Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa
File: kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa (raw, json)
Hash identifier: Q8fDVCk74lV9QZSReJUdZzpV1u+rNruWQfm4y3jiGc8=
Subject key identifier: 92:5F:F5:05:9F:73:CF:4A:7E:3A:B1:E3:FA:BB:C5:08:FA:A3:CD:CF
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 019421B25617A257A6215518B43F842B5484
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42000
IP address blocks: 193.150.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:17:a2:57:a6:21:55:18:b4:3f:84:2b:54:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=925ff5059f73cf4a7e3ab1e3fabbc508faa3cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:85:23:9e:68:fd:e0:df:96:d0:a0:19:55:
f8:08:4f:79:76:87:ab:e6:ed:cf:72:4a:61:dc:34:
05:da:58:ee:c9:89:45:4d:88:e9:c4:07:12:16:8a:
2a:ce:89:9e:a8:05:b8:66:8f:62:b5:5d:2e:97:42:
31:a3:69:db:82:1a:d0:ca:6a:59:c3:f8:ac:3c:fb:
02:39:db:0b:02:e8:38:c7:6c:d4:a5:a1:6b:bd:55:
18:b6:07:70:e2:ce:fb:83:35:72:64:b3:46:a3:04:
ec:ea:3d:28:44:bc:0a:8b:b0:f9:75:bb:3f:ab:87:
e2:cb:0b:6a:90:8c:08:f6:b1:57:58:89:7c:b7:14:
dd:e7:1d:0e:42:88:77:de:45:4f:85:62:75:3f:7a:
97:28:4f:bb:bb:94:fe:61:10:9b:d8:ea:21:47:d2:
38:fe:60:00:45:3b:75:78:fc:5e:c6:76:1d:b0:47:
5d:86:5c:ac:7c:a6:1c:16:12:a6:c9:30:b1:2e:e6:
64:ad:8b:e1:c7:6c:69:45:a1:9f:51:14:7d:91:0a:
07:eb:52:c5:75:15:29:9b:fc:8d:1b:66:12:c1:2d:
3e:e1:3f:c3:4c:f1:10:4e:f1:40:31:e1:c4:56:69:
41:31:7f:0b:89:d9:ab:a6:94:40:fd:a7:70:72:d9:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:F5:05:9F:73:CF:4A:7E:3A:B1:E3:FA:BB:C5:08:FA:A3:CD:CF
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.134.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e7:92:89:b3:03:1c:37:85:b3:7a:d9:b0:16:6f:0d:7a:d9:
86:cd:03:33:8d:7c:38:eb:ca:78:a7:13:d3:5e:c5:98:36:85:
e3:87:6b:4a:b3:8a:45:82:f9:7e:47:7f:dd:4e:a4:12:bd:8d:
36:df:6f:61:ab:ca:2b:2b:9c:42:b9:1d:ad:ab:88:a3:ba:fa:
17:6f:a0:bc:a8:cd:ee:0a:3d:a2:77:5a:10:83:0e:82:50:db:
0b:a5:d1:b4:8e:a8:92:02:56:14:93:17:d1:bb:14:da:54:4e:
77:cf:9d:58:72:b2:c9:6f:c7:0a:d2:d6:79:a8:1c:83:91:99:
9f:78:6a:88:f9:dd:9b:90:a1:5b:d4:4c:30:bb:6c:3a:1d:6a:
5c:92:06:2c:22:a5:69:34:71:f8:38:4f:fe:64:81:61:70:d9:
34:13:08:61:a6:5d:98:76:e7:3b:1c:a4:20:af:87:5b:db:20:
da:d2:98:68:13:9f:34:62:3e:f1:4e:63:ef:30:ce:3d:8d:a3:
d8:81:03:dd:9d:66:3c:8f:53:97:ea:80:06:12:b6:44:10:9b:
26:de:0f:9d:37:96:4b:c9:13:e9:e0:5f:c3:c3:ad:bf:2a:49:
79:53:73:a9:30:a2:ea:91:a2:db:a1:c9:fe:39:8a:01:21:ca:
dc:ef:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:05 2025 by rpki-client