Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/bpJaNyuRoeNygXab7GKwiGTrmYw.roa
File: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (raw, json)
Hash identifier: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=
Subject key identifier: 6E:92:5A:37:2B:91:A1:E3:72:81:76:9B:EC:62:B0:88:64:EB:99:8C
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 019423D6AB4ED7C620575A1FD92E9BAB47BC
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/bpJaNyuRoeNygXab7GKwiGTrmYw.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20847
IP address blocks: 195.60.212.0/22 maxlen: 24
2001:67c:78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ab:4e:d7:c6:20:57:5a:1f:d9:2e:9b:ab:47:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e925a372b91a1e37281769bec62b08864eb998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:ca:6c:27:cf:a3:31:ba:29:59:e5:69:70:
3e:39:a8:8c:6d:5f:b0:9d:4a:b5:a9:f2:88:90:c1:
84:84:46:63:f2:60:20:1f:a6:52:1b:73:e1:00:91:
9a:26:a1:92:9b:6d:3b:e1:84:da:35:70:3c:67:55:
c9:36:93:b6:e3:08:7a:c6:b2:1c:d7:2b:e6:8b:1c:
22:9a:08:6d:4c:1d:b1:16:69:58:c7:54:c8:41:27:
7e:14:f4:8f:20:82:af:73:ec:fb:32:df:1d:f9:76:
43:8e:ed:df:92:b9:6a:02:d2:e2:f9:56:43:7f:86:
c1:67:30:00:f3:b2:fe:0b:7d:31:7c:89:c5:00:de:
0f:c6:36:e2:60:cc:6a:43:2c:65:6b:cf:a5:10:34:
cd:ed:9f:3b:a9:d1:30:79:83:e1:02:ff:ec:55:7b:
fd:59:e9:7d:8f:3e:85:e0:76:0f:da:4d:3b:ae:74:
28:91:ed:94:aa:2f:94:e5:b2:69:9e:1f:af:86:d8:
52:e2:c1:3b:6d:b4:33:02:7f:a0:f6:d7:d8:7f:70:
f7:07:9f:a1:a9:83:f2:95:00:55:81:67:24:12:c4:
99:95:45:e7:f7:09:6a:3a:c1:3d:18:ac:0b:26:3d:
a0:c9:b4:6d:34:89:a5:86:ad:58:5b:a8:0f:98:e6:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:5A:37:2B:91:A1:E3:72:81:76:9B:EC:62:B0:88:64:EB:99:8C
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/bpJaNyuRoeNygXab7GKwiGTrmYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.212.0/22
IPv6:
2001:67c:78::/48
Signature Algorithm: sha256WithRSAEncryption
35:50:0a:ca:e0:3e:c7:b4:0e:a2:f3:d0:c8:6c:72:17:5d:c3:
3c:7f:cc:cf:1f:8f:b7:8f:c0:62:82:98:13:40:5e:aa:02:34:
40:d7:e7:02:b0:57:14:d1:8f:be:04:fd:76:3c:58:b7:93:2b:
42:0f:99:a8:7e:37:12:81:1e:fc:1b:fa:90:67:d3:8a:1b:55:
6d:1e:47:0f:c5:eb:f0:24:8b:78:a5:93:11:de:f4:5c:ad:9a:
49:6e:0a:c9:10:32:33:a4:89:0a:c7:3b:83:27:b9:a3:b0:c6:
07:af:dc:d4:4e:0f:a8:53:8a:8a:62:c5:d7:30:00:9f:22:81:
56:17:b5:ee:b1:4d:a7:e7:5d:30:db:5d:2e:ae:82:d4:3e:a0:
d8:4d:4b:06:ec:a4:c9:01:41:9e:5b:d6:f1:9a:ac:ef:7f:81:
8e:5b:75:32:94:5e:69:0f:1f:5a:49:62:2a:9f:93:71:0d:4c:
c7:52:b2:cc:0d:a0:c7:ee:9e:92:38:2d:b9:3c:82:1b:62:27:
44:ff:76:aa:37:cb:3a:72:11:ee:70:c4:2f:98:02:ad:e3:db:
33:3f:c5:95:dc:9d:e9:99:21:7d:43:13:e8:14:43:d0:56:cd:
98:22:1e:bc:41:ea:91:5e:79:28:47:97:e3:84:bf:26:9f:2b:
46:ca:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:40 2025 by rpki-client