Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa
File: Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa (raw, json)
Hash identifier: xLyT3PayX46ktCq1QetEYB5B73wxy34WeOz/POaSXf4=
Subject key identifier: 06:DF:71:E9:32:63:81:C2:F5:D0:EE:C1:9E:BE:48:E0:23:F4:6E:F7
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8FFED23712314CB60F88062986B3
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60397
IP address blocks: 84.236.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8f:fe:d2:37:12:31:4c:b6:0f:88:06:29:86:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06df71e9326381c2f5d0eec19ebe48e023f46ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:07:1e:b7:66:13:dc:a9:60:46:a3:73:69:
b5:39:19:a4:dc:eb:cc:55:b3:47:64:0c:06:8f:e3:
e5:82:ab:39:39:00:7d:d4:2c:b9:d6:b2:2b:6f:c9:
9c:21:6e:7d:87:69:42:e8:f3:a3:6e:dc:21:23:14:
3c:6d:17:56:75:d8:47:f4:49:1e:02:5f:3e:b2:2f:
e2:c9:1f:38:e7:12:75:74:a0:b7:08:f9:6d:3b:8c:
2e:d1:1c:51:d7:06:71:f0:4f:ae:1b:1b:78:64:6e:
83:d6:a0:cd:26:10:2c:e4:94:f4:ec:46:5b:a2:0d:
b3:2d:a1:21:35:86:50:3a:1b:2a:ee:2b:a1:86:83:
16:48:be:4c:bf:a2:e5:95:25:d5:10:98:b5:5f:6a:
ae:fa:d8:1b:28:99:ad:8d:1b:a9:31:f8:ad:4b:e9:
4a:2c:f9:93:4c:ff:b0:5c:c8:a9:83:a2:6e:41:6f:
de:55:a8:84:c7:4e:40:87:18:7d:07:70:d4:69:00:
1a:0b:76:2f:88:11:5e:a4:00:c3:cb:cc:1e:f8:97:
e3:17:69:bd:97:cb:c4:45:c3:bc:4c:bc:34:64:99:
72:e3:f8:ac:73:24:8c:9f:0c:fc:6f:8f:ef:47:ea:
63:cc:9d:4d:14:32:58:0c:42:2f:4e:9c:fb:1d:ba:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:71:E9:32:63:81:C2:F5:D0:EE:C1:9E:BE:48:E0:23:F4:6E:F7
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/Bt9x6TJjgcL10O7Bnr5I4CP0bvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e1:13:e1:fc:34:77:09:be:0d:4b:e6:85:a5:86:29:a2:94:
c1:20:44:aa:f2:e1:d3:2e:03:ec:7b:0f:28:88:5e:aa:cd:21:
1b:bf:93:a3:d4:a3:69:2c:e5:e7:1c:fc:0c:7d:db:c3:c7:fd:
9f:4b:2c:8e:53:3b:75:51:49:4b:e9:82:fa:bb:30:cc:c3:da:
9b:d8:57:65:f6:5a:ee:61:0f:83:42:8d:46:b5:1b:b2:3b:5d:
93:ed:5b:4c:19:e9:b7:4c:5b:07:f5:c5:9d:33:45:92:ce:06:
e1:ef:af:81:6e:20:dc:04:07:61:60:87:30:a1:b6:4f:7e:5d:
fd:27:ed:bd:43:c8:76:2c:31:1a:42:d6:07:cb:b4:73:2f:c5:
c2:01:46:1d:39:67:e1:f8:37:ea:fa:e2:35:56:6b:9e:72:3a:
d5:3d:58:43:53:3d:a6:7e:7d:be:36:f6:6c:41:21:59:06:38:
76:1d:41:56:0f:a8:f6:94:9c:c1:6f:96:64:bb:5b:d5:70:68:
2b:9f:63:a6:7a:0f:d3:64:fc:cd:49:5b:92:28:68:7d:88:f7:
e0:cf:87:84:82:69:42:ea:c1:c3:0d:25:3a:63:18:7a:8b:76:
f1:71:c4:2f:0b:92:38:b5:be:7e:c5:23:7c:48:28:39:f9:dc:
68:57:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:53 2025 by rpki-client