Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa
File: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (raw, json)
Hash identifier: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=
Subject key identifier: B4:14:EC:F6:A4:D9:BE:11:1C:F8:E3:8F:97:02:38:2B:76:91:97:E9
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019427488D810BD67F28F6807540E90BCA55
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15434
IP address blocks: 178.255.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8d:81:0b:d6:7f:28:f6:80:75:40:e9:0b:ca:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b414ecf6a4d9be111cf8e38f9702382b769197e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:ec:e6:ab:8e:41:ba:c7:d2:2c:0e:05:05:
36:0b:5d:5f:74:47:41:7e:65:79:6c:ab:d6:8d:1a:
20:6a:dd:f5:dc:67:d8:0b:f3:0c:2c:e6:e3:f7:3b:
5b:60:fb:a7:4e:15:7f:eb:30:92:e4:14:ef:b0:c9:
35:4b:dd:24:3f:8e:f3:f5:16:be:7e:7b:2f:b4:5d:
fa:17:cc:a4:8c:e2:ab:33:14:a6:bb:bb:7b:1e:d2:
9d:cd:b7:5c:9a:09:52:20:c9:4d:e7:b1:28:4f:c8:
02:a3:56:93:02:e1:bb:54:59:c5:76:f8:39:c9:7d:
af:e3:fd:a7:d4:87:ff:2a:f2:23:66:2b:48:b8:7d:
8d:bd:db:41:f0:6d:4f:5f:2b:6c:d9:71:15:73:91:
49:63:13:04:3a:eb:5e:67:36:a0:53:ad:e5:f0:46:
3a:ae:52:2f:b2:e3:0a:ca:1e:c2:1a:83:4f:c3:a0:
f5:61:f8:8d:2a:7d:48:bc:07:fb:ca:6a:e7:75:bf:
c7:95:48:26:e5:ed:79:00:68:9b:11:b5:97:20:67:
b0:2c:15:79:6e:39:28:4d:de:47:4c:4b:53:8b:e0:
63:80:b8:37:c1:c3:db:c7:a9:cf:69:74:af:8d:e1:
c4:41:c5:f4:ac:e2:0c:70:12:d0:92:f7:b6:32:33:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:EC:F6:A4:D9:BE:11:1C:F8:E3:8F:97:02:38:2B:76:91:97:E9
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:24:f2:5b:15:4d:45:30:84:64:3a:3b:4f:b9:8f:be:e8:3c:
46:8f:af:88:73:7b:8d:e0:75:d5:2c:5d:21:be:04:85:fc:db:
32:8d:e8:33:17:05:24:2d:8c:b0:62:d3:aa:88:99:b5:59:28:
a9:5f:fa:3f:00:33:83:3c:05:bb:a4:fa:d9:89:09:66:6f:0e:
c5:90:20:cf:4e:b6:dc:0e:84:93:14:66:31:e3:46:79:07:6d:
59:59:82:9c:b0:a6:59:2b:fa:a2:a5:61:3f:89:b8:95:6d:e3:
d1:94:09:ea:f4:fc:fd:63:c5:09:e8:5f:6e:0d:08:ff:aa:f8:
e8:19:2d:f2:9e:de:6c:e5:c3:1f:14:ea:f2:34:0a:c3:fe:fe:
23:3b:9f:fb:fb:41:de:c4:ca:dc:04:39:df:30:58:b6:34:a4:
1b:b7:1a:b9:52:58:1b:68:66:e2:f8:f3:1a:d7:bf:43:8c:08:
03:36:e4:f0:b7:c1:f2:57:ce:b3:39:bd:04:c6:cb:1d:48:e2:
05:97:d0:ab:ac:c8:f0:c6:e0:65:7b:58:a9:b7:c5:71:05:88:
1e:af:ba:b9:6c:74:d5:4f:74:3b:70:b7:a1:96:b9:19:e3:50:
23:86:eb:21:be:f1:69:7f:a2:33:b1:e0:76:b1:f6:71:74:f8:
8c:d6:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:33:49 2025 by rpki-client