Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa
File: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (raw, json)
Hash identifier: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=
Subject key identifier: 6C:A8:44:A1:38:BC:57:25:FF:43:92:8E:0D:64:52:43:08:10:C0:A6
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01941F8C81317AC1AD84C5EF7A8C2A365655
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20836
IP address blocks: 91.142.143.0/24 maxlen: 24
185.142.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:81:31:7a:c1:ad:84:c5:ef:7a:8c:2a:36:56:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ca844a138bc5725ff43928e0d6452430810c0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:c6:d6:56:12:39:4a:04:ab:d4:fa:4d:81:
52:22:cf:2b:4c:b9:84:5b:d4:46:0e:49:61:d0:9e:
a5:98:bb:23:19:1e:6b:a3:6c:da:8f:12:40:db:47:
f7:4e:fc:81:23:85:84:4a:75:4c:5b:5c:92:4e:a6:
25:12:a8:16:80:65:4d:02:70:2e:c3:ae:10:01:08:
7a:f3:8f:a9:bb:f9:62:3a:af:7a:06:27:4a:19:51:
0a:7e:8f:95:44:ff:fa:60:12:7e:05:34:24:2e:da:
6d:c6:77:5b:81:d8:77:2b:8c:81:02:0e:ea:14:41:
f9:f4:1b:6b:10:81:68:51:9e:47:98:9c:9c:6a:e0:
53:42:33:24:cc:4d:f7:14:bb:64:7a:63:e2:56:02:
81:f5:c8:22:4c:ee:4f:8b:a2:ee:a0:9d:31:6e:4f:
80:d6:f9:63:94:7e:18:d0:0c:c4:9e:46:0a:7f:e6:
cc:73:db:3a:bb:5a:5b:2d:af:32:ba:12:65:ea:b5:
0f:d7:78:c1:ad:3a:29:01:01:a6:7e:09:23:2a:e3:
30:d6:81:da:80:b0:ac:12:76:92:57:92:65:58:71:
9b:2b:65:65:45:5e:f4:66:92:ac:f1:7b:d3:3b:a0:
11:4e:9e:9d:ed:8f:71:e8:13:6f:c4:6a:0a:09:57:
61:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:44:A1:38:BC:57:25:FF:43:92:8E:0D:64:52:43:08:10:C0:A6
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.143.0/24
185.142.120.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5c:e1:ae:7b:b8:ca:e6:e6:1f:25:00:df:8c:ff:2b:36:12:
ac:ee:49:4a:99:0b:6b:6e:0b:f6:5e:d4:fe:c7:8d:f1:02:2e:
a4:25:3f:3e:47:ce:1a:47:21:aa:e1:e3:75:38:5d:74:51:11:
81:7b:b0:14:6f:29:23:f5:a8:64:15:5b:a7:81:53:47:b2:1b:
60:3b:17:81:86:7e:98:c5:d2:07:ce:bf:f3:ea:0b:84:80:10:
be:5f:24:85:c5:c9:fe:53:bd:b2:ff:f1:87:05:b5:2c:90:d0:
1e:fa:d6:4d:a3:08:be:34:cb:93:e9:1b:e4:4a:5b:12:f3:0a:
78:ad:ac:cf:1b:96:4f:7f:48:1c:bd:35:30:4f:64:1d:23:2e:
8f:b2:f6:d9:f2:3f:90:fe:7d:21:eb:9f:1c:c3:d7:51:2c:22:
3c:30:54:fb:86:8d:ab:ac:05:75:47:0c:68:ed:e0:f7:00:ff:
4f:9b:b7:5a:bd:c6:69:eb:2c:17:1c:c2:07:46:a2:b9:fa:51:
3a:df:79:94:c2:1a:ec:c5:8b:37:4e:2b:d2:2e:46:37:ef:ff:
e6:1e:9f:6e:4a:f0:de:80:63:58:53:a0:75:5e:b5:b6:b0:a3:
92:56:71:b5:c5:84:22:d8:8e:02:1b:4e:b7:ff:57:a5:61:78:
4c:66:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:15 2025 by rpki-client