Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/CBkrD0-HFXBCCGUPZfFkKGyHcrY.roa
File: CBkrD0-HFXBCCGUPZfFkKGyHcrY.roa (raw, json)
Hash identifier: 2C5E+0mys8/DW3tyIZs5gviMsQWXxKFzdW6joosqRcc=
Subject key identifier: 08:19:2B:0F:4F:87:15:70:42:08:65:0F:65:F1:64:28:6C:87:72:B6
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019425223157DA3B59627CCDA5660184F6B5
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/CBkrD0-HFXBCCGUPZfFkKGyHcrY.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206663
IP address blocks: 185.94.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:31:57:da:3b:59:62:7c:cd:a5:66:01:84:f6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08192b0f4f8715704208650f65f164286c8772b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:f3:5a:39:42:b1:67:18:f9:a9:61:0e:bb:
e0:fc:a0:f5:61:39:f5:79:3f:ca:37:f1:3a:b0:3f:
67:f0:4f:5b:e7:6a:13:cd:c0:f0:29:18:3d:74:37:
f3:d4:ec:ec:d1:04:66:fe:55:e0:ca:ec:59:0f:8b:
77:07:6f:bb:ea:60:a3:8d:cb:d7:13:d5:c7:e3:b6:
da:c4:7f:50:fa:cb:43:3f:f2:f0:36:e5:54:0e:6b:
1d:2b:30:01:01:2a:c7:c7:fa:b2:5f:7c:51:18:3a:
e4:9e:a3:4c:37:e2:22:26:7b:cb:4b:34:b7:6b:d4:
43:48:ea:20:f9:02:3e:91:45:05:ee:91:bd:32:8c:
6c:9c:c3:63:79:1e:d0:26:1d:8a:5e:57:59:c6:90:
6a:6d:15:02:d8:a6:cb:6f:c7:2b:69:ed:16:88:a2:
e9:a1:0b:0d:b8:13:5a:f7:8e:fc:61:5e:3b:ad:d7:
db:77:cc:b5:4b:a9:04:da:97:25:2a:2c:6d:27:bb:
bd:22:e4:43:bf:52:ba:c5:80:ed:da:27:6e:f7:b9:
ab:cb:68:ef:b8:d7:85:18:82:01:c6:90:c1:d8:8b:
0c:4a:ce:9f:8a:d0:6c:e4:30:5e:6c:fe:03:f9:02:
48:67:99:6c:78:67:a0:af:08:db:33:22:d2:fe:86:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:19:2B:0F:4F:87:15:70:42:08:65:0F:65:F1:64:28:6C:87:72:B6
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/CBkrD0-HFXBCCGUPZfFkKGyHcrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.47.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3d:97:da:0a:6b:ea:80:b0:64:f9:44:5b:2d:12:8d:18:d9:
6d:a2:bf:18:4f:e1:06:ff:3d:f5:ef:8c:d1:7f:ae:51:f8:da:
2e:f3:b9:bc:14:f1:ed:49:85:5d:a1:93:ed:51:8b:f1:31:b9:
c7:6c:28:04:12:84:81:ea:b4:82:f2:09:58:b0:2c:ae:f5:1d:
4c:5c:89:d1:4d:a1:a4:b9:b7:f7:de:97:ff:03:b4:c5:23:9f:
2a:c3:59:48:2d:f6:ee:a8:bb:32:66:02:b5:e3:ae:6c:a2:80:
d4:6b:39:70:94:f0:4c:db:d3:7c:92:b3:8a:1f:82:03:07:5e:
57:b8:89:12:78:99:be:b8:fb:d5:11:cb:02:b2:3c:8e:c9:e7:
7b:2a:b9:60:89:96:72:0c:10:d5:a5:d0:a7:44:bc:bf:03:79:
87:52:b3:c0:19:45:a2:17:cf:48:a7:ff:9f:02:7c:78:10:e0:
3d:35:57:c5:e8:4a:c9:88:71:0c:88:ed:66:a3:3a:26:58:d0:
e2:0e:9c:d5:f2:aa:30:13:43:61:82:1c:ef:d3:e7:af:40:b2:
28:ec:1d:5f:4d:bd:3e:5c:94:ac:cf:06:64:bc:fc:2a:be:5f:
b1:45:d3:1a:1b:6b:a3:89:67:62:81:ba:3f:96:29:6d:08:9b:
90:3d:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:15 2025 by rpki-client