Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa
File: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (raw, json)
Hash identifier: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=
Subject key identifier: 06:CB:BE:A9:DE:07:6F:5B:EA:56:F1:96:DB:46:69:E2:AF:F5:A6:37
Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial: 01942825BD20B666F7A2E500AE9978F12CF7
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa
Signing time: Thu 02 Jan 2025 17:52:29 +0000
ROA not before: Thu 02 Jan 2025 17:52:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212684
IP address blocks: 91.192.9.0/24 maxlen: 24
107.150.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:bd:20:b6:66:f7:a2:e5:00:ae:99:78:f1:2c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Validity
Not Before: Jan 2 17:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06cbbea9de076f5bea56f196db4669e2aff5a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:c8:14:f7:b9:0c:5e:24:61:d3:67:32:32:
25:3f:2a:3d:99:a5:37:f7:2c:28:56:24:e5:5d:19:
b3:3d:10:b0:b6:64:59:9b:04:73:cd:5b:e3:2d:11:
96:13:71:5b:80:a8:2d:f9:a4:18:bf:ab:74:7c:c5:
20:90:50:2d:37:0f:87:fb:31:29:b4:c3:a6:bd:8e:
68:96:c6:cc:b5:21:5b:31:ed:96:15:8d:3a:16:d1:
8d:34:d7:57:2e:9d:1b:4e:40:06:5f:bb:22:b8:61:
e6:3a:ca:f4:71:38:35:99:4c:80:19:c9:fc:db:33:
15:1d:74:ad:f1:8e:5f:39:cb:0d:5f:1a:ae:6b:ae:
67:ac:7e:31:b0:e0:2e:a6:f1:db:6a:43:4a:e4:af:
7f:e4:a8:42:f6:2c:91:83:41:b9:b6:eb:27:a6:14:
ce:39:56:b2:37:da:d7:ea:48:47:90:d1:ef:03:f8:
d0:cb:a4:4c:61:68:65:15:b6:36:01:e2:b7:92:f6:
6e:17:2c:74:35:89:e3:de:aa:3e:89:0a:e9:a1:91:
f5:46:09:38:10:c3:8f:c3:02:69:db:30:21:fd:3d:
a5:ca:1b:3a:a7:32:f9:8f:a3:a1:b6:9f:de:96:11:
71:13:d0:68:c7:14:0c:2e:23:b9:4b:94:29:a6:46:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:BE:A9:DE:07:6F:5B:EA:56:F1:96:DB:46:69:E2:AF:F5:A6:37
X509v3 Authority Key Identifier:
keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.9.0/24
107.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8a:2b:04:cd:a3:28:c1:5d:fc:5a:fc:a8:fc:ef:de:73:fc:
27:73:e8:91:55:07:91:7f:97:e3:5c:fe:8c:d4:92:7e:63:a1:
9d:8c:75:22:14:eb:e8:4c:ce:57:4b:4b:24:d7:db:d4:07:0c:
aa:e5:3c:55:a4:fa:55:87:3b:7d:9c:51:91:ac:c7:4c:8d:15:
85:e6:25:3c:ad:49:65:cb:8d:dd:7d:50:02:01:04:11:ab:30:
e0:93:b8:59:ea:3a:e3:36:ba:11:22:69:ae:0f:8d:1a:77:bd:
89:e6:03:44:63:d6:64:8e:17:59:21:4a:a6:5d:d0:fb:c5:ec:
4a:e0:6d:4c:e5:5e:1f:42:3a:12:5b:ef:f1:49:ad:9f:78:7b:
a7:5d:1e:d8:ef:7d:a4:bc:26:26:bb:f2:02:b5:dc:55:7c:89:
9c:87:51:c2:ef:03:7b:7c:db:1f:70:64:0a:99:c7:35:6b:92:
9c:68:43:1f:29:12:44:39:69:23:d7:3a:fc:aa:e1:90:10:f4:
14:13:6a:1c:de:29:5a:17:23:be:15:9f:a0:ad:23:b7:1b:e0:
22:5e:03:d6:b5:db:49:4e:40:53:e1:06:e0:5e:42:00:d8:52:
3d:24:8b:91:f6:ad:2d:ad:a9:14:f6:d6:fb:8a:a9:72:39:00:
01:e7:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:26 2025 by rpki-client