Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BOjqPIb3athrryYMVMll8dWYS_4.roa
File: BOjqPIb3athrryYMVMll8dWYS_4.roa (raw, json)
Hash identifier: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=
Subject key identifier: 04:E8:EA:3C:86:F7:6A:D8:6B:AF:26:0C:54:C9:65:F1:D5:98:4B:FE
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF35A72B546420EC1696E48947B9C
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BOjqPIb3athrryYMVMll8dWYS_4.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209516
IP address blocks: 45.86.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f3:5a:72:b5:46:42:0e:c1:69:6e:48:94:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04e8ea3c86f76ad86baf260c54c965f1d5984bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0e:a8:f8:42:2d:59:24:eb:8e:38:dc:ae:58:
ca:dd:3d:12:c6:5b:0e:ae:5a:fa:07:3f:45:9a:02:
8c:23:e7:22:ad:71:de:43:f9:75:24:b1:0a:bb:a3:
f4:89:2c:ed:ae:3d:2d:f8:8c:19:40:56:54:71:d2:
64:98:d6:84:a1:95:95:5b:f2:8d:67:06:34:9c:e0:
33:a7:3f:81:ec:a9:2e:b3:00:91:38:f0:14:be:06:
75:7d:f5:99:7c:b6:9d:22:fd:2a:21:d3:c2:49:a3:
cd:bf:56:4a:80:54:ac:c3:e8:5e:16:ee:aa:25:37:
6c:2c:b3:1b:68:59:36:70:54:24:47:2f:75:95:92:
07:29:1d:84:a4:6d:71:3e:af:ec:e0:fb:09:fc:9b:
08:7b:cd:f8:65:85:f7:95:9c:c6:18:32:f3:88:29:
19:27:81:1d:5f:ea:11:03:24:ed:a6:f2:2d:f0:03:
9b:48:21:d3:00:68:b3:f2:cb:9d:26:d5:ae:68:f9:
a9:36:4c:42:d0:58:82:f5:33:60:b2:c4:0d:24:68:
60:b6:08:c5:7a:90:7d:68:85:0a:e6:ab:5e:e8:2b:
9a:52:68:38:54:18:59:6d:51:f8:ee:13:3e:ec:32:
95:6d:20:04:77:00:77:b5:6a:b9:90:95:43:ad:a5:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E8:EA:3C:86:F7:6A:D8:6B:AF:26:0C:54:C9:65:F1:D5:98:4B:FE
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/BOjqPIb3athrryYMVMll8dWYS_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:08:21:fe:f9:b6:5d:25:23:7a:fe:eb:07:05:af:88:5c:e7:
c2:19:eb:b8:8d:dc:15:46:4e:56:b7:f9:81:9a:6e:32:be:3f:
d7:d7:4c:03:1f:56:01:16:75:8f:6f:39:a3:e5:76:f1:cd:bb:
77:21:31:07:13:b4:01:37:01:86:9f:5d:7c:66:e2:b8:17:55:
29:28:89:46:ec:c2:f8:3a:87:4c:ac:44:31:38:02:d2:76:ba:
5b:68:5e:9a:07:bb:80:c0:80:d1:42:9f:b4:2e:29:d4:82:72:
af:ab:72:26:ef:9f:0e:02:a5:ec:3f:32:7e:13:88:0a:23:f7:
8e:40:e1:26:94:2f:5e:9c:b9:fd:2b:92:6e:46:83:b4:9f:12:
9a:bf:0d:e7:bd:84:17:36:f9:3e:7a:91:00:64:92:54:bb:ca:
0d:0e:02:2f:1c:cc:82:6f:43:2a:09:e6:90:81:35:51:50:d7:
1d:77:b3:31:75:d2:42:f3:ca:43:4e:10:39:8a:c1:af:f2:ff:
ce:20:e8:85:18:58:ec:5b:85:87:6e:ca:d6:c8:42:12:34:f0:
8d:86:ab:b4:c7:13:9a:9d:ac:e5:b6:5c:cf:6f:39:a9:34:37:
98:b4:f2:52:a4:2b:b0:13:f9:46:22:f8:3d:a2:43:c9:5a:e1:
5e:e9:cc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net