Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/BibofgsXi1m02E0sydv0lSzcS6M.roa
File: BibofgsXi1m02E0sydv0lSzcS6M.roa (raw, json)
Hash identifier: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=
Subject key identifier: 06:26:E8:7E:0B:17:8B:59:B4:D8:4D:2C:C9:DB:F4:95:2C:DC:4B:A3
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019422FC26D6CF3AC99983E75D35EC8DC103
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/BibofgsXi1m02E0sydv0lSzcS6M.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50758
IP address blocks: 46.31.160.0/21 maxlen: 24
213.190.12.0/24 maxlen: 24
213.190.13.0/24 maxlen: 24
2a0a:2a40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:26:d6:cf:3a:c9:99:83:e7:5d:35:ec:8d:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0626e87e0b178b59b4d84d2cc9dbf4952cdc4ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:39:07:c2:07:d2:d0:d2:58:85:59:5e:dd:
21:af:6a:98:fd:97:17:74:61:bf:5c:41:9a:01:04:
ed:73:64:9e:80:1c:a1:2b:b3:f4:b0:b3:6c:cf:58:
ac:32:97:6e:7d:8e:60:54:cb:a0:5d:d5:04:a8:0b:
e3:5f:61:a5:39:77:32:5f:5f:91:64:ca:a8:04:a1:
b0:5b:eb:4f:23:59:8b:ac:7f:e7:35:a6:97:8b:31:
2f:2a:54:12:59:5c:fb:cf:eb:9a:2c:84:f3:d5:fe:
f4:bb:de:41:b4:dd:6f:bc:f4:c4:f0:80:69:fa:c9:
99:78:3c:1d:c7:84:4b:79:48:a4:b6:e2:40:74:aa:
e1:90:26:56:f9:a2:b2:ca:97:ad:0e:a4:f3:9e:dc:
14:aa:aa:ba:55:a2:2d:0a:66:53:be:ee:26:29:f5:
f9:f6:23:79:c5:2a:9d:b0:2c:a8:fa:ab:92:4c:2d:
50:80:b8:2b:40:30:3e:4a:67:03:10:f3:57:32:13:
87:a0:ae:d5:ec:95:9d:b0:47:2d:11:87:5c:dd:e3:
25:06:6b:fe:e4:0e:62:fc:10:5f:2b:7c:65:26:7f:
74:bc:3b:94:3a:ec:a0:1c:0f:01:d7:af:c9:71:14:
a3:37:27:73:bb:fe:98:78:e7:88:0b:fc:b1:6a:8d:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:E8:7E:0B:17:8B:59:B4:D8:4D:2C:C9:DB:F4:95:2C:DC:4B:A3
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/BibofgsXi1m02E0sydv0lSzcS6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.160.0/21
213.190.12.0/23
IPv6:
2a0a:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
ba:fb:bb:a5:f0:e0:1d:01:60:d1:91:04:bd:89:fb:62:3f:53:
4f:ac:9b:8b:0f:d5:1d:a8:31:da:28:52:72:ae:8d:0a:12:88:
a9:e1:d5:93:c3:04:3b:fa:c3:c4:fe:49:92:fa:85:3d:dc:dd:
0d:d2:dd:72:30:36:a0:8d:d5:41:e6:7b:41:9d:e4:78:cf:aa:
71:7b:81:de:c2:bb:96:e4:f5:d6:60:e5:cd:e3:a7:ec:5a:46:
ef:14:93:d9:52:94:04:ba:f2:6e:00:cc:78:c4:93:02:54:cc:
fa:a5:ae:7a:03:68:0b:c3:0f:e5:4c:e9:59:14:13:2c:3a:55:
ed:d1:c0:40:66:c1:dc:5b:61:48:88:8d:3d:1f:2b:fd:d7:56:
ef:79:d3:ed:45:17:5b:83:2d:56:59:88:cf:87:94:7c:c7:7a:
05:7f:c5:89:f9:8e:c4:a2:bd:15:39:8a:51:4a:34:43:7a:5b:
d8:96:bb:17:1f:c4:8a:9a:8f:fc:3a:a0:e1:bd:ad:2a:f4:26:
19:b8:ef:bb:ae:66:12:43:40:0c:80:fd:f5:3c:11:77:55:cc:
a8:94:d8:8d:ac:22:d5:ed:90:b4:39:93:5c:57:bd:00:4d:9f:
dc:ce:ab:61:a3:0f:ec:b7:e6:a8:6f:f6:db:18:46:67:e9:05:
44:4b:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:12 2025 by rpki-client