Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa
File: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (raw, json)
Hash identifier: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=
Subject key identifier: 06:39:79:36:75:D5:6E:5C:C6:5E:BC:51:BC:66:28:1A:38:4A:5F:5B
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 0194F56371B563CB47946ED49E6E91255721
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa
Signing time: Tue 11 Feb 2025 14:22:02 +0000
ROA not before: Tue 11 Feb 2025 14:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39328
IP address blocks: 45.67.180.0/22 maxlen: 24
45.84.48.0/22 maxlen: 24
185.154.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:63:71:b5:63:cb:47:94:6e:d4:9e:6e:91:25:57:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Feb 11 14:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0639793675d56e5cc65ebc51bc66281a384a5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:07:b2:d8:41:13:d4:d9:7d:e3:2b:17:45:
dd:a0:ee:e7:04:74:1e:e6:c1:44:87:6e:89:ab:f3:
5a:2d:e0:71:6a:10:60:99:a5:bc:17:53:ce:b4:58:
51:19:8c:98:1e:c6:aa:4c:6c:41:96:8a:fc:53:a3:
e0:f0:a0:a6:7b:51:89:3a:c0:ec:69:c7:f1:98:a6:
ce:e1:91:a3:41:6c:00:b1:42:1a:e8:52:9a:6c:9b:
a7:b0:93:a6:a1:9c:1f:19:59:0e:39:30:30:f3:5c:
8a:56:ca:fc:0e:ae:62:fe:c8:b2:58:d4:77:0f:38:
40:a2:14:49:50:9a:78:8b:1f:e2:cc:e4:78:30:5c:
0c:5f:23:09:12:2f:8f:40:8e:66:f7:f0:c5:13:00:
60:9d:f6:82:12:a9:c8:81:3a:28:26:c0:30:1e:97:
e7:00:bf:2a:40:c6:2c:9e:c6:37:14:18:51:5b:e3:
10:fe:34:00:5e:7c:4d:4c:8d:96:ac:f2:ac:88:da:
94:75:8b:94:5e:c9:31:8f:8d:84:6b:b3:9e:df:94:
43:31:c5:ae:0e:29:5f:37:84:42:45:56:80:8a:d7:
e5:d7:d7:7d:4f:71:c7:09:71:71:66:33:9f:f9:b9:
5f:2f:b9:be:d2:73:9a:68:f0:b4:35:08:7f:91:2e:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:39:79:36:75:D5:6E:5C:C6:5E:BC:51:BC:66:28:1A:38:4A:5F:5B
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.180.0/22
45.84.48.0/22
185.154.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:b2:82:10:b5:c2:f2:0c:a5:de:e6:d0:58:fb:32:00:9b:af:
34:7f:ac:c5:0a:95:d8:6c:b0:25:f7:20:30:de:11:c2:80:18:
db:ad:f5:ea:b4:c6:35:0c:0a:cc:bd:f6:9c:53:bf:01:2e:bb:
0d:dc:a9:2b:2c:33:71:b2:da:27:43:3d:ed:1d:93:18:0d:54:
34:b7:89:94:df:00:e6:6a:ee:c8:30:0f:0d:d1:24:7b:c2:0a:
52:f2:c8:7e:a7:d4:35:ce:92:63:44:3f:ec:52:92:0c:6a:73:
3d:9f:22:8d:0e:07:ed:be:74:52:a0:2a:1e:a3:f2:99:bd:60:
2f:cb:1b:0b:f6:64:e8:81:c3:8d:3e:e5:97:01:5a:e8:37:21:
b0:08:b9:52:5a:9a:ac:97:ba:33:dd:b3:0b:35:dd:5f:89:47:
8b:dc:8d:ee:26:09:1c:26:43:8b:cd:a6:65:2a:fc:5b:bc:51:
8f:c9:a0:69:6a:52:13:9a:a6:55:bb:4a:a8:a5:be:c0:ce:bb:
df:53:5a:d3:db:39:db:12:0b:25:6e:eb:2c:1b:ad:02:b7:a5:
31:40:18:f4:fd:33:51:c5:3d:e4:e1:a2:5f:f7:81:7a:b3:c2:
bb:74:91:82:00:3e:7d:3d:9f:a6:c5:82:bd:f8:fe:b3:35:d6:
33:b7:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net