Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/bu8KznYx0QOfA9r3NfTHKNDotjg.roa
File: bu8KznYx0QOfA9r3NfTHKNDotjg.roa (raw, json)
Hash identifier: YHg8diII5N5WBFanvQLz6TPq9DMUYRhzlxmLWT5bEpk=
Subject key identifier: 6E:EF:0A:CE:76:31:D1:03:9F:03:DA:F7:35:F4:C7:28:D0:E8:B6:38
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01942067E66B51C27EC47928B55A8F3BE1D1
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/bu8KznYx0QOfA9r3NfTHKNDotjg.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.144.242.0/24 maxlen: 24
45.144.243.0/24 maxlen: 24
91.220.202.0/24 maxlen: 24
91.220.203.0/24 maxlen: 24
185.126.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e6:6b:51:c2:7e:c4:79:28:b5:5a:8f:3b:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eef0ace7631d1039f03daf735f4c728d0e8b638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:f6:c0:30:cc:d2:06:ee:73:67:1d:96:f6:
61:37:1c:9d:6e:07:a5:af:30:a6:76:8c:d0:6e:c6:
0f:5f:69:46:7d:04:cc:38:93:fa:e2:95:fd:b2:7f:
c6:b6:5b:59:60:7f:63:03:84:20:09:84:d9:0d:5b:
7e:eb:95:d6:4f:df:3a:f4:8f:91:ae:ee:9b:82:dd:
78:e5:c1:cb:08:79:14:33:a4:5e:73:13:6c:37:02:
4e:34:de:5a:21:9a:74:60:07:09:c8:5e:a9:80:e4:
92:5a:48:09:15:1d:30:58:d0:fe:32:4f:22:54:4c:
69:30:10:6a:69:05:f2:39:ef:9d:22:60:c2:2d:09:
0f:2b:04:e6:cb:6a:6a:d1:9b:37:f5:e4:70:33:f5:
0f:d0:c1:a5:37:8b:06:2e:e6:a3:fa:0c:b4:a9:55:
08:cc:b4:e8:16:9d:43:39:20:02:75:7f:91:8a:87:
47:61:1d:8f:8d:d0:90:b3:86:c9:9e:7a:62:c8:1e:
f4:f1:64:e7:d1:47:2e:11:0f:b5:03:6c:a5:49:2c:
65:5f:75:6a:03:e5:ab:33:d9:eb:12:a9:f3:29:6e:
93:64:50:c0:17:53:86:2f:21:49:1e:65:ce:c9:49:
59:ae:30:40:83:a9:38:52:f8:26:df:97:1c:ea:6d:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:0A:CE:76:31:D1:03:9F:03:DA:F7:35:F4:C7:28:D0:E8:B6:38
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/bu8KznYx0QOfA9r3NfTHKNDotjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.242.0/23
91.220.202.0/23
185.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
66:44:cb:52:29:25:70:84:9b:55:db:83:9b:4e:14:f1:64:98:
70:b0:48:ac:ad:c8:ca:de:e3:a5:fe:40:64:1b:75:30:99:7b:
7c:dc:45:e6:bc:2a:4d:e9:89:1f:ad:6f:49:57:f8:9e:ee:3e:
60:24:3b:87:44:db:8b:36:d0:89:bc:a4:9a:aa:a4:b5:29:a3:
e6:fb:c5:b3:ed:a1:2b:8f:4e:29:2a:93:74:d6:fb:b2:38:81:
7e:07:c4:95:32:43:4c:95:2b:7b:68:1e:7c:81:ca:ef:9b:40:
bb:26:8a:2a:b4:e7:df:52:30:cb:8a:70:aa:26:0d:67:86:15:
7e:2f:76:a7:e6:1d:53:69:c7:49:07:3a:e7:bc:13:82:a5:59:
b7:24:c6:be:e6:e7:da:d3:c6:1d:70:2b:f3:bf:71:bb:c8:79:
40:7a:f8:78:a8:0c:f7:47:64:44:ca:57:1b:3b:29:b4:84:e6:
a8:67:f4:8b:f6:26:e6:4c:3c:e5:d0:75:3c:e4:f8:82:47:96:
55:8b:12:1f:2d:44:40:f9:e8:ce:32:fd:90:1e:05:11:0a:ab:
3a:80:44:23:cf:bc:aa:8f:e7:02:73:cc:16:76:a6:69:98:c3:
61:ac:40:be:52:bf:9d:db:d5:d8:c3:cf:f3:35:b4:bb:45:1c:
0d:68:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:59 2025 by rpki-client