Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/BNK50FDIwLul7LRBqtaICEr9khw.roa
File: BNK50FDIwLul7LRBqtaICEr9khw.roa (raw, json)
Hash identifier: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=
Subject key identifier: 04:D2:B9:D0:50:C8:C0:BB:A5:EC:B4:41:AA:D6:88:08:4A:FD:92:1C
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 019427B5E85B589D277D4A771494830F9A15
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/BNK50FDIwLul7LRBqtaICEr9khw.roa
Signing time: Thu 02 Jan 2025 15:50:20 +0000
ROA not before: Thu 02 Jan 2025 15:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197254
IP address blocks: 46.229.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e8:5b:58:9d:27:7d:4a:77:14:94:83:0f:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 2 15:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04d2b9d050c8c0bba5ecb441aad688084afd921c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:c6:84:bc:33:8d:79:45:e6:3a:15:6b:33:
92:3f:87:93:bc:6b:37:c0:a0:07:04:53:d2:b5:ee:
07:d7:cd:ce:a2:ce:06:4d:0d:52:0f:87:fd:27:30:
50:a8:ed:78:1e:3f:50:7f:67:70:87:9a:48:83:ce:
49:09:cd:e8:69:88:4f:b8:5e:b3:42:7d:a2:ca:89:
6f:76:18:22:bc:a3:3e:92:76:ef:97:82:93:f8:17:
0f:9a:3e:70:c0:04:2d:ef:1b:a6:c2:03:29:41:78:
5f:bc:37:1a:af:83:2a:4d:ff:93:90:4c:46:d3:34:
1f:ee:e9:19:93:f1:6c:63:6f:d4:e5:cc:e6:81:2c:
35:6a:51:ff:32:be:48:93:31:bb:a2:4e:12:97:09:
70:f2:2e:b3:4e:35:36:cd:95:80:db:7e:be:f6:02:
79:2a:a5:2b:8d:b7:b8:74:48:7a:2e:1e:35:e2:2d:
2b:56:91:71:9f:36:3c:0f:54:b1:b1:e5:a3:f0:6c:
bb:bf:bf:86:1a:d2:71:3f:f3:70:ae:fd:2c:00:80:
60:25:39:1f:19:8e:fc:02:b6:14:b3:54:28:1c:7b:
ce:5a:13:aa:87:bd:7c:c3:fb:8b:92:6b:b5:ad:d4:
8c:75:c5:f3:df:74:5b:d9:b6:63:61:f1:bd:d0:d2:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:B9:D0:50:C8:C0:BB:A5:EC:B4:41:AA:D6:88:08:4A:FD:92:1C
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/BNK50FDIwLul7LRBqtaICEr9khw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:90:2f:48:b4:65:d5:18:f3:da:cc:be:c1:36:16:ec:30:c7:
33:db:d3:0a:f9:34:6f:3d:4d:7f:9c:ee:2d:82:80:07:1a:a9:
87:07:b0:65:49:ad:7e:79:2f:2a:b5:96:e2:76:d8:68:03:88:
83:d7:f0:2c:c7:3e:ba:e1:58:7c:9a:6b:c8:a9:ac:01:b6:76:
5b:5d:eb:2c:0b:68:be:5b:f6:bc:8e:e7:11:10:61:52:ac:36:
40:93:dd:0e:0a:fc:aa:78:09:bf:14:af:63:68:d8:d4:2d:1f:
44:38:05:66:0f:9f:02:cc:0a:77:a6:de:7b:c7:a7:ea:2e:b3:
8f:6f:e1:ec:13:bf:20:3f:07:e7:8a:ce:e8:c8:6c:ed:54:39:
4c:a6:86:d6:94:a0:bf:20:07:2a:16:a3:9c:7a:a4:33:7b:66:
42:59:57:20:4e:58:a2:a6:15:ea:88:98:a1:6e:c9:65:dc:86:
13:e8:84:f3:0e:12:93:7e:e0:d7:95:0c:34:c1:16:68:ef:b7:
95:c6:7f:3a:51:73:ee:32:01:7f:7c:ea:e1:4d:bc:c3:02:55:
c9:5f:d5:8f:ee:93:36:9d:d1:df:23:51:12:56:0a:ca:ce:65:
0d:ca:41:03:ff:82:de:64:95:a2:c9:ba:40:a3:00:e0:bc:45:
7d:39:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:07 2025 by rpki-client