Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/BGdD8LDEAedO7LkZulNO0on6BtA.roa
File: BGdD8LDEAedO7LkZulNO0on6BtA.roa (raw, json)
Hash identifier: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=
Subject key identifier: 04:67:43:F0:B0:C4:01:E7:4E:EC:B9:19:BA:53:4E:D2:89:FA:06:D0
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 0194222003ED6E84DAD0634E5621CEB1600B
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/BGdD8LDEAedO7LkZulNO0on6BtA.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273908
IP address blocks: 185.75.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:ed:6e:84:da:d0:63:4e:56:21:ce:b1:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=046743f0b0c401e74eecb919ba534ed289fa06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:70:1e:27:fd:67:f2:3a:ca:07:8d:92:0a:
fd:20:e2:d6:62:0b:57:25:48:31:6b:5b:95:a6:8d:
6c:72:0b:39:29:75:f9:a2:e8:8e:25:27:93:07:21:
6b:85:fc:32:bc:02:de:63:39:86:9e:81:16:ea:1e:
5c:87:73:9d:9b:c5:22:07:13:e3:ec:5d:e5:f9:97:
e2:1c:c6:ad:57:54:c3:d1:92:f2:79:9a:70:0e:6a:
bd:d6:21:2d:a3:b3:3b:89:17:af:63:d9:92:66:3c:
d8:61:c8:45:9b:61:9f:57:e5:ce:4e:dc:12:4a:4d:
2b:81:d5:2a:cb:6a:3c:99:00:7f:82:51:bc:fd:aa:
af:11:5f:49:76:93:3e:1a:bd:85:ad:41:b9:f6:77:
0b:40:f4:b0:e2:3a:54:44:3c:97:f4:d1:1e:26:cc:
84:ac:35:ea:25:40:d4:45:73:1b:2c:e5:b8:ef:b7:
30:d6:dd:a9:1a:4c:bc:53:30:f7:70:b4:de:25:1f:
ff:70:78:3b:8c:af:d5:fc:a7:a9:c4:79:5c:14:ab:
b9:63:5f:3e:e9:32:e9:51:91:13:f9:cd:8f:5e:d6:
ae:8c:81:68:47:95:37:94:ec:e2:79:11:9d:65:8a:
fd:9f:3a:d3:63:65:ba:ff:52:3d:e5:57:64:74:98:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:43:F0:B0:C4:01:E7:4E:EC:B9:19:BA:53:4E:D2:89:FA:06:D0
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/BGdD8LDEAedO7LkZulNO0on6BtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.13.0/24
Signature Algorithm: sha256WithRSAEncryption
09:74:fd:44:a6:0b:75:dc:e4:25:5d:fa:0b:63:75:bb:a6:7b:
cc:c5:8b:41:92:a4:40:da:e2:19:1c:76:e9:a3:f6:11:ec:90:
d5:d4:e9:f7:da:e4:59:2e:7f:1b:15:a3:39:47:af:24:51:8b:
71:23:f3:e5:d0:5a:83:4c:51:89:e1:86:9d:34:6d:b1:4a:e9:
5e:4b:a8:39:ad:a8:b1:8d:89:17:f4:e6:30:1e:92:23:8e:e8:
7d:32:f7:67:a1:37:4f:14:c8:48:5e:44:39:ef:ee:5a:33:08:
9e:a6:36:34:7c:09:e3:1f:f2:95:06:0a:98:16:11:22:8c:a7:
43:65:61:ea:6b:35:4c:16:24:05:46:e0:cb:9b:3a:ec:da:83:
42:28:2e:1f:50:c2:d1:b4:38:09:2a:93:3a:cc:de:ad:4f:9b:
d8:ae:a7:19:ce:38:8d:c1:c2:07:83:87:15:25:40:31:58:5c:
ef:a3:a3:3c:d3:8c:c6:39:4a:35:f3:a7:9b:aa:cc:9c:9f:fe:
e9:52:c5:17:4a:b1:5c:b6:73:81:06:22:e2:a9:3e:ef:f7:1a:
38:68:6e:c0:c7:36:7f:de:80:2e:5b:18:67:75:3f:5f:f0:a2:
d1:b3:ae:ae:e7:f5:74:ce:a6:4f:07:e3:be:79:d3:53:1a:d4:
d2:4c:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:43 2025 by rpki-client