Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/BFq1km9XkHnmoDoXJVc27vizfZA.roa
File: BFq1km9XkHnmoDoXJVc27vizfZA.roa (raw, json)
Hash identifier: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=
Subject key identifier: 04:5A:B5:92:6F:57:90:79:E6:A0:3A:17:25:57:36:EE:F8:B3:7D:90
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019427481FDD23DBCB64D3CA4662C66F68B2
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/BFq1km9XkHnmoDoXJVc27vizfZA.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47343
IP address blocks: 2a07:c281::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:dd:23:db:cb:64:d3:ca:46:62:c6:6f:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045ab5926f579079e6a03a17255736eef8b37d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:c4:b2:32:83:45:23:b2:b1:42:67:bb:b8:
7f:5a:e2:6c:65:2c:03:fc:8f:ca:ea:9c:7d:fa:10:
59:40:56:f5:eb:2a:3c:83:21:4f:54:91:fa:18:d5:
24:30:0e:81:35:ee:03:e2:57:89:6e:c4:d3:82:0a:
39:e1:96:b0:34:f4:ae:46:94:b0:6f:b4:60:9c:6f:
5e:d6:be:fe:52:b5:a8:19:8c:c4:3e:ed:f8:d2:14:
18:24:14:5c:93:21:2f:34:0a:34:de:2d:09:14:68:
cc:ca:eb:31:1f:d5:7e:bd:19:1f:1e:f7:65:86:17:
a6:87:03:13:87:ac:10:5a:3a:0a:95:7f:44:95:03:
a1:73:e6:f9:81:34:fb:14:43:09:94:8b:ed:80:66:
08:80:5b:bd:e7:3d:ae:37:83:ef:73:d1:0e:ba:76:
b4:a1:ad:70:d7:41:79:1c:c8:5d:83:7a:32:5a:03:
fc:ed:ed:7c:6a:42:ab:dc:6a:10:4f:43:2f:44:c2:
47:bc:4f:68:c6:ad:72:0d:a1:84:9e:8d:ce:12:57:
f9:9d:3c:4b:2b:71:57:f3:b9:8f:e0:2c:a1:0e:f1:
9a:b6:0f:6f:3a:52:78:58:f7:9d:f1:2a:b8:59:1f:
54:63:70:be:22:c7:50:6e:8c:3a:f0:09:51:67:fd:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:B5:92:6F:57:90:79:E6:A0:3A:17:25:57:36:EE:F8:B3:7D:90
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/BFq1km9XkHnmoDoXJVc27vizfZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:c281::/32
Signature Algorithm: sha256WithRSAEncryption
46:d6:58:71:26:7f:a4:f3:03:13:e8:b5:7d:26:18:5e:dd:92:
38:0a:63:cb:f2:dc:56:4f:ef:1e:f4:00:c2:a5:31:39:ee:b9:
34:41:b2:84:7d:1a:d4:59:da:3d:4f:d9:58:0b:99:9a:a8:c8:
20:67:f7:64:55:67:c8:94:91:bf:7d:5b:5a:ae:2d:db:b4:dc:
3c:b0:52:a2:2b:78:d8:59:fb:8b:a3:be:cf:b5:c6:64:62:06:
05:60:b1:e4:ce:f6:eb:34:6f:53:02:05:86:a4:d4:34:45:3c:
df:68:ae:4b:ef:ba:02:f3:18:e4:93:fa:78:4e:89:fc:8e:fb:
47:28:6f:c6:82:a7:ae:cb:83:e7:04:91:46:10:68:96:47:87:
94:44:cb:57:97:87:39:23:73:9e:bc:e9:da:0f:40:25:db:ee:
b2:3a:64:7b:9a:2d:c2:39:f5:78:48:a3:05:c4:83:f7:9d:2a:
6a:e0:1d:cb:66:40:69:e5:a1:5c:24:62:22:ec:8c:26:da:64:
24:c1:e2:f1:4e:f1:0f:5a:ed:36:e2:17:a0:f3:21:05:a1:fd:
59:b4:02:07:d3:50:27:db:ce:ec:6d:52:f1:b0:6c:81:b1:1a:
7b:cc:f0:4c:c2:28:98:4d:e2:b9:d7:c5:98:c6:e6:aa:2d:b6:
fa:e7:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:59 2025 by rpki-client