Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/BWKFYtuMXyE_lLT4h0W6XfTBenI.roa
File: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (raw, json)
Hash identifier: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=
Subject key identifier: 05:62:85:62:DB:8C:5F:21:3F:94:B4:F8:87:45:BA:5D:F4:C1:7A:72
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 019420D5C18439E2A6337BD5823A86F5899C
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/BWKFYtuMXyE_lLT4h0W6XfTBenI.roa
Signing time: Wed 01 Jan 2025 07:47:47 +0000
ROA not before: Wed 01 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203201
IP address blocks: 45.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c1:84:39:e2:a6:33:7b:d5:82:3a:86:f5:89:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05628562db8c5f213f94b4f88745ba5df4c17a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:0e:4f:0d:3b:b3:69:9f:98:c1:ab:3a:29:
b8:f3:59:74:cd:d0:19:d7:b9:2c:b0:16:23:94:39:
9d:59:73:fc:e8:e0:62:31:5a:6d:c5:de:0b:a1:53:
27:4a:dc:a0:98:cf:31:21:e5:2b:6d:3d:e3:80:ad:
c4:0d:d9:fe:35:97:3f:08:0c:4b:9d:05:74:39:15:
f3:c3:01:27:f5:51:37:dd:0a:01:37:7c:30:f6:30:
fd:51:1b:d5:0c:28:54:86:d4:0d:fb:6e:44:ea:8d:
05:54:dd:75:4e:7b:ef:eb:d8:84:8f:6b:37:5f:ad:
0b:25:99:64:aa:a1:b9:d1:23:f4:cc:8f:2c:2c:48:
01:1f:e8:2e:87:2b:fe:3c:7a:6c:41:cb:82:8e:1c:
d7:da:ca:d0:cc:83:d6:14:a6:33:27:4c:9f:e2:90:
7b:ed:64:05:08:17:77:84:81:2b:00:02:e4:47:86:
26:46:f6:16:e4:9b:17:57:68:b0:08:35:f2:eb:96:
1f:a3:ff:c7:e3:3d:48:8b:05:f4:39:76:0f:a4:7e:
9b:65:23:d8:4d:cf:8d:39:7f:49:87:4f:98:0b:08:
68:29:8f:59:da:d9:ae:86:9c:74:ed:0e:67:77:fc:
b9:91:c1:17:99:36:e4:bb:5c:3f:27:f0:f7:36:7e:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:85:62:DB:8C:5F:21:3F:94:B4:F8:87:45:BA:5D:F4:C1:7A:72
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/BWKFYtuMXyE_lLT4h0W6XfTBenI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:9a:d8:8f:53:9a:c4:16:ce:d1:a8:83:e2:f7:45:f4:f5:
3c:10:d4:31:4a:f7:de:ce:14:b2:28:45:25:2c:1e:b2:62:3c:
4d:13:8d:f6:e9:05:80:88:1b:7e:77:67:0d:db:9b:23:36:66:
97:c2:72:09:bb:70:fa:43:61:70:65:56:38:7b:3e:e7:d7:15:
a9:a3:9f:d0:85:57:0c:28:49:c1:e6:08:c8:3e:39:3f:0a:30:
0e:4f:64:6d:e1:55:db:92:f2:d2:15:11:8a:c9:39:61:1f:ed:
46:0c:0e:ba:3c:e4:25:40:24:ed:dc:51:71:7b:67:5a:c9:fa:
07:41:d1:b8:14:bf:f1:bb:9a:a8:04:78:41:9e:1e:c3:3e:8c:
bd:17:01:a7:b1:33:12:64:2a:0e:7c:62:63:e5:83:21:61:7b:
14:ff:3c:d0:cb:fe:67:bc:c3:f1:15:42:a0:48:d3:cb:44:1b:
2c:55:30:cc:bf:b3:96:fb:78:21:8a:53:29:d2:b5:b6:20:e1:
03:c7:8b:fd:cd:e5:e5:89:57:56:49:6f:5d:2b:12:3f:96:d4:
0e:72:cd:02:c6:52:2c:f1:49:66:6f:5a:90:bb:f6:25:51:d9:
ef:a9:29:9f:90:12:1f:57:1f:42:d1:c3:47:75:9f:63:6f:a6:
55:bc:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:08 2025 by rpki-client