Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa
File: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (raw, json)
Hash identifier: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=
Subject key identifier: 07:01:FD:18:A0:B8:6F:B3:11:FB:F9:8F:52:4B:E8:E6:45:FA:31:B3
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 019424B3B772A1A76B66A17822FEE733C53D
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31086
IP address blocks: 193.17.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b7:72:a1:a7:6b:66:a1:78:22:fe:e7:33:c5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0701fd18a0b86fb311fbf98f524be8e645fa31b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:57:f7:e3:83:8e:35:f4:04:24:a5:d8:3f:
38:fa:b9:2c:f0:1d:dd:8f:5b:f3:a0:4a:b8:9b:73:
55:03:ed:67:c5:da:88:5f:12:08:4a:b5:55:bb:9c:
b2:7d:e5:15:a7:55:13:97:6a:c1:b2:fa:17:5b:a6:
be:c0:82:b2:c5:e0:08:57:32:f5:c3:45:41:e6:1a:
28:f5:f6:49:8a:98:28:86:27:c2:66:1e:18:9e:6a:
49:1b:be:94:35:6e:9c:0f:ee:52:f5:41:3c:f3:7f:
33:8d:c1:89:f2:46:7f:d5:5a:33:e0:1b:74:cc:7d:
90:6f:a8:eb:1d:d8:3f:75:8a:e4:5c:70:11:9a:d5:
5d:af:23:7e:a2:7a:e0:f2:90:e9:e3:e8:1f:45:b7:
b6:3c:f5:db:98:17:2c:2f:5b:cd:cd:36:2b:75:15:
14:d6:29:67:f4:51:58:b1:f7:1d:28:c0:07:58:ba:
77:19:27:c3:b5:ec:1a:fe:ed:b4:c7:4f:8c:0f:e5:
81:0e:ff:fb:47:e1:24:3b:20:93:c2:43:cd:6b:98:
6c:5c:49:ab:47:a9:0e:90:d1:cd:04:bc:64:a7:2f:
41:e5:df:c5:1e:29:a2:7c:a8:5d:63:fb:ea:30:5b:
9b:25:57:12:15:73:36:9c:d7:30:34:ff:6a:fb:8c:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:FD:18:A0:B8:6F:B3:11:FB:F9:8F:52:4B:E8:E6:45:FA:31:B3
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:49:9b:0a:ec:5c:df:01:8d:9f:fe:1c:07:3f:08:c5:95:6b:
79:54:b9:b9:55:22:2c:aa:54:2b:97:1b:c1:5a:1d:60:ff:8f:
fa:94:6f:ef:a3:13:df:57:84:56:32:00:1c:41:32:64:67:15:
9b:4c:82:5f:35:1d:6e:85:c9:c5:82:38:a1:38:8c:35:94:fe:
79:ab:a2:eb:5e:bd:6d:c4:ab:e9:54:b4:1c:5d:e0:43:15:cb:
d4:9c:a6:87:ff:28:d3:d1:70:59:d0:5d:5b:ae:b2:60:70:ed:
8d:23:86:7a:08:7e:a0:61:1c:46:d0:13:c1:b5:e8:eb:70:2c:
98:6b:a2:39:59:26:02:17:dd:19:71:f4:a4:78:01:c0:79:59:
75:11:cb:5b:8c:49:99:dd:15:50:13:41:37:aa:36:c8:64:86:
d4:1b:52:a1:23:4b:f3:79:d2:0d:87:82:0b:a2:a9:be:ff:5f:
14:3a:0c:00:ed:d4:5a:58:12:91:c2:f2:20:c8:dc:71:f6:0d:
e5:d7:64:cd:f0:46:ff:23:da:be:73:89:c3:71:c8:4d:a0:09:
13:92:64:21:54:e0:a0:01:85:91:56:98:f0:88:ea:ed:e4:65:
76:9e:7c:14:81:ff:00:f8:45:44:58:4f:05:22:34:cb:1e:95:
5b:6f:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:45 2025 by rpki-client