_8u8xvuQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/684f9c-8bb7-4ac5-9b18-a32e6c7c97b1/1/JQWPTX-zljrCvqJSgw9pfRdD7ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.52.0/22
IPv6:
2001:67c:14e0::/45
Signature Algorithm: sha256WithRSAEncryption
21:cf:87:cb:c6:66:d5:65:8b:44:73:86:57:66:92:3c:b3:99:
4e:16:ce:3a:04:84:50:14:b0:fa:7a:dc:9b:52:5e:04:25:f1:
d3:a9:33:da:15:7d:34:fb:2a:ea:6a:d5:26:32:80:3a:32:ed:
85:f4:8a:c1:32:a4:09:a3:5d:5e:00:b1:fa:54:fc:95:11:9e:
a8:bc:72:7b:1b:de:29:9c:19:cf:f9:64:e3:25:74:ff:c8:f8:
88:e1:80:69:1a:f0:d4:14:9f:ae:68:e7:2c:7b:77:3b:bf:f9:
c6:08:c4:f8:06:d5:04:65:39:af:a7:34:6e:5c:9a:fd:fd:c4:
67:c4:cf:75:e4:5f:2d:68:0c:e5:fc:e1:c5:ab:23:99:1d:ae:
19:a6:74:e9:8d:f4:fc:82:b8:a5:0e:9d:70:75:e1:5a:da:11:
95:24:88:8f:8c:15:d1:f0:eb:86:f6:fc:2c:2e:09:fc:a7:90:
0a:75:c8:e3:51:24:a5:18:5c:56:ff:c9:0a:72:f5:e1:9a:df:
05:6d:00:22:4b:b5:83:d2:d8:b8:6a:21:a0:ab:4d:8e:76:04:
e0:89:6b:17:51:41:6f:69:fd:27:59:cd:d8:e1:65:54:1d:b2:
8b:9d:16:38:a6:ff:62:0a:1a:d4:36:23:28:de:53:80:1e:f7:
40:1d:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:27 2025 by rpki-client