Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/BmfcOnYElMh5PaCoOK8fAlhsffE.roa
File: BmfcOnYElMh5PaCoOK8fAlhsffE.roa (raw, json)
Hash identifier: X8evOs6zwE8U3kmLtLJ0PEiZyO0j2fSRThXJ71ro0bc=
Subject key identifier: 06:67:DC:3A:76:04:94:C8:79:3D:A0:A8:38:AF:1F:02:58:6C:7D:F1
Certificate issuer: /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial: 01950F166D85CF667E7D5A9D025B1C825B2C
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/BmfcOnYElMh5PaCoOK8fAlhsffE.roa
Signing time: Sun 16 Feb 2025 14:08:02 +0000
ROA not before: Sun 16 Feb 2025 14:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211335
IP address blocks: 194.15.45.0/24 maxlen: 24
2a13:e300::/32 maxlen: 32
2a13:e301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:16:6d:85:cf:66:7e:7d:5a:9d:02:5b:1c:82:5b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Validity
Not Before: Feb 16 14:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0667dc3a760494c8793da0a838af1f02586c7df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:b5:eb:67:27:05:0b:68:20:08:e7:db:f4:
42:a2:76:0e:cb:c2:b4:99:38:4c:db:db:2d:08:c5:
31:02:96:2b:4c:0a:19:ac:c1:82:87:3d:19:5e:90:
8e:0a:e4:ff:0a:c4:72:74:6d:f5:ef:3d:32:82:c3:
1c:f9:35:36:86:b9:d0:02:15:bf:20:26:a0:ac:7f:
b4:02:f9:5b:ab:8b:56:cb:2e:78:38:27:d3:ff:4c:
10:f8:9f:30:30:12:aa:d7:6c:8e:32:6d:9c:76:ea:
53:ba:5a:b8:d3:5f:6d:83:b8:96:5e:96:22:71:76:
f3:0f:26:25:39:5e:d1:50:1e:02:3d:4f:79:05:d3:
02:e4:2b:2c:8d:f1:fc:40:e8:bb:9c:e7:ff:a4:98:
cf:cd:b0:e9:4c:28:cb:66:df:00:ed:1c:9c:ac:46:
33:c2:4b:01:5a:a9:1a:fd:3a:7f:be:df:e4:d9:5f:
10:ed:34:37:0b:13:45:d5:d1:5d:f5:d5:d8:a0:44:
b8:68:e5:48:b3:b9:a3:6e:55:5f:c3:16:ab:5d:12:
83:51:00:f6:29:d2:7f:6c:44:6f:cf:8f:19:27:de:
8f:98:f8:28:d7:e0:d7:11:1b:36:fc:a6:9d:9f:b0:
98:79:11:24:26:00:a2:aa:eb:ec:82:8b:cb:58:e0:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:DC:3A:76:04:94:C8:79:3D:A0:A8:38:AF:1F:02:58:6C:7D:F1
X509v3 Authority Key Identifier:
keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/BmfcOnYElMh5PaCoOK8fAlhsffE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.45.0/24
IPv6:
2a13:e300::/31
Signature Algorithm: sha256WithRSAEncryption
0c:86:99:a3:ab:c7:2c:83:28:3a:b8:92:4c:76:5b:a9:36:9d:
76:c4:78:55:49:10:1b:10:a2:42:43:57:d3:c3:4d:58:f9:0b:
ad:0f:13:12:3f:05:71:e1:bf:3e:94:48:45:1c:b3:eb:5d:cf:
82:fa:0e:4b:7d:f8:1f:d6:f6:6e:10:44:54:4b:12:eb:f5:ef:
7c:db:c5:2c:1a:2d:95:9e:cc:52:87:42:f3:bd:f1:41:2e:90:
74:b5:d4:96:56:20:e1:8f:78:e3:e0:22:b3:55:ac:bf:63:85:
58:25:e7:5e:da:81:7f:4e:0d:15:02:b4:39:4c:ee:7d:d6:99:
d1:45:bc:e8:fa:45:af:4d:25:93:0c:e2:63:7a:d2:a2:fc:19:
fe:c9:16:12:66:b4:98:59:14:39:ae:4d:15:ba:81:9b:96:f4:
4e:7c:20:17:27:65:47:88:5d:b9:c9:7b:fa:7b:04:e0:5d:83:
77:e2:3c:da:52:e7:dc:b6:81:3e:ba:b6:33:49:3a:15:db:1a:
8a:45:29:57:8b:44:5a:e0:d7:9d:3f:0f:41:6d:1c:28:f6:5f:
df:0f:1c:85:5e:59:59:15:97:4c:35:78:51:c3:a9:b6:93:2e:
80:ec:bf:42:2e:cb:23:bb:ce:93:ba:5d:ba:e8:46:82:e5:33:
7d:bd:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:14:11 2025 by rpki-client