Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa
File: kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa (raw, json)
Hash identifier: FxGgyIXbAaHbajTUZb5rQl/upi6b8yc9JYqmBZ7HbLE=
Subject key identifier: 91:BB:26:09:5A:35:32:E0:31:6D:62:B6:32:4F:C5:36:A2:78:A3:E4
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019421B1EC28C265A032D09D0B97AB09EB21
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203263
IP address blocks: 185.168.124.0/23 maxlen: 23
185.168.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:28:c2:65:a0:32:d0:9d:0b:97:ab:09:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91bb26095a3532e0316d62b6324fc536a278a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:7c:3b:f1:43:84:48:89:77:2f:c6:8e:b9:
8a:2e:7e:34:c9:29:84:c7:26:4e:d7:7b:1a:d2:65:
0b:78:ed:20:7d:b7:37:fa:76:5d:29:80:8f:82:a8:
ee:73:79:c7:de:99:5e:d0:e4:39:c9:7e:2a:bd:2c:
2a:dd:af:50:5d:18:0a:78:c9:29:bd:0d:54:47:13:
9f:98:1e:1f:ca:a2:d3:28:35:d6:5f:40:66:4e:7a:
5e:d6:e0:d6:c3:b3:22:db:00:f1:7f:e8:b4:e1:9e:
c9:9a:35:11:8c:bc:46:7f:f9:99:f3:97:77:0f:8e:
7f:fe:5f:8d:f3:19:2c:28:1f:e4:91:e3:91:a7:77:
c8:f9:e1:9a:25:e2:ea:09:33:dd:97:a3:42:cf:36:
3f:42:d0:d5:8e:34:df:94:26:89:ce:15:c5:66:c8:
d6:62:78:36:29:a4:7f:ae:b5:fe:f5:97:a0:0f:17:
a7:57:4e:04:9c:81:78:af:10:e6:db:71:62:ba:58:
d2:e3:32:0f:50:0f:11:81:f6:f4:7b:27:ab:b4:27:
d4:33:a9:fa:81:c8:f5:cd:bb:cf:33:17:b6:70:bf:
5d:02:c2:20:b3:07:6f:93:57:3e:64:ae:e1:dd:ba:
d1:35:be:99:22:0c:13:17:f5:04:0a:4a:48:bc:f7:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:26:09:5A:35:32:E0:31:6D:62:B6:32:4F:C5:36:A2:78:A3:E4
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.124.0-185.168.126.255
Signature Algorithm: sha256WithRSAEncryption
7c:af:39:51:73:7f:96:ae:9a:c6:98:54:2c:0b:c0:19:6b:10:
93:9b:8f:d0:a7:35:35:e4:0f:9c:7d:82:c1:3e:0c:fb:14:6e:
9f:01:8f:3e:7f:b8:1c:cc:2d:b8:13:e0:e9:68:89:42:08:2d:
61:4a:f6:a2:2d:af:4f:f5:d3:db:60:dc:b4:49:01:c4:2e:5c:
5a:4f:6e:11:63:b9:d6:eb:ca:b4:6c:d2:49:18:18:27:0e:9d:
8f:bf:f3:a1:2a:06:8f:06:c5:b6:95:fc:a0:77:fa:28:9d:4b:
54:2d:4f:f2:e1:a7:c2:6b:36:37:a2:7f:7e:d6:8f:6f:a0:ae:
6c:8c:d3:43:96:04:05:ad:65:3c:d4:fd:93:b6:e3:18:db:68:
3b:aa:60:f4:93:2c:47:25:a9:d3:01:bd:b2:4a:ce:48:5d:13:
48:58:62:c5:cb:53:7e:56:cf:35:4b:82:e9:e9:a5:73:7c:86:
d7:4b:de:8e:bc:cb:be:76:86:9a:81:c7:27:af:6e:33:e8:7a:
09:e1:86:00:5d:51:5b:d2:29:be:05:53:f2:a8:61:ac:42:35:
ef:c0:e2:fd:d9:9c:68:1d:22:46:c4:79:27:62:57:b6:9c:19:
d9:74:92:ae:a9:58:a7:12:59:42:7b:1f:87:3a:bc:d1:e8:17:
a9:17:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:00 2025 by rpki-client