Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/Pbu77IMqgBIggCHuoPCgPeA-JYI.roa
File: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (raw, json)
Hash identifier: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=
Subject key identifier: 3D:BB:BB:EC:83:2A:80:12:20:80:21:EE:A0:F0:A0:3D:E0:3E:25:82
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01942444C212366A61801CD7267F444C25B6
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/Pbu77IMqgBIggCHuoPCgPeA-JYI.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207790
IP address blocks: 45.129.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:12:36:6a:61:80:1c:d7:26:7f:44:4c:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dbbbbec832a8012208021eea0f0a03de03e2582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:dc:48:7d:91:53:7b:2a:ae:ab:f4:2d:6f:
f3:52:a4:10:40:dd:ee:27:e9:39:6c:4a:b2:3a:b9:
a7:b5:22:69:b2:b9:5f:43:a7:af:d3:d5:b9:27:0d:
77:e2:fd:82:32:f9:e1:75:2d:32:f3:be:90:5d:54:
ce:fb:21:b7:e2:5d:d8:5d:0f:7b:eb:84:86:b2:b3:
79:ff:42:eb:1e:dd:ec:19:8f:e5:ca:3b:88:6d:56:
c9:ed:f1:c5:84:9c:74:86:c8:df:2d:e4:72:c6:e1:
d3:fa:5e:d6:dd:50:dd:d7:9c:5b:eb:6f:63:44:49:
04:c4:c3:93:1a:27:95:5f:ae:70:0a:a8:fc:e9:cb:
1f:94:21:90:dd:bf:40:34:ec:fd:d1:97:2f:86:b7:
c8:af:1e:14:5e:ad:33:e6:c1:76:47:b6:a3:c2:6d:
e1:c6:5e:ad:cc:9b:51:32:01:34:ef:d6:15:91:09:
5d:de:f6:9d:c0:6c:26:88:bb:a9:27:9a:01:ce:e6:
8e:77:14:7c:2a:f1:92:4d:61:8f:ba:34:4b:24:a8:
11:90:5f:e7:3d:52:f0:07:0e:93:ba:27:ee:b2:9f:
dc:57:47:cd:9c:25:b1:3a:d2:25:7f:29:60:68:d3:
6a:ea:cf:db:51:ce:8a:37:ff:e8:ba:28:6c:e9:bd:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:BB:EC:83:2A:80:12:20:80:21:EE:A0:F0:A0:3D:E0:3E:25:82
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/Pbu77IMqgBIggCHuoPCgPeA-JYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:e6:58:16:3c:a5:fc:f2:07:28:cd:f9:6d:bf:55:8f:67:f7:
ef:00:fb:e0:27:f2:ca:b4:4c:d8:3e:ff:c5:2a:f7:19:0d:33:
08:79:cf:78:d3:4e:aa:0d:ca:5b:c2:7c:ff:e5:41:79:1d:85:
45:5e:fa:a9:c6:ee:85:e7:d2:85:a1:d6:d5:f5:fd:e1:fa:10:
6f:ba:ab:12:87:80:a1:d4:f2:88:f7:80:44:6b:87:65:b2:dd:
08:63:6a:20:cf:ec:4a:2b:b3:eb:e1:39:aa:e3:6a:4f:92:6b:
b9:4e:5a:4f:bc:87:3c:0f:b6:a9:1d:00:4b:12:6c:d8:40:ee:
a6:6c:e6:fb:cd:c9:0e:3e:25:b6:52:56:ef:64:52:1c:83:3e:
66:ed:72:e7:88:af:93:31:15:bb:3c:35:dd:f5:ef:1b:dc:7f:
cd:38:ce:e3:fd:86:0a:5f:f9:ec:3a:7e:79:bd:d1:df:2a:1b:
d9:a4:8e:4d:a1:49:70:97:cd:80:ce:79:89:f3:c5:59:44:69:
9e:fb:58:c5:29:0e:3a:8a:09:3e:09:05:62:77:f0:f6:a6:26:
b8:0f:b9:22:1e:19:f3:6f:f0:9c:bd:c7:c8:ba:8d:04:58:1b:
d2:9c:12:2d:79:17:d5:21:70:7d:44:82:48:b2:05:a9:39:83:
a6:b2:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:43:34 2025 by rpki-client