Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/BgxAJdT7RB-R1LxkpWq40R80RkY.roa
File: BgxAJdT7RB-R1LxkpWq40R80RkY.roa (raw, json)
Hash identifier: 7zUKxz9doEgYxbTNL70+qUxzUI/pxgd0gXPEY7a7RKg=
Subject key identifier: 06:0C:40:25:D4:FB:44:1F:91:D4:BC:64:A5:6A:B8:D1:1F:34:46:46
Certificate issuer: /CN=c93182d9666e419e667de860d544a50361b3223a
Certificate serial: 054C21
Authority key identifier: C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/BgxAJdT7RB-R1LxkpWq40R80RkY.roa
Signing time: Thu 10 Feb 2022 19:35:00 +0000
ROA not before: Thu 10 Feb 2022 19:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35041
IP address blocks: 109.235.168.0/21 maxlen: 21
194.30.169.0/24 maxlen: 24
195.74.36.0/22 maxlen: 22
193.17.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347169 (0x54c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93182d9666e419e667de860d544a50361b3223a
Validity
Not Before: Feb 10 19:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=060c4025d4fb441f91d4bc64a56ab8d11f344646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:d8:44:c7:47:d8:d6:c6:33:84:71:5a:82:
b2:6e:c8:fd:95:b8:f2:45:ef:7e:0f:af:47:0f:93:
c0:87:44:bc:21:c3:9c:4b:e9:34:9d:40:26:0b:fe:
57:39:bb:d2:f7:ec:67:8b:1e:bb:c1:dc:5d:57:6f:
6a:fe:00:68:21:a3:e0:d7:cd:46:8f:8d:c6:7b:5c:
69:80:f1:a9:b4:16:50:40:44:72:09:f8:5d:6a:59:
30:48:79:52:b2:a9:f2:a4:9b:c9:5d:55:4e:f9:9e:
b6:5b:53:d8:b5:ee:6a:8a:94:81:2d:e9:09:d6:9b:
ef:5d:db:07:a2:40:13:f7:3e:fa:91:bf:c4:16:33:
a0:75:41:18:b5:12:f3:bb:9c:36:9f:e0:b6:79:c9:
44:14:c7:3e:ed:71:1a:c6:02:48:ce:ae:3f:c0:2a:
b8:71:9d:0b:31:c6:20:d1:16:0e:8c:80:3e:37:d2:
bc:9c:82:f0:05:53:c0:8c:9c:00:47:24:53:fc:58:
17:23:7a:ce:b1:4b:94:14:f8:da:59:61:a4:e2:82:
96:8c:72:98:4f:1e:2f:af:fa:3a:24:c4:2f:c8:0a:
e0:59:03:bf:b3:5f:e1:4b:7f:7e:4e:02:33:f9:34:
26:3b:ce:15:16:a6:04:90:d2:9b:8a:7f:75:42:7e:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0C:40:25:D4:FB:44:1F:91:D4:BC:64:A5:6A:B8:D1:1F:34:46:46
X509v3 Authority Key Identifier:
keyid:C9:31:82:D9:66:6E:41:9E:66:7D:E8:60:D5:44:A5:03:61:B3:22:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTGC2WZuQZ5mfehg1USlA2GzIjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/BgxAJdT7RB-R1LxkpWq40R80RkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/629715-ddb7-4c6a-ba47-d39fc411fe7b/1/yTGC2WZuQZ5mfehg1USlA2GzIjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.168.0/21
193.17.218.0/24
194.30.169.0/24
195.74.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1c:e8:f4:e1:f7:53:a6:84:cf:23:28:3a:cb:40:c6:60:09:
e9:56:ef:d6:0c:fd:13:85:b4:ab:bd:51:fc:cd:8d:5c:92:43:
c2:84:d8:be:da:f1:a7:3d:b1:87:d9:6d:05:52:d0:f3:89:dc:
6a:f3:e2:df:d5:b1:d2:cd:9a:57:46:73:60:b8:3c:fa:71:f9:
59:0c:8d:c9:b2:15:d5:79:48:1a:1b:6b:86:5c:cc:82:01:cc:
5e:40:7e:2b:a2:16:22:c1:8d:19:7d:13:e6:e1:91:9e:6d:8e:
33:b9:ea:6c:31:6f:32:32:89:01:02:dd:6a:4f:13:0b:3d:0e:
d3:21:eb:6d:8d:a5:d7:fa:48:da:19:89:f7:54:ba:d8:13:a1:
5c:11:48:2d:18:df:98:e0:2a:d0:da:c4:fb:42:16:cd:e7:53:
00:f3:51:22:b1:c3:e0:58:aa:ee:5e:ff:75:c2:49:46:16:aa:
b7:f2:ad:1c:16:87:de:93:44:b5:44:94:30:d8:3d:c8:42:c4:
e0:78:60:85:21:1d:ee:d1:65:b4:01:39:d1:e3:47:c7:91:19:
52:6b:a3:c7:ec:a5:ff:6f:07:ca:84:f5:c9:b2:eb:87:56:89:
da:ef:b3:9f:02:09:77:65:d5:4a:b5:c4:b6:c8:80:e3:cb:9a:
85:25:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:47 2025 by rpki-client