Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/BsjKxlyhr1xJt-_B7RFdha2dw34.roa
File: BsjKxlyhr1xJt-_B7RFdha2dw34.roa (raw, json)
Hash identifier: DZrrLtviTY8IeT2xTa11fcFFAO4I1PCCgwnVwmVsFaU=
Subject key identifier: 06:C8:CA:C6:5C:A1:AF:5C:49:B7:EF:C1:ED:11:5D:85:AD:9D:C3:7E
Certificate issuer: /CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Certificate serial: 01942143DE2372D73B432B23EA737411058C
Authority key identifier: 94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/BsjKxlyhr1xJt-_B7RFdha2dw34.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20668
IP address blocks: 45.13.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:de:23:72:d7:3b:43:2b:23:ea:73:74:11:05:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ffc318804f72ac11d2be2e2c19f166aed8704
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06c8cac65ca1af5c49b7efc1ed115d85ad9dc37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:d2:f7:0d:b0:29:99:6d:b3:d7:61:65:2c:
ca:ef:9a:39:93:d7:94:9f:d5:fe:7f:f8:22:43:12:
33:29:cd:06:09:07:a3:7f:85:88:76:d1:5a:10:3e:
8f:7c:95:de:a6:e9:d1:b0:c4:4e:f3:02:a9:a7:37:
21:82:5f:94:15:9e:35:22:e9:5e:3c:5e:db:eb:3e:
a9:92:f4:96:0a:ca:10:b4:6a:5a:11:51:8f:5b:9b:
b7:d2:63:18:44:fd:e0:cf:60:60:94:2a:08:e9:bd:
dc:a9:67:9e:aa:12:66:5e:ae:5e:f4:7f:7a:43:5b:
15:96:28:e8:f6:eb:6f:9e:d8:5b:8b:04:08:4c:7e:
3c:71:84:de:c8:58:2b:fb:5b:ec:cf:66:20:38:e5:
fe:13:04:38:4d:e3:4d:8d:9b:9a:5b:ec:b3:ce:13:
a5:d4:6c:d2:e4:a0:a4:88:07:cc:f0:c1:7d:5e:f4:
35:3e:9a:5d:7f:f4:aa:41:b9:20:23:ac:b8:80:22:
8e:97:82:de:09:4f:29:ca:c7:ac:c9:e0:2b:2c:0b:
48:0a:43:4e:d7:c2:19:f8:6a:0a:83:55:21:9f:d7:
b6:79:b4:95:62:c9:6c:6f:3f:2e:96:14:22:5c:e8:
a7:f5:c5:c5:ab:0d:bc:c8:7e:17:b7:40:7b:92:a3:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:CA:C6:5C:A1:AF:5C:49:B7:EF:C1:ED:11:5D:85:AD:9D:C3:7E
X509v3 Authority Key Identifier:
keyid:94:9F:FC:31:88:04:F7:2A:C1:1D:2B:E2:E2:C1:9F:16:6A:ED:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/BsjKxlyhr1xJt-_B7RFdha2dw34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/10f538-7844-4e64-9e64-38e4a2ab2072/1/lJ_8MYgE9yrBHSvi4sGfFmrthwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f9:2c:d3:38:78:3c:38:c8:19:e7:ed:ef:35:d6:4a:57:9e:
c8:dd:cd:bb:f7:3f:5d:b2:39:d7:ad:0d:3a:1f:fb:08:69:7d:
6e:15:6d:46:34:c2:66:dd:16:48:83:2b:ca:fb:5c:96:f2:e8:
ce:69:75:e4:9a:86:f0:29:fe:5e:af:5e:99:17:aa:ef:96:4c:
45:47:36:d0:85:df:b3:f1:15:8e:d2:b8:04:fc:74:6c:50:48:
6d:a8:88:ef:ce:56:36:af:06:d6:77:03:92:a6:03:20:24:ff:
ec:d7:a4:4e:f5:7f:df:77:20:d2:30:6f:f1:dd:56:03:4b:63:
16:26:c7:69:6e:82:92:95:72:8a:d5:19:58:f0:94:f3:76:7f:
93:ab:27:83:fd:f1:f6:77:60:ec:33:f5:0c:9b:19:e0:77:2e:
a8:82:c6:64:3c:b2:9e:d9:07:e3:c4:49:0c:8b:6d:7c:ae:59:
5a:02:fc:2b:6b:e5:62:48:44:57:3a:7f:a2:ad:21:d6:a7:4b:
6e:47:31:41:78:2f:9e:04:37:f3:8f:58:f8:a7:bc:d5:dc:b0:
00:86:2a:4c:81:7a:75:3f:af:0d:00:d5:5f:ad:d2:20:6a:56:
1c:a7:fa:da:88:82:ec:57:b9:b2:7a:ed:4a:41:5d:2c:36:64:
42:ca:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:18 2025 by rpki-client