Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/bjeEI_I-qEvqdGa049xoPmoAn0s.roa
File: bjeEI_I-qEvqdGa049xoPmoAn0s.roa (raw, json)
Hash identifier: aMrBG21RtmWunyqU4PdYNT2qbyRU7yTGdPdzQFPEvN0=
Subject key identifier: 6E:37:84:23:F2:3E:A8:4B:EA:74:66:B4:E3:DC:68:3E:6A:00:9F:4B
Certificate issuer: /CN=82d07eb294f40507632f37008a4d47b69831113e
Certificate serial: 01856F9E03CF9FAFBB0BDED34B8E1A7FD12D
Authority key identifier: 82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/bjeEI_I-qEvqdGa049xoPmoAn0s.roa
Signing time: Sun 01 Jan 2023 23:15:04 +0000
ROA not before: Sun 01 Jan 2023 23:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.163.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:03:cf:9f:af:bb:0b:de:d3:4b:8e:1a:7f:d1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d07eb294f40507632f37008a4d47b69831113e
Validity
Not Before: Jan 1 23:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e378423f23ea84bea7466b4e3dc683e6a009f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:ae:b2:f9:9b:1b:e3:c8:53:93:18:8a:33:
f4:4e:3f:13:83:2e:fd:61:07:6a:80:ab:48:c2:6f:
53:33:94:5c:a5:e1:15:50:28:ce:74:3e:55:4d:49:
01:56:82:9c:65:f7:00:78:28:dc:3c:c2:36:96:2b:
41:5d:80:77:09:ae:01:ea:ad:ee:c7:73:44:a8:e5:
a4:d1:4d:27:71:33:92:84:29:eb:9a:73:2c:18:2b:
9b:e7:ce:f4:f3:ed:1f:8a:65:9f:c4:12:73:41:44:
9e:48:57:6d:79:4a:1e:b9:bc:e9:80:1f:7b:3e:df:
78:cc:bf:22:68:32:87:17:92:62:6a:b9:38:b9:ca:
a3:48:cd:ef:82:2e:ab:92:df:58:c7:3f:a9:8c:77:
22:e7:0a:18:4b:7e:78:9a:da:16:b0:af:b6:0d:29:
eb:a3:88:23:99:38:59:1b:b1:9e:5e:4e:ab:bf:18:
c7:1a:23:53:71:4f:ee:b8:35:75:b5:f2:40:dc:f5:
8f:e0:0c:34:93:07:f9:70:58:af:ed:5f:cd:40:58:
2f:0a:c9:23:e3:3f:df:11:22:96:76:d9:3f:55:7a:
a0:55:e1:65:30:ab:49:80:27:46:ef:43:e4:56:fd:
ba:03:f9:64:ec:20:54:ea:13:71:df:ad:12:59:dc:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:37:84:23:F2:3E:A8:4B:EA:74:66:B4:E3:DC:68:3E:6A:00:9F:4B
X509v3 Authority Key Identifier:
keyid:82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/bjeEI_I-qEvqdGa049xoPmoAn0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.200.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bf:06:e1:d9:c0:00:0b:ba:cc:42:63:6d:1d:fd:f5:0d:a5:
78:42:0c:a8:20:9e:66:40:e1:ea:0c:1f:c1:95:25:93:21:56:
2d:b9:8b:52:e0:50:49:cb:12:12:25:57:4b:48:5f:59:23:32:
01:51:ab:ff:49:44:69:6e:27:6d:c5:4a:52:dc:89:d4:f8:c3:
48:13:8a:b4:3c:66:f5:c1:43:12:c5:32:59:ec:8e:08:60:54:
c3:ef:42:cd:32:1c:fd:bd:1c:d2:7d:3c:e2:86:19:69:c2:20:
ed:17:2d:ec:bf:56:98:72:8d:9f:a7:65:b3:cd:71:f0:7c:44:
56:49:d5:5a:62:db:c7:ef:16:ee:85:51:21:c1:a4:8b:46:2f:
45:e5:1a:42:3b:1a:1f:9c:89:a8:8e:90:5a:a8:4d:60:e5:87:
1c:bd:c9:36:c8:49:f4:f7:b0:60:d9:c8:5b:35:18:ef:cb:ec:
75:3a:49:84:5f:31:2b:04:83:30:bd:b6:c5:28:5d:d4:6a:21:
5e:d5:78:49:49:10:26:22:aa:ba:4c:0f:8e:3a:8b:8d:d6:ec:
80:b1:46:9b:b6:d8:c5:ee:83:b3:13:a2:56:3f:f1:fe:4f:c3:
2e:43:ee:95:9c:89:44:62:05:ad:6f:a3:a9:4d:b3:e7:98:85:
df:e8:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:34 2025 by rpki-client