Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BUagtr_9kQTY8i9MdNXLq5cnNHM.roa
File: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (raw, json)
Hash identifier: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=
Subject key identifier: 05:46:A0:B6:BF:FD:91:04:D8:F2:2F:4C:74:D5:CB:AB:97:27:34:73
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01952D047991735F8653CE50ECA4A1449C4B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BUagtr_9kQTY8i9MdNXLq5cnNHM.roa
Signing time: Sat 22 Feb 2025 09:37:02 +0000
ROA not before: Sat 22 Feb 2025 09:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44436
IP address blocks: 45.11.185.0/24 maxlen: 24
194.59.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2d:04:79:91:73:5f:86:53:ce:50:ec:a4:a1:44:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 22 09:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0546a0b6bffd9104d8f22f4c74d5cbab97273473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:44:0c:dc:0e:0b:49:5c:e9:62:61:5e:48:
2e:c0:c8:5a:fb:fd:5b:06:b6:de:ac:91:fd:2a:cb:
95:a7:26:aa:8d:e1:55:9c:28:5f:81:a7:94:16:1b:
0a:3b:e6:93:f9:83:e7:01:e2:a6:2a:99:10:bd:11:
98:0b:ac:7a:c9:1d:5a:44:e8:49:e1:53:80:09:27:
3d:0c:2c:42:4a:17:8c:6d:46:6e:ae:a7:cd:bf:01:
76:5f:1a:f6:fc:81:74:10:e2:40:bf:53:37:bd:4a:
b2:85:8b:d2:2d:b2:42:64:31:4a:07:1b:0c:c9:7a:
d8:ac:9d:05:a1:f2:a3:38:ec:a8:d4:45:ca:be:07:
ce:32:21:d2:20:79:fd:0d:03:4b:b3:fb:f0:fb:54:
f3:2d:54:ad:83:c7:87:15:54:5c:e4:d1:c2:df:06:
f2:43:82:62:8b:eb:01:1a:3e:5c:7f:db:49:d3:cb:
d2:9a:8a:31:c0:bd:53:af:e8:25:89:9c:bc:67:51:
58:95:9a:42:15:0f:93:ea:a2:98:67:48:3c:be:bc:
27:de:b0:e6:a0:5c:41:f4:86:5a:34:df:a5:24:38:
61:65:e2:f9:14:73:c3:54:36:db:83:b0:3b:fc:88:
2f:a9:87:8d:3e:ae:ea:db:52:0f:4e:3d:9b:d4:a9:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:A0:B6:BF:FD:91:04:D8:F2:2F:4C:74:D5:CB:AB:97:27:34:73
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BUagtr_9kQTY8i9MdNXLq5cnNHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
194.59.214.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bf:f7:40:be:57:08:09:83:05:3d:3a:c1:c0:11:a7:1a:85:
b1:e9:6a:ad:7c:08:d5:69:79:18:e1:9d:93:b2:08:a5:8f:77:
c6:b2:07:eb:92:37:2b:4d:9f:f2:6c:22:55:aa:86:73:3d:e4:
9f:5e:c9:51:2c:4b:2b:9f:df:ac:b2:70:25:b9:44:39:0c:fc:
05:88:f0:cf:a2:3b:eb:ae:a2:34:5b:26:ed:37:e1:b3:0d:1d:
86:55:d2:5f:ad:0d:94:b2:58:7a:be:5d:d5:aa:00:70:5c:f7:
db:9e:1b:95:7f:e1:73:c2:1d:4c:6e:99:52:00:b9:5e:5f:52:
41:9d:2e:3a:c1:86:04:eb:7e:af:e2:79:2e:ad:2b:a8:9a:64:
44:7c:bc:61:75:3d:1b:26:c5:64:b1:30:e6:75:98:5c:a2:af:
75:5c:b0:af:82:b1:2c:53:5e:ad:c8:b5:33:cd:ee:78:cf:89:
f8:86:c5:12:e3:81:f8:f6:f6:62:58:01:9d:d5:51:d9:91:e1:
66:2d:cd:ae:f7:ec:1a:6b:bc:f5:1f:7a:4c:c1:4f:e2:9c:34:
1c:4c:c8:36:2b:8b:a8:b1:8e:57:e2:d2:c1:a9:09:eb:d4:4e:
b0:1e:3d:5b:54:ee:c0:7e:51:7f:80:ea:d4:91:b8:e7:6a:2a:
85:31:80:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZUtBHmRc1+GU85Q7KShRJxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjUwMjIyMDkzNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ2YTBiNmJmZmQ5MTA0ZDhmMjJmNGM3NGQ1Y2JhYjk3MjczNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8BEDNwOC0lc6WJhXkguwMha+/1b
BrberJH9KsuVpyaqjeFVnChfgaeUFhsKO+aT+YPnAeKmKpkQvRGYC6x6yR1aROhJ
4VOACSc9DCxCSheMbUZurqfNvwF2Xxr2/IF0EOJAv1M3vUqyhYvSLbJCZDFKBxsM
yXrYrJ0FofKjOOyo1EXKvgfOMiHSIHn9DQNLs/vw+1TzLVStg8eHFVRc5NHC3wby
Q4Jii+sBGj5cf9tJ08vSmooxwL1Tr+gliZy8Z1FYlZpCFQ+T6qKYZ0g8vrwn3rDm
oFxB9IZaNN+lJDhhZeL5FHPDVDbbg7A7/IgvqYeNPq7q21IPTj2b1KlrPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAVGoLa//ZEE2PIvTHTVy6uXJzRzMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvQlVhZ3RyXzlrUVRZOGk5TWROWExxNWNuTkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQu5AwQA
wjvWMA0GCSqGSIb3DQEBCwUAA4IBAQCZv/dAvlcICYMFPTrBwBGnGoWx6WqtfAjV
aXkY4Z2Tsgilj3fGsgfrkjcrTZ/ybCJVqoZzPeSfXslRLEsrn9+ssnAluUQ5DPwF
iPDPojvrrqI0WybtN+GzDR2GVdJfrQ2Uslh6vl3VqgBwXPfbnhuVf+Fzwh1MbplS
ALleX1JBnS46wYYE636v4nkurSuommREfLxhdT0bJsVksTDmdZhcoq91XLCvgrEs
U16tyLUzze54z4n4hsUS44H49vZiWAGd1VHZkeFmLc2u9+waa7z1H3pMwU/inDQc
TMg2K4uosY5X4tLBqQnr1E6wHj1bVO7AflF/gOrUkbjnaiqFMYBg
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net