Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BP6xc-GRow7em9LhzOxLgjKVYus.roa
File: BP6xc-GRow7em9LhzOxLgjKVYus.roa (raw, json)
Hash identifier: Hcth0RRyL3wBd/0xMlJH2ABMLkNBsFaEBwo7Oa2dz60=
Subject key identifier: 04:FE:B1:73:E1:91:A3:0E:DE:9B:D2:E1:CC:EC:4B:82:32:95:62:EB
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019623D60C248397A59FB7073E4850AA4D36
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BP6xc-GRow7em9LhzOxLgjKVYus.roa
Signing time: Fri 11 Apr 2025 07:52:32 +0000
ROA not before: Fri 11 Apr 2025 07:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 94.241.172.0/24 maxlen: 24
94.241.173.0/24 maxlen: 24
94.241.174.0/24 maxlen: 24
94.241.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:d6:0c:24:83:97:a5:9f:b7:07:3e:48:50:aa:4d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 11 07:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04feb173e191a30ede9bd2e1ccec4b82329562eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:66:d8:3d:bb:7a:a1:ab:fd:df:c9:35:b1:4d:
4f:0b:4a:e2:8d:38:26:67:1e:b3:b9:76:7c:31:6c:
d1:b5:c4:13:47:0f:e7:17:15:d5:2a:e0:de:b0:b3:
d8:58:d8:2e:f8:cd:71:28:87:e8:7e:bd:b3:c8:37:
04:c2:39:cf:6f:bd:c5:f8:fc:e1:bf:bc:f5:cc:aa:
03:79:dc:be:77:94:0f:d4:1a:a5:3d:71:32:ab:f1:
3e:e8:a4:15:24:3a:2e:2b:29:f8:e8:2d:89:62:02:
46:fd:09:54:e6:60:73:dc:89:8a:c9:36:a8:3e:47:
8c:55:38:c6:b1:97:55:44:df:93:58:7f:c7:81:68:
52:44:c6:70:55:57:8c:4e:c5:20:3e:ad:19:56:a5:
77:4a:8f:f4:26:14:5d:64:d4:62:57:14:9a:03:b6:
46:e1:d6:88:3a:23:0d:7b:e1:3d:13:75:aa:e9:08:
7f:2b:71:01:cb:83:47:2b:de:82:93:10:2f:fb:2d:
f4:e7:bf:2a:cb:b2:bf:f0:41:7e:71:8f:b7:1a:23:
19:62:8d:1e:10:11:ee:3f:df:4d:c9:09:76:59:12:
c5:5f:7d:15:8d:09:f3:ce:77:b6:ae:8c:3c:4a:03:
a1:0d:16:44:60:1a:63:48:33:32:7d:95:74:f1:cc:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:B1:73:E1:91:A3:0E:DE:9B:D2:E1:CC:EC:4B:82:32:95:62:EB
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BP6xc-GRow7em9LhzOxLgjKVYus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:00:31:27:47:9e:20:9e:ce:25:7a:0e:d6:e5:35:e6:8d:b5:
6e:65:e0:be:86:92:a5:f7:44:37:87:db:b4:25:07:54:21:2d:
ed:cc:03:2e:fa:eb:7d:f8:56:c0:c8:f8:80:01:f1:dd:ae:9d:
9e:d7:00:52:77:74:3e:40:8f:28:10:95:ba:19:1c:dc:f0:2c:
e9:d0:49:5d:ae:87:95:4d:08:d3:79:de:1a:08:53:71:31:be:
ce:a3:d9:fc:04:58:38:c6:00:f7:0b:0b:13:6a:95:ef:70:e4:
bc:bf:79:ff:6d:9e:ed:21:81:b8:71:76:23:32:64:2e:9e:77:
64:74:ce:e6:a7:db:95:32:c6:4b:f3:83:ba:0b:a8:7f:af:4f:
fc:2f:7d:2c:ee:f4:7c:37:0a:a6:ec:52:94:56:aa:b4:f6:74:
9a:a2:57:78:4b:82:28:22:ae:70:3a:5f:bb:79:66:60:87:e0:
24:21:2b:2d:a5:da:b6:9c:42:e6:87:8e:b3:f3:6d:e9:11:f4:
35:1f:19:82:29:32:9e:71:e9:f9:c6:e8:79:10:6d:45:83:e2:
38:db:e4:54:37:8b:b0:95:68:15:70:80:60:b3:86:9f:83:6c:
bc:c8:46:5a:7f:4c:25:0c:80:90:15:af:2b:2b:eb:69:23:c2:
32:8e:dd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net