Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/BwqTRMb6ozfuqkmPbi21Fb-5e1U.roa
File: BwqTRMb6ozfuqkmPbi21Fb-5e1U.roa (raw, json)
Hash identifier: zPXO2FCoRRQYQZVeEAbro4j7BCRZofL8r3cijSEmh3o=
Subject key identifier: 07:0A:93:44:C6:FA:A3:37:EE:AA:49:8F:6E:2D:B5:15:BF:B9:7B:55
Certificate issuer: /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial: 0117BD51
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/BwqTRMb6ozfuqkmPbi21Fb-5e1U.roa
Signing time: Sun 17 Apr 2022 09:58:21 +0000
ROA not before: Sun 17 Apr 2022 09:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 94.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18333009 (0x117bd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Validity
Not Before: Apr 17 09:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=070a9344c6faa337eeaa498f6e2db515bfb97b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:12:fe:8c:17:08:44:60:de:d2:cf:99:5c:
6a:56:83:e8:a9:a0:d5:fd:c1:de:dc:83:5a:eb:5c:
a4:4e:15:80:7f:c0:ac:ec:2b:13:0a:50:f2:b6:c2:
a0:63:0c:7d:45:ea:43:2e:5f:55:a9:c6:c3:30:68:
8c:52:61:09:4a:b9:71:2f:7a:29:50:17:d3:44:f8:
9e:17:cd:f5:be:dc:2b:84:7d:12:5e:47:60:44:cd:
da:5b:7e:e1:e1:fe:66:41:f5:e4:a4:92:15:7d:a3:
78:44:66:1d:d8:f3:86:e7:25:30:36:d1:89:12:66:
ba:ad:87:ac:02:14:6a:15:87:de:64:73:64:63:1e:
36:13:ee:2c:b2:c3:02:c9:af:fe:9b:73:2a:49:61:
87:48:d3:11:f8:23:a8:b6:fc:93:2f:8f:c9:0c:8c:
5a:06:ec:fb:74:81:5a:e8:79:17:6f:72:45:18:ae:
0a:84:b9:10:7e:a9:33:4c:5b:5d:ba:d0:58:42:87:
b1:79:ea:d7:b0:49:28:cf:ed:00:85:af:65:1d:66:
d6:c3:2d:c0:b2:74:62:e9:61:06:9e:e9:41:7f:8f:
1a:08:42:e5:5b:ae:70:e0:ea:59:fd:87:34:2e:5a:
42:e5:06:e0:09:66:d4:79:2d:57:49:7b:7b:8e:23:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:93:44:C6:FA:A3:37:EE:AA:49:8F:6E:2D:B5:15:BF:B9:7B:55
X509v3 Authority Key Identifier:
keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/BwqTRMb6ozfuqkmPbi21Fb-5e1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:65:6a:e6:c2:a0:fb:16:f5:3d:0b:f0:49:82:6d:f5:34:cb:
a0:ef:dd:30:41:1c:22:f1:5d:8f:96:5b:59:74:fb:7f:b9:4f:
0f:c6:41:7c:ab:7c:25:f4:50:2d:ff:96:d4:81:29:78:06:5f:
af:ee:c6:ea:26:48:4c:89:6e:ff:49:75:43:8e:12:64:e3:bc:
00:37:8b:66:83:87:46:8e:b6:bc:5b:9b:fe:ae:59:98:78:5e:
ce:3c:1a:68:bf:1e:1b:99:11:a5:89:83:ac:f5:f5:f5:a1:dc:
2c:e5:a2:29:b1:55:c4:0c:d1:42:5c:2f:be:51:d8:22:f8:92:
f2:24:ad:10:85:9a:c9:a2:b6:54:d5:87:2f:26:3f:19:a3:84:
db:c1:d9:6b:da:09:d9:8e:0c:83:fd:c6:a9:64:b0:ab:32:65:
41:5f:76:63:ff:f7:aa:18:c2:e7:79:5c:f6:0c:2d:6f:ba:85:
8a:ff:88:80:f1:b3:a7:ce:05:99:70:ed:27:aa:92:b5:67:2f:
48:53:eb:1e:b3:b1:a6:d4:cc:b1:30:51:54:86:8a:2d:95:83:
b1:79:b1:13:09:f5:f8:49:9c:75:1c:71:d1:d9:4e:8b:2b:03:
93:37:b8:8e:78:5c:38:d3:8b:4f:e4:61:0d:4a:39:a2:b6:57:
6e:f4:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:52 2025 by rpki-client