Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/bM67-0WnTIlk3OZGihzodLQF_2E.roa
File: bM67-0WnTIlk3OZGihzodLQF_2E.roa (raw, json)
Hash identifier: NRPFJ8K1hNrIr2ljiE7qTUvvC0cbZhWtCY0fv6Syz6M=
Subject key identifier: 6C:CE:BB:FB:45:A7:4C:89:64:DC:E6:46:8A:1C:E8:74:B4:05:FF:61
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FC67AD4C50193A58A80E9F25454A0
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/bM67-0WnTIlk3OZGihzodLQF_2E.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62308
IP address blocks: 89.174.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c6:7a:d4:c5:01:93:a5:8a:80:e9:f2:54:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccebbfb45a74c8964dce6468a1ce874b405ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:18:8c:0a:72:af:48:a8:93:65:16:bc:36:
63:05:bc:89:39:a4:e5:14:bf:d8:26:62:e2:ed:a3:
6d:f6:b1:f3:d9:82:95:c1:d5:ee:8e:57:86:95:47:
86:28:cd:a8:53:44:ee:90:82:74:18:99:0a:d1:eb:
6b:4a:12:48:27:82:a2:59:c9:4a:5d:ba:5c:ce:b2:
6d:89:51:e6:05:48:ca:56:df:02:65:92:83:62:71:
13:c0:39:14:08:cc:1f:c8:f9:12:bc:8b:80:0f:1e:
71:c6:90:34:8d:3b:3d:c3:cf:d7:b3:34:4b:c6:ea:
c7:a3:5e:53:83:72:9e:78:37:5e:08:de:1f:de:d2:
23:81:1a:90:bf:27:c6:82:0c:51:34:91:8f:66:14:
e3:c1:8d:77:42:4c:61:25:47:4c:d3:f7:33:ab:b6:
51:bc:c9:06:b2:d8:40:92:9e:3f:11:14:34:83:11:
37:f2:59:9e:e9:5c:e9:85:16:76:31:67:35:72:c7:
10:ed:57:d0:39:68:e4:cf:04:61:16:ba:77:b6:c1:
d4:41:ed:b3:5c:7f:a4:cb:3f:f0:6a:bb:4a:59:5c:
d4:3c:71:66:33:5f:6d:a0:bc:cf:67:0b:65:be:e9:
87:3c:e2:32:01:3f:b4:3f:8e:0c:84:8b:3c:18:fe:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:BB:FB:45:A7:4C:89:64:DC:E6:46:8A:1C:E8:74:B4:05:FF:61
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/bM67-0WnTIlk3OZGihzodLQF_2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7b:e5:b1:b0:97:39:26:ef:89:7e:36:ec:7b:aa:b3:81:69:
63:29:43:9e:bf:10:07:44:23:14:d3:03:aa:2e:91:d3:85:d4:
dc:5a:b5:ad:f3:de:ec:40:6c:25:fb:9d:6e:d6:f5:5d:82:93:
60:99:a6:fd:f8:b4:47:73:8b:77:06:02:55:07:35:d2:4c:3b:
53:04:7c:a3:36:7c:78:b6:ac:0d:ad:f1:6a:c6:10:d1:d6:8b:
e4:d7:15:fd:6b:80:33:8d:68:02:13:f8:17:c4:2a:a5:af:1d:
70:d6:e3:a3:31:c5:7e:36:57:f7:20:5a:fc:bb:d8:76:74:a1:
a3:19:7e:ca:31:1c:e4:b0:c8:b2:90:c3:86:8f:bd:6a:e7:73:
84:2f:c0:b9:00:0a:66:51:25:41:53:4b:22:5f:20:a8:06:26:
7c:0b:24:53:5c:7a:45:1f:4e:2d:d8:99:e0:bb:c3:62:5b:68:
75:8a:2f:75:2d:73:56:b4:f4:db:90:2b:ee:31:04:8e:c5:a3:
a8:c5:88:56:d0:b1:1e:bc:76:99:b6:6c:6a:49:4e:0b:1d:b1:
5e:d9:f0:c8:7c:88:36:a3:1f:c9:94:4a:40:7f:d6:5a:b1:05:
a7:61:a8:43:76:f9:98:83:8c:dd:6b:e8:56:1f:2e:03:22:a9:
f2:48:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:27 2025 by rpki-client