Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/Bk-PC_3JIm04gifM592QQdoN3Ks.roa
File: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (raw, json)
Hash identifier: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=
Subject key identifier: 06:4F:8F:0B:FD:C9:22:6D:38:82:27:CC:E7:DD:90:41:DA:0D:DC:AB
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 01941F8C5ACE827980BF51F213C4DE9FE577
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/Bk-PC_3JIm04gifM592QQdoN3Ks.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207632
IP address blocks: 2001:678:be0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:ce:82:79:80:bf:51:f2:13:c4:de:9f:e5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064f8f0bfdc9226d388227cce7dd9041da0ddcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:be:8b:af:d3:90:b1:6b:72:46:83:08:2a:
19:39:8e:8c:6a:79:fb:eb:c7:fc:13:6d:40:11:3b:
75:5b:01:72:0c:de:0a:ba:38:a6:7f:f5:79:a9:d7:
a1:8c:3c:c1:30:12:3b:f2:d0:e2:8b:6e:0f:80:31:
e7:89:68:35:f2:63:af:a6:d8:ea:18:43:21:a5:1a:
cb:07:55:fd:8f:f2:5a:ba:22:ff:f8:f9:c1:f3:08:
76:94:54:0d:b0:6a:6a:1c:39:91:04:0c:d5:6a:57:
e3:49:de:92:8f:05:c6:67:3f:62:26:7c:9e:52:00:
12:ef:bd:3e:5f:11:5a:6d:37:14:c2:df:24:4c:0e:
fb:ba:17:77:27:f9:7e:76:b4:2c:ae:2d:ab:ce:65:
44:b5:fb:44:88:98:a8:00:d3:17:98:51:fb:2c:c8:
24:f2:b2:e5:fb:24:21:fc:4c:79:fd:f5:a8:f7:15:
61:5d:ec:e3:cc:04:0a:d7:7c:08:5c:75:d1:d0:48:
b9:2f:4b:0e:7e:3c:c8:0f:57:fe:55:15:99:95:e6:
d5:f9:fa:8a:8c:08:03:27:e2:97:52:2a:12:c2:b6:
1b:a2:21:3c:0c:71:ba:a4:cf:fb:c2:84:d9:20:a8:
0e:8b:0e:b9:19:99:f6:e5:57:1e:14:9b:ab:d9:e4:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:8F:0B:FD:C9:22:6D:38:82:27:CC:E7:DD:90:41:DA:0D:DC:AB
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/Bk-PC_3JIm04gifM592QQdoN3Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:be0::/48
Signature Algorithm: sha256WithRSAEncryption
79:b0:c6:3d:6b:24:78:8b:e2:a6:20:e4:a2:08:c8:7d:df:e7:
87:45:d4:a8:47:24:66:f0:3f:7d:43:b2:18:93:38:49:a4:16:
42:3a:fc:50:68:79:97:8a:18:5a:0e:92:0c:f6:87:92:cc:bd:
9a:35:ec:94:7e:82:a0:d2:d4:8d:e4:e1:eb:fd:8e:bf:b8:99:
8e:ef:a9:c6:ac:c4:45:c9:b4:c8:06:5b:fd:87:05:e3:3f:bf:
fd:0a:d8:90:9e:95:a2:2c:7a:9a:13:37:98:8d:df:fd:b2:59:
73:99:b9:e1:15:69:af:99:c0:b8:73:41:6d:5e:11:c5:77:d7:
92:42:e7:08:eb:69:9a:e4:d2:13:45:70:01:57:22:56:95:36:
8b:0d:a7:e1:51:10:09:19:63:a1:28:9b:49:4d:20:17:fa:f8:
69:e8:13:2a:e6:d0:5f:82:fe:9c:1d:4a:41:52:72:ca:81:86:
56:1a:a4:20:2e:90:f9:e3:d0:87:78:31:4a:de:05:c3:a8:2d:
07:23:ed:44:4b:91:72:64:88:51:8f:65:f6:d7:d0:ba:0a:6a:
8a:f6:8a:3d:a5:81:03:70:a6:e6:58:d5:8b:f1:91:42:b2:24:
30:a0:bd:cd:e1:a6:8d:7f:69:99:0e:3d:15:a5:60:12:6b:22:
cb:08:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:31 2025 by rpki-client