Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/BTTvC8v66O2EpK1CYoUyKwsnmsY.roa
File: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (raw, json)
Hash identifier: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=
Subject key identifier: 05:34:EF:0B:CB:FA:E8:ED:84:A4:AD:42:62:85:32:2B:0B:27:9A:C6
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 0194252147CA219E2A04634888685274C179
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/BTTvC8v66O2EpK1CYoUyKwsnmsY.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56408
IP address blocks: 91.223.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:47:ca:21:9e:2a:04:63:48:88:68:52:74:c1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0534ef0bcbfae8ed84a4ad426285322b0b279ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:17:6f:1f:49:5a:9d:ae:59:4c:cb:6f:88:
73:ea:d2:b4:00:0c:e7:db:0f:02:c7:4f:ee:14:bb:
91:73:80:63:4b:67:04:1e:4e:9d:5c:30:6a:19:cd:
f2:75:de:e5:b5:8e:72:8e:c8:08:73:c5:ac:3c:74:
4e:67:7f:d1:1f:af:fe:8a:b6:06:18:38:35:e0:12:
1f:b2:8e:16:8b:bf:a7:84:47:90:2c:e5:a0:4a:42:
38:cd:83:02:be:8d:99:ce:d7:f5:4e:f8:2b:c3:32:
1f:c0:58:7e:4a:56:93:d2:f7:af:8f:7e:64:18:fc:
5b:17:ba:b8:8f:e0:dd:f8:aa:f3:f2:24:0e:6c:1a:
97:36:17:4e:37:66:f1:4b:c9:a7:4a:92:e4:09:6f:
df:b4:56:bb:19:cd:3a:ff:20:39:e1:7d:b3:bd:bb:
7b:e5:bd:5a:46:c8:39:7f:9d:06:63:80:cd:19:f2:
08:43:fd:db:67:47:15:6b:31:59:f3:50:e6:c7:fd:
79:b4:29:94:c0:a4:1d:46:6b:e6:55:94:b0:41:8c:
3d:ea:ba:01:71:44:3d:4c:eb:c7:6b:76:2b:bb:51:
b7:fb:f1:be:37:48:c4:a8:8e:b1:70:25:df:75:4f:
be:e8:a8:b5:63:da:c0:87:0b:3d:a1:c5:ee:a5:39:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:EF:0B:CB:FA:E8:ED:84:A4:AD:42:62:85:32:2B:0B:27:9A:C6
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/BTTvC8v66O2EpK1CYoUyKwsnmsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.130.0/24
Signature Algorithm: sha256WithRSAEncryption
40:24:ad:76:54:d0:cc:f5:05:21:99:1c:f6:92:d2:3b:2e:4a:
ae:c7:a7:eb:95:00:9b:1f:be:7f:8f:09:2e:1f:00:c3:d9:25:
b7:35:c3:7e:08:01:74:4f:1b:e4:c9:06:35:e4:58:1b:20:d7:
c7:83:53:0a:49:96:66:67:ca:1e:13:aa:17:89:fb:70:7a:dd:
ed:ea:a0:3c:4b:a6:2d:7a:cc:b5:eb:4b:0f:9f:8a:20:ce:35:
2f:e9:96:a0:cb:3d:95:51:5b:89:d3:13:41:1d:b6:9c:e9:ff:
e9:9c:6c:0d:c1:a1:37:99:d9:58:59:3d:b2:e7:5f:b7:08:ea:
75:5c:17:77:f3:85:5a:ff:15:fa:e3:5e:89:8a:12:37:12:ed:
2b:07:f7:46:ba:0b:68:de:fb:4d:a5:55:a2:9a:7b:f4:77:8e:
37:aa:5c:e1:ab:a4:c6:6f:22:cc:6e:67:d9:b6:4c:53:00:96:
37:bb:d0:ea:92:34:3d:e9:35:22:69:7f:a1:ca:39:1a:32:fa:
89:39:1e:d9:7a:d3:5c:dc:da:3e:e7:e3:1d:c8:d2:61:fa:2b:
f1:75:a3:3a:91:d9:54:2d:b7:d3:af:53:01:d6:a9:17:0f:4e:
e4:f3:dc:23:fb:f2:3f:3c:af:db:91:0b:74:a7:89:9b:ee:40:
8c:94:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:26 2025 by rpki-client