Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa
File: BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa (raw, json)
Hash identifier: XJUga4d3iYp4CDbplJ3CQfSd/M9q5uZEciYR+Qfr8Go=
Subject key identifier: 05:60:40:38:79:3B:3C:3F:6D:A2:A6:D1:E2:D2:7B:BE:BE:8E:CF:D0
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01941FFA5C9E1BEB7C3655B538D7AA6F1D18
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211990
IP address blocks: 87.107.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:9e:1b:eb:7c:36:55:b5:38:d7:aa:6f:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05604038793b3c3f6da2a6d1e2d27bbebe8ecfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:1a:64:19:12:ba:3a:6a:2a:e6:c5:06:ff:
3b:2b:49:90:ee:02:43:20:9b:68:4d:c8:0c:e2:12:
8c:5a:c2:0c:04:a7:5b:5a:d4:fd:2a:ab:2e:cc:b4:
b9:45:88:bf:0f:cd:30:c6:75:60:34:4e:91:c4:fb:
e6:3a:4b:cc:35:d0:5d:51:86:75:24:a1:b7:23:ed:
b0:70:61:0a:bd:16:d0:18:32:e9:f9:24:b1:64:39:
0b:2b:17:eb:60:87:c6:4b:df:60:d1:86:9b:e4:bb:
5e:37:ab:d5:90:23:4d:55:49:c8:30:9c:44:14:24:
14:a3:6f:9e:eb:7d:47:37:15:92:76:0e:25:2a:04:
85:b0:ca:20:fe:d4:6c:f1:da:c1:55:80:32:1b:c3:
a8:0c:be:8c:a6:df:81:a1:57:20:38:95:c8:8d:3f:
f6:07:aa:88:5c:69:3b:51:0b:78:07:0f:44:b1:7b:
09:82:e4:5f:1d:e8:28:49:e4:9d:b8:66:d7:99:2f:
b2:f0:6d:ac:47:92:e7:f2:7d:de:77:24:c3:a9:02:
5c:84:6b:79:81:72:3a:ea:54:66:a8:51:1c:6c:d4:
ef:37:e8:58:ff:09:7b:2a:38:7c:b9:16:71:ed:65:
52:08:78:58:e2:86:a3:21:7c:66:39:ef:56:d6:30:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:40:38:79:3B:3C:3F:6D:A2:A6:D1:E2:D2:7B:BE:BE:8E:CF:D0
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/BWBAOHk7PD9toqbR4tJ7vr6Oz9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:93:46:df:d9:1e:ad:f3:c5:a8:2c:bb:7c:78:24:e3:ed:f5:
1d:0f:1c:1d:a4:e5:6d:8c:72:a7:0c:ee:22:22:30:09:cc:93:
75:e3:40:38:4f:8c:44:7e:05:46:b8:3b:ee:dd:e8:70:f9:9b:
87:e0:7d:71:a1:5b:d9:14:8b:1c:28:0b:ae:1e:e5:cb:5d:08:
b3:01:a5:c1:f5:b4:a9:1e:fe:d7:a3:13:92:39:d0:f7:ac:23:
37:be:53:36:f5:5c:21:c0:55:78:1b:8e:63:29:7d:aa:e1:b9:
7c:86:fb:26:2e:4e:0f:87:a5:4d:af:36:9f:45:35:27:eb:e6:
25:79:54:06:a8:c3:62:62:d7:71:3e:1c:70:2e:66:38:36:22:
87:e0:83:a1:8e:3f:f5:42:1f:80:a4:cc:ec:40:b3:74:41:ec:
e1:41:dd:e2:42:b6:82:af:63:f3:a9:e5:7d:4a:72:04:46:44:
ab:51:d4:42:c8:d5:74:41:df:7a:7f:22:1e:3b:10:10:7a:41:
35:a7:48:e0:53:4a:23:08:5d:13:f3:62:d3:9f:36:85:9e:07:
f5:79:0c:9b:ba:25:96:be:3c:41:9c:67:95:15:de:db:92:d5:
4a:78:38:8e:ad:c1:db:5f:3d:45:53:ae:73:17:d2:78:89:8e:
36:78:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:54 2025 by rpki-client