Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/BopVK5gNIhdz8APTStRmTew4Wwg.roa
File: BopVK5gNIhdz8APTStRmTew4Wwg.roa (raw, json)
Hash identifier: /wj1xGfUji35qWEJ96ihpy5c3Mn4bH2cCyxgmENifkM=
Subject key identifier: 06:8A:55:2B:98:0D:22:17:73:F0:03:D3:4A:D4:66:4D:EC:38:5B:08
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 07FAEB9D
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/BopVK5gNIhdz8APTStRmTew4Wwg.roa
Signing time: Sat 01 Jan 2022 10:56:16 +0000
ROA not before: Sat 01 Jan 2022 10:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 78.135.123.0/24 maxlen: 24
212.68.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133884829 (0x7faeb9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 10:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068a552b980d221773f003d34ad4664dec385b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:1e:fb:ad:92:e5:f0:9a:32:64:d9:c0:50:
6b:ad:c9:1c:9a:69:c8:90:82:97:e7:97:f2:07:db:
bb:39:e1:8e:f2:42:fb:38:c5:9a:5e:af:86:9d:80:
0f:3d:09:99:0d:cc:eb:ca:c2:34:07:f4:2d:ef:2a:
1d:7f:18:24:95:94:8a:db:cc:08:a5:8b:5d:70:2d:
c2:df:0e:9b:c2:33:f3:1d:3f:a2:1c:6e:95:eb:29:
67:45:b1:72:cb:7e:84:ea:10:87:74:8a:10:8a:b0:
4f:81:8e:4f:38:d8:a1:35:1b:31:34:21:e1:0f:da:
de:4f:bd:dd:c6:ef:55:39:cc:b6:59:71:d8:f2:a3:
3a:18:64:4c:62:f8:5a:9e:80:a2:80:8b:d4:dd:fc:
70:29:80:cc:2e:f9:fa:fc:f8:02:0f:46:42:42:f5:
6e:80:e1:1a:58:41:e9:66:b7:8a:fa:38:c5:79:77:
3c:b1:bc:6e:f4:3c:38:65:2c:00:af:a1:f3:26:27:
d2:7b:ff:a5:b4:2e:f5:c3:97:bc:2e:78:87:82:5d:
a7:45:81:bb:25:66:36:60:91:73:dd:36:37:7b:2f:
47:ff:4f:b2:46:da:83:73:c6:a4:eb:0e:a4:4f:4b:
a6:5f:06:74:bc:fd:5f:ba:c8:9d:ab:0d:aa:0a:32:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:55:2B:98:0D:22:17:73:F0:03:D3:4A:D4:66:4D:EC:38:5B:08
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/BopVK5gNIhdz8APTStRmTew4Wwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.123.0/24
212.68.47.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:19:9c:d7:5b:d8:ba:bb:45:da:b6:69:4b:68:e0:82:9a:d7:
60:6e:a0:a0:02:d2:62:ef:1f:75:d5:e4:2e:4d:40:71:ec:c4:
18:a2:96:25:ed:77:a7:95:59:fe:23:b3:e2:25:60:18:e1:23:
31:be:9a:08:c9:0f:d6:88:c3:c1:cd:39:99:98:3c:89:41:e6:
b7:f5:ff:0c:18:1c:2d:f2:11:81:ba:83:19:be:e2:7e:ad:fc:
2b:50:f2:83:73:f2:a5:8e:5c:b3:2f:a2:42:9e:43:dc:23:45:
4d:d3:ab:af:e1:9a:94:54:5c:a3:d7:6e:ec:d2:4f:14:52:6c:
43:5c:0c:2c:39:5d:03:74:83:65:bc:09:72:48:7b:7d:1e:a5:
98:a1:2e:53:7d:b1:2a:45:14:5e:4e:9c:ba:a5:2a:12:10:6a:
1f:3a:f7:14:f1:ba:69:5e:4a:5e:50:56:3e:c9:48:64:61:75:
f1:bd:4a:53:17:34:e5:fa:fd:e7:c5:a3:1e:58:23:b1:11:a0:
4b:b1:71:d6:ec:e7:8a:ad:1b:4c:9c:89:f3:6e:c3:9f:7c:84:
93:58:e2:a9:fb:ec:25:87:71:8e:43:2d:07:c2:e9:25:8d:ce:
83:bd:4f:4f:9a:9d:cf:9d:de:23:53:4e:30:f1:4a:f8:3c:b6:
9f:e8:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:29 2025 by rpki-client