Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/bh-sQnwX_C7ZL747aiHrL0EbRl4.roa
File: bh-sQnwX_C7ZL747aiHrL0EbRl4.roa (raw, json)
Hash identifier: RYBPUMtTt/yNH0/A6ogqXMSpVPyU2gOfLpc6E3jeUJw=
Subject key identifier: 6E:1F:AC:42:7C:17:FC:2E:D9:2F:BE:3B:6A:21:EB:2F:41:1B:46:5E
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 01856EC21F1A8EB75C8A1FBEA03B29BDD3A7
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/bh-sQnwX_C7ZL747aiHrL0EbRl4.roa
Signing time: Sun 01 Jan 2023 19:14:53 +0000
ROA not before: Sun 01 Jan 2023 19:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.150.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:1f:1a:8e:b7:5c:8a:1f:be:a0:3b:29:bd:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Jan 1 19:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e1fac427c17fc2ed92fbe3b6a21eb2f411b465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:58:61:ae:6f:85:cc:d4:27:4b:12:d3:e4:
42:1a:bc:46:dd:c7:8c:6d:16:e6:4d:9a:aa:f5:3b:
7c:c5:ce:f1:5e:13:64:5f:52:e5:23:69:29:68:48:
0a:91:35:77:8f:42:df:d7:c7:f5:5e:45:8c:99:f7:
eb:89:1f:9e:ed:9f:78:d1:b7:7b:72:64:87:40:4b:
86:9b:58:ef:83:53:79:8d:33:5c:41:23:0f:d0:af:
97:72:bf:b5:cb:4e:6e:3a:e4:37:45:6d:7a:25:f0:
59:20:8f:a2:f7:63:83:bd:ec:e2:94:67:a3:ab:36:
9c:9c:2c:a5:9f:43:b9:0e:f1:46:94:fe:9a:c5:f3:
c7:93:48:86:de:2a:02:9a:9e:95:96:61:f3:ef:3e:
e0:88:dc:00:9f:3f:f7:4d:f0:07:b9:68:ec:4d:f9:
04:a7:23:5c:ea:f2:be:9f:fe:93:6f:17:8d:e7:6c:
fd:52:c4:ff:bb:9f:bf:aa:0b:fd:e8:a3:d3:03:ef:
7a:d4:d3:53:b0:06:21:b6:6a:9b:32:4a:b9:cb:23:
37:64:a0:d0:48:38:5b:0b:d1:8f:89:9a:76:de:fe:
4c:4e:cf:c4:31:59:70:c2:8e:6b:08:bd:1a:08:09:
b7:af:af:cc:34:b8:13:74:f0:49:43:e5:af:99:9f:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:AC:42:7C:17:FC:2E:D9:2F:BE:3B:6A:21:EB:2F:41:1B:46:5E
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/bh-sQnwX_C7ZL747aiHrL0EbRl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:3c:f9:af:f9:cb:83:70:66:5a:78:64:d2:39:2c:c0:06:
f0:44:91:0b:6b:23:4c:d4:60:0a:b3:22:1a:6d:88:5b:75:00:
f6:17:cc:40:dd:e0:7a:9a:26:78:92:a6:b6:70:6b:ab:65:1d:
64:2e:c1:23:95:dc:cd:d2:45:83:43:33:f8:e3:ba:3e:bb:53:
4b:1e:8f:27:74:72:34:74:19:5a:b6:2f:57:fc:d5:7a:b8:a6:
99:e7:91:b6:07:3e:9e:3d:5e:25:a7:2d:85:af:00:d0:b3:08:
96:39:40:b9:ac:88:88:ce:12:f8:c9:93:32:f2:44:07:73:07:
1a:7c:72:f8:ce:11:a7:ab:2d:c9:eb:1b:54:60:cb:82:c0:b7:
31:04:0d:a4:8f:4b:f9:9c:17:46:27:55:3b:91:05:e8:09:a2:
9c:f1:c6:b5:9b:13:7f:4e:9a:26:91:c4:ca:5e:43:0a:b7:67:
15:b7:e9:76:9e:ba:44:60:5f:c3:f8:6a:3c:4b:74:df:30:fe:
ed:93:00:27:22:ce:3d:a7:35:1d:be:29:ed:d3:8d:ea:c1:64:
b7:65:72:56:56:21:e2:4e:4e:4f:4a:45:6f:b2:2f:42:f8:bd:
0d:4c:d0:37:e2:e5:38:b2:18:49:da:25:db:0b:85:8c:5f:d3:
2c:e4:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:16:10 2025 by rpki-client