Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/kbTOh855t8tddDIlGKiPIgCKjmo.roa
File: kbTOh855t8tddDIlGKiPIgCKjmo.roa (raw, json)
Hash identifier: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=
Subject key identifier: 91:B4:CE:87:CE:79:B7:CB:5D:74:32:25:18:A8:8F:22:00:8A:8E:6A
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 01946A2E9C4F6863248958CF977D4057A9F9
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/kbTOh855t8tddDIlGKiPIgCKjmo.roa
Signing time: Wed 15 Jan 2025 13:37:07 +0000
ROA not before: Wed 15 Jan 2025 13:37:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24685
IP address blocks: 146.19.54.0/24 maxlen: 32
194.246.121.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:2e:9c:4f:68:63:24:89:58:cf:97:7d:40:57:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 15 13:37:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91b4ce87ce79b7cb5d74322518a88f22008a8e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:da:37:38:d7:5f:2c:2e:70:b7:78:47:96:
5e:a2:60:a3:f1:be:02:5b:48:78:17:f0:9b:0b:e3:
67:4d:32:db:37:46:a8:2f:fc:eb:40:b6:c4:58:b8:
0b:9d:3c:51:b5:ab:22:ca:b1:a3:d7:2b:d7:d3:2a:
af:66:28:af:a6:9a:88:05:70:62:ea:c8:54:15:9e:
f6:81:13:02:28:a3:97:ff:53:f6:52:9c:60:8c:89:
51:19:5e:91:71:6b:d6:67:33:10:f7:37:7d:30:d9:
9c:53:3d:c9:a0:0a:5a:6c:c0:70:23:f2:4b:7f:5a:
5f:fc:24:5f:bb:e1:04:09:9a:37:a3:c9:b7:b9:e0:
fa:4b:72:62:dc:d7:c5:5e:61:18:dd:33:80:9a:34:
19:2c:cd:2b:06:6a:92:78:a3:be:4c:55:09:7d:c9:
d3:42:84:b5:4e:18:e9:0e:5c:79:5e:45:86:98:6c:
08:cb:0a:a0:16:e4:8a:58:cd:0d:52:84:9e:af:c0:
47:a9:63:f9:a7:d2:06:2b:03:a5:05:a7:ba:d2:58:
e5:ad:1a:ea:73:83:5f:85:00:6a:21:05:c5:92:03:
64:89:f3:21:fa:7d:47:84:ff:b7:f5:9a:0c:93:97:
fb:15:cf:9b:e3:c2:91:5a:8a:c0:18:22:12:0b:b7:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:CE:87:CE:79:B7:CB:5D:74:32:25:18:A8:8F:22:00:8A:8E:6A
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/kbTOh855t8tddDIlGKiPIgCKjmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
194.246.121.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ec:94:0c:f6:57:44:f6:10:bd:79:f9:a6:fa:af:17:46:5b:
be:a2:b2:d7:0c:b0:c6:ff:24:bf:51:1f:b2:e1:ea:40:cd:e8:
81:5e:b4:27:1b:03:99:1d:fd:8a:c9:2a:5f:b1:4f:ed:79:cb:
6e:14:f9:88:a1:37:8a:21:fa:9d:9d:b1:5d:ce:af:c6:45:c2:
1b:8f:bd:cd:03:d3:b4:8a:a6:58:f7:ed:3c:11:4f:e1:42:90:
ae:71:c1:91:a5:81:ab:5d:25:50:44:07:17:cc:89:f6:86:6d:
65:76:62:1f:2b:c7:3b:2f:81:38:91:66:57:c1:cc:b2:db:0d:
c0:3d:5f:b7:f0:eb:6e:93:e5:a5:fd:a9:fd:aa:c6:57:76:ed:
75:4b:c5:ae:9d:40:70:c4:0d:22:4e:1e:8c:98:f9:e2:51:b0:
d2:b7:48:01:d3:b4:71:91:30:ed:14:cf:47:4d:7f:f8:5c:53:
79:f8:e2:95:cf:01:98:0f:bc:cf:3d:e8:93:f4:8c:60:43:dd:
58:66:fe:3d:bb:ea:a4:a1:48:80:5d:66:e9:fb:53:ec:0e:60:
73:5d:72:65:6e:ad:eb:b3:12:73:80:d7:09:de:13:a8:fe:f2:
21:43:75:f3:f1:d3:6c:f3:6d:92:1b:65:85:d9:fe:6f:f5:38:
be:10:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:02 2025 by rpki-client