Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/BUjnCPWRRlnhzGZmJFZRagR9_kE.roa
File: BUjnCPWRRlnhzGZmJFZRagR9_kE.roa (raw, json)
Hash identifier: QCJM8w/4aW0x9oxrvQqCjEA9QybbDdyrx3mZya2V08E=
Subject key identifier: 05:48:E7:08:F5:91:46:59:E1:CC:66:66:24:56:51:6A:04:7D:FE:41
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 01941F8C8D8AA51282C79CA767026E6E938B
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/BUjnCPWRRlnhzGZmJFZRagR9_kE.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 195.158.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:8a:a5:12:82:c7:9c:a7:67:02:6e:6e:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0548e708f5914659e1cc66662456516a047dfe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:33:6b:71:19:f1:d5:3d:07:74:fb:80:a6:
ef:cf:6e:2c:fb:c8:7f:cd:0d:32:68:b0:09:9a:bc:
6e:5c:d2:28:06:76:1d:c3:f5:28:b5:5c:e3:10:e0:
5f:09:04:a4:05:b5:52:3a:b8:c7:f4:68:4f:6b:28:
5a:4e:a1:ce:cb:8f:c1:2f:85:d3:bd:dd:13:b5:53:
22:21:fb:fc:2d:67:d7:aa:ab:0c:8a:08:7d:12:ea:
19:dd:93:80:12:80:27:de:60:f5:c0:cd:50:4c:78:
3d:36:05:8d:c6:ad:fa:4b:9e:ec:2c:b6:c4:a6:80:
c5:2f:7e:41:4d:59:3e:90:b7:9b:58:eb:c0:0b:77:
46:be:04:6d:aa:6b:97:ac:e5:9c:69:1d:36:99:c1:
aa:9f:b0:df:08:b9:b1:49:ea:db:52:83:8b:4b:c2:
70:61:ad:19:b2:5e:b6:17:08:13:77:c5:65:7c:7f:
6b:c1:eb:a9:56:bf:c1:63:24:76:a5:63:5d:64:f1:
fb:be:9a:9c:9e:12:0e:b1:d8:47:32:f8:8f:2a:c8:
8e:b7:57:d0:12:4e:2a:01:78:04:d9:6f:c2:cb:cc:
72:e4:3f:b5:b1:aa:11:99:ee:27:95:75:c7:c8:58:
b1:b9:3b:33:e9:c0:cc:a7:4f:04:9c:26:9a:c3:2c:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:E7:08:F5:91:46:59:E1:CC:66:66:24:56:51:6A:04:7D:FE:41
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/BUjnCPWRRlnhzGZmJFZRagR9_kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.230.0/24
Signature Algorithm: sha256WithRSAEncryption
93:71:a8:2b:13:3a:69:47:0a:ce:ab:db:9b:1d:e4:ea:bb:66:
de:6c:3a:07:c6:30:23:70:ae:cb:38:92:50:c1:7e:84:d2:6e:
2f:25:09:50:16:4e:e9:02:2f:23:c3:23:ce:50:d6:41:b8:26:
9e:eb:26:2e:a4:6a:78:f3:d7:76:6b:74:3e:4c:e1:68:b0:cf:
59:bc:08:a8:06:5a:17:36:17:55:7e:67:a3:f9:9f:37:77:fa:
61:7f:91:1f:e5:89:37:30:20:4a:48:33:79:93:fe:6d:44:0a:
89:6c:05:e8:bc:bb:0e:1f:31:b7:0f:8c:87:8b:f0:41:3d:88:
88:ea:34:50:53:41:b3:50:2c:fc:60:54:c3:cc:25:cc:ca:dc:
b7:88:d4:e6:c3:0e:9d:65:1c:97:e6:3d:cf:e5:77:9f:76:09:
53:42:5d:28:65:14:38:36:4d:7a:1d:5a:0c:a7:5c:46:16:6b:
76:de:53:93:07:8e:55:64:a8:c8:99:02:7e:61:f4:e0:48:db:
f3:08:3b:75:31:3e:59:96:be:96:8d:7f:f8:5b:5c:a0:d2:51:
5e:43:51:f5:5e:01:d1:7f:d2:4a:4f:81:41:16:bb:d6:ea:8b:
00:df:74:7b:af:a6:9e:6f:05:25:21:61:8d:f1:79:8f:04:ab:
2f:2c:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:33 2025 by rpki-client