Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/BGU0JqhAlE13tbl_O_POeJ0WtPs.roa
File: BGU0JqhAlE13tbl_O_POeJ0WtPs.roa (raw, json)
Hash identifier: oHOIL0XebsuwBTwSTYTUl4IsN5+aojWrKziFkszaJXY=
Subject key identifier: 04:65:34:26:A8:40:94:4D:77:B5:B9:7F:3B:F3:CE:78:9D:16:B4:FB
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 0187753D0DE5B6E9256DD3FAA187158F7645
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/BGU0JqhAlE13tbl_O_POeJ0WtPs.roa
Signing time: Wed 12 Apr 2023 11:32:28 +0000
ROA not before: Wed 12 Apr 2023 11:32:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35663
IP address blocks: 2001:1620:2015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:3d:0d:e5:b6:e9:25:6d:d3:fa:a1:87:15:8f:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Apr 12 11:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04653426a840944d77b5b97f3bf3ce789d16b4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:56:2c:97:9a:08:1f:20:33:ef:8f:1c:ad:
f2:09:0c:f9:68:f0:f2:89:bd:ae:f9:5b:b3:0c:fa:
72:4a:d7:52:bf:72:c3:6d:1c:7e:e4:b6:ed:bd:e1:
18:7c:b0:9c:a6:a6:bc:f9:d7:a1:95:c4:c7:1b:b0:
a8:fd:9d:80:82:d7:c0:69:8c:09:2a:bd:09:ff:96:
69:5a:9c:fa:2d:b9:ec:47:bb:99:af:41:d0:77:f6:
0b:98:61:f7:48:fb:7e:70:8a:fd:b8:53:9f:52:bb:
9a:ac:87:0c:87:01:93:b6:89:56:89:7a:19:2c:ed:
60:f1:98:f4:a4:79:94:a9:1f:5e:d9:d8:d0:63:87:
d6:4e:f3:ce:ea:98:86:ec:62:c4:ba:4a:43:6f:1d:
21:b0:48:44:4b:69:d8:d0:79:91:74:75:cc:72:7b:
ca:07:08:02:89:10:5c:c2:b7:43:2e:67:fd:e8:f8:
98:1e:44:c9:df:68:ac:0a:4c:11:4b:f2:e4:9f:21:
88:4a:63:35:f0:91:66:e6:f6:55:df:7f:dc:11:d6:
2a:86:1d:47:af:b1:b8:cf:75:80:41:9e:a2:7d:09:
c7:96:6e:d4:0b:33:28:95:a0:94:88:aa:07:da:2b:
86:26:4d:fa:1b:12:b5:41:31:e8:13:c4:7f:74:ee:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:34:26:A8:40:94:4D:77:B5:B9:7F:3B:F3:CE:78:9D:16:B4:FB
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/BGU0JqhAlE13tbl_O_POeJ0WtPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1620:2015::/48
Signature Algorithm: sha256WithRSAEncryption
b7:e6:7c:84:3f:fb:06:cd:21:90:35:06:5d:44:a7:54:f6:0b:
43:5c:b8:49:6d:92:97:65:26:15:37:bb:b0:2e:c2:a5:bf:f0:
30:07:aa:ff:96:69:95:a5:71:39:98:4a:af:eb:9f:6f:de:c5:
1c:81:1b:8a:cc:62:5c:a5:ce:71:a6:3b:96:96:cb:d4:35:d7:
38:a0:75:6a:6a:ae:75:22:b3:2c:e1:47:07:09:bf:9e:45:b7:
05:40:7a:d0:c3:75:f0:b1:fe:07:08:f9:ff:54:19:3d:26:d3:
03:f2:6e:11:49:fd:13:f9:33:f9:14:b7:87:5c:14:87:26:74:
aa:fa:05:96:b3:72:23:99:00:a5:71:68:7a:7b:aa:a4:99:5f:
dc:54:ab:6e:2d:ac:38:04:d5:c8:34:75:3b:ab:eb:8d:2c:a8:
e6:af:f7:17:22:24:25:c0:84:69:f0:ed:49:8f:9f:99:d6:f6:
38:6d:9b:fd:91:6b:ed:83:cb:fe:ed:31:2a:58:80:4b:9c:06:
e5:bb:d8:fa:0f:ec:7e:87:63:b4:4a:e0:e1:06:de:86:01:82:
cf:07:ff:99:a8:20:47:ba:7a:b3:01:67:b6:73:71:0b:e6:c5:
ea:3b:20:70:e0:e4:23:89:f3:8e:18:06:2b:17:69:d3:bc:36:
d5:a3:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:15 2025 by rpki-client