Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/BtcHbPHD26Qwc1G-pP6CPPw4pIU.roa
File: BtcHbPHD26Qwc1G-pP6CPPw4pIU.roa (raw, json)
Hash identifier: nICc1JyNg4HlCnzKrMY4T8VosPbsRHz8922GeFyQja0=
Subject key identifier: 06:D7:07:6C:F1:C3:DB:A4:30:73:51:BE:A4:FE:82:3C:FC:38:A4:85
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 018441396025F56806FCCDAD2915326D978B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/BtcHbPHD26Qwc1G-pP6CPPw4pIU.roa
Signing time: Fri 04 Nov 2022 05:59:49 +0000
ROA not before: Fri 04 Nov 2022 05:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.138.12.0/23 maxlen: 23
91.132.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:39:60:25:f5:68:06:fc:cd:ad:29:15:32:6d:97:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Nov 4 05:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06d7076cf1c3dba4307351bea4fe823cfc38a485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:26:30:0e:96:ae:54:2a:9b:4a:f3:31:b2:
d0:83:ae:2e:d0:58:7d:7d:db:f4:1d:36:a6:0f:1b:
b6:3f:8e:a5:4f:85:5f:6e:b9:39:89:f9:52:01:bb:
2e:db:ac:4b:98:04:72:4a:1c:9a:d8:de:27:32:2e:
93:56:80:dd:01:43:e6:91:ac:e0:1a:06:f3:72:ef:
57:c0:92:16:2e:57:85:67:b7:67:26:c4:79:72:c0:
19:db:f1:9e:50:4d:c6:95:7e:7c:c6:fd:70:91:80:
fc:c7:c8:c5:e5:87:b1:e7:4f:57:d4:23:69:a5:8c:
d1:79:eb:7d:c1:78:f0:4f:20:ab:e3:f9:76:6a:63:
67:1a:65:63:9b:2f:58:b3:25:9c:db:0d:21:ea:d8:
52:5b:d1:81:83:da:69:e7:77:b9:3c:16:b9:29:80:
c5:7d:f8:d8:1b:ef:7d:84:11:41:c9:4c:12:4a:bd:
ae:36:37:9b:08:4d:f2:41:87:59:f9:a5:3f:b6:37:
47:7d:73:bd:50:29:20:fa:f7:74:a2:32:c2:5b:e4:
e0:ad:82:3f:50:34:34:63:c4:51:df:80:a8:70:54:
b0:28:f7:61:74:be:6e:da:e4:70:2e:df:19:f7:2f:
69:74:8f:1d:4c:79:f0:8e:f7:6a:13:83:ec:27:3a:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:07:6C:F1:C3:DB:A4:30:73:51:BE:A4:FE:82:3C:FC:38:A4:85
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/BtcHbPHD26Qwc1G-pP6CPPw4pIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/23
91.132.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6a:ad:43:7e:67:4f:68:7f:99:a9:4f:79:59:7b:57:7c:2d:
69:8a:3a:f5:77:ad:2d:48:b1:91:23:25:20:fc:48:32:18:57:
e1:49:e9:a1:3d:6b:43:5b:70:bc:7e:fd:c6:db:41:21:d6:f0:
22:e3:70:2c:a4:b9:7c:b8:25:68:9a:05:ce:a1:72:17:55:12:
7b:d1:d8:b0:f3:09:9a:91:9d:e5:c5:46:26:a9:6f:c5:97:95:
ef:35:b5:d0:08:b1:05:eb:46:80:7e:fc:f1:9a:e0:65:72:01:
86:a8:73:4b:d2:20:bf:09:ca:8b:ae:b4:97:89:ad:32:3b:f6:
40:13:9a:aa:54:14:95:08:11:d2:21:fb:a0:5f:80:f0:9b:6f:
01:d4:0b:6f:5f:fd:15:1a:89:ca:1c:f6:7f:32:02:a3:ce:32:
e1:c0:87:be:de:7a:3f:8b:38:a9:c9:ab:06:07:95:3f:5f:86:
a4:eb:9f:a8:fe:ad:95:5f:04:ae:05:0c:6e:7c:47:dd:68:df:
bf:71:dd:54:32:c6:ea:72:9b:fd:89:dd:be:b4:4a:73:de:48:
23:22:fc:1f:b7:08:20:d3:a9:b9:90:f0:70:a5:bd:0b:02:e3:
b6:a1:7c:e9:5f:fb:17:62:ce:07:22:ec:7a:9e:0b:1e:f0:f4:
20:72:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:48 2025 by rpki-client