Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bpKgVuvIXP3QqW41KOvZG_3GbQo.roa
File: bpKgVuvIXP3QqW41KOvZG_3GbQo.roa (raw, json)
Hash identifier: vNru63Nr2JTBv1Opu7VYWlQqXLkV3+IIeM5WytOrCxg=
Subject key identifier: 6E:92:A0:56:EB:C8:5C:FD:D0:A9:6E:35:28:EB:D9:1B:FD:C6:6D:0A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195CE14E284D5003074FB5DE777835C1C76
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bpKgVuvIXP3QqW41KOvZG_3GbQo.roa
Signing time: Tue 25 Mar 2025 16:13:49 +0000
ROA not before: Tue 25 Mar 2025 16:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:b700::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:c500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:14:e2:84:d5:00:30:74:fb:5d:e7:77:83:5c:1c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 16:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e92a056ebc85cfdd0a96e3528ebd91bfdc66d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:3e:c1:0b:e5:ff:23:61:9a:a7:2f:d7:80:
d9:fc:e5:7c:71:15:4d:24:7d:cc:09:e6:3f:c9:93:
91:44:04:00:18:9c:6b:68:f6:71:64:97:31:ef:10:
8e:45:55:be:98:5b:42:6b:8d:2a:c1:5f:24:36:12:
3f:6a:90:cf:06:47:2b:03:86:cf:6b:8b:b8:bc:aa:
5c:1d:be:c6:a2:ea:c2:4b:6b:98:1a:80:6a:3c:2d:
2b:34:43:7e:5b:91:68:64:87:d0:ba:75:79:96:33:
28:52:c4:56:6e:7f:12:20:00:ca:ea:3e:ac:be:a5:
a2:52:bf:31:4f:cf:16:15:38:17:02:f9:09:b8:35:
32:d1:5f:c5:5d:c3:36:94:fb:44:f0:1c:6c:81:98:
3d:fb:d0:f7:3d:7d:86:2b:6e:5b:30:ca:23:fb:20:
74:a8:0f:a0:65:ce:9b:86:bd:26:3c:92:bc:ec:51:
83:f4:9f:c0:00:3a:3e:70:3c:39:12:e8:ce:66:6b:
ac:97:35:7b:3c:a1:9d:b1:a0:7b:3d:f6:3b:ad:0f:
02:d8:ee:6d:c3:72:fb:2e:d8:0d:8d:20:45:bb:6a:
96:49:fc:a2:52:18:d4:8a:e7:55:5c:b3:ad:7c:19:
c8:8d:9b:1d:72:a0:72:73:ef:04:19:e6:10:08:48:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:A0:56:EB:C8:5C:FD:D0:A9:6E:35:28:EB:D9:1B:FD:C6:6D:0A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bpKgVuvIXP3QqW41KOvZG_3GbQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b700::/29
2a0f:dec0::/29
2a10:7100::/29
2a11:3f80::/29
2a11:4e80::/29
2a13:1940::/29
2a13:8f00::/29
2a13:c500::/29
Signature Algorithm: sha256WithRSAEncryption
2b:93:c6:b0:d9:0f:c3:93:51:8d:71:de:70:35:8b:87:86:a3:
c3:ff:e5:a7:8e:76:3a:b1:d6:01:31:49:c4:3d:66:4f:a5:80:
3d:48:b7:3a:e3:16:9d:ac:95:8c:2f:4b:37:26:5e:a2:64:66:
df:52:84:8e:83:67:e8:cb:8d:fe:2f:80:38:e2:c2:5d:e2:c0:
79:fc:49:95:8e:9c:c8:d5:49:7b:51:1c:99:0e:ab:fe:d1:1e:
45:57:e2:36:76:41:ef:41:1b:1d:83:ea:ac:d8:4d:9f:a9:5b:
fc:77:71:89:27:6f:57:6d:db:65:29:a9:a2:c7:8b:ac:ea:56:
6e:89:5c:10:c1:b9:df:21:ee:74:b3:e9:da:17:e3:d2:bb:e0:
12:ce:a6:eb:4d:41:6d:49:f1:5f:92:b8:3c:54:82:ed:93:f1:
d8:a6:1d:5d:de:58:7e:24:5a:cb:4d:fb:b4:1a:d2:1a:4c:ea:
7d:91:a2:00:0d:54:6b:1f:a4:4b:bc:94:d9:84:ae:6d:ff:92:
cc:b1:a0:ee:1f:da:62:e9:36:3b:77:93:32:fb:04:ac:7f:e4:
09:0f:83:08:ae:5e:c4:4c:34:ae:ab:6a:57:77:e6:03:1a:e7:
d4:71:d8:9a:72:be:65:c4:bb:f7:43:ea:94:23:e6:34:62:b4:
30:7b:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:41 2025 by rpki-client