Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/RbtpOQvxKOhivyATsaFRApG8DvI.roa
File: RbtpOQvxKOhivyATsaFRApG8DvI.roa (raw, json)
Hash identifier: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=
Subject key identifier: 45:BB:69:39:0B:F1:28:E8:62:BF:20:13:B1:A1:51:02:91:BC:0E:F2
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0194228DB98D177FA97FBDB508BEF40B6143
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/RbtpOQvxKOhivyATsaFRApG8DvI.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 195.234.0.0/24 maxlen: 24
195.234.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b9:8d:17:7f:a9:7f:bd:b5:08:be:f4:0b:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45bb69390bf128e862bf2013b1a1510291bc0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:16:5f:7a:e9:25:fd:5c:34:36:85:ce:b4:
25:a4:da:9f:52:7f:85:eb:17:65:59:3e:45:6b:84:
0b:3b:51:12:cf:96:d2:94:58:71:c1:79:ca:7c:cf:
8f:3c:f1:75:31:b8:fa:6c:40:8a:9b:e1:23:3e:de:
2e:a0:e8:c9:fe:0b:72:28:0a:18:fc:c1:bf:b8:21:
d2:c5:b3:27:81:95:ec:d3:33:3d:be:45:8f:da:98:
d2:c8:54:76:4e:01:01:ce:c8:2a:d9:14:3e:a1:5d:
5f:bc:54:76:a7:91:0a:ea:33:be:fb:61:63:78:f6:
ba:d1:4b:9e:27:80:7a:bb:7c:cc:61:19:a6:cb:e2:
25:63:ac:a3:d2:a3:81:b9:89:73:de:a8:23:c9:01:
72:f7:ee:7e:d8:c5:7a:41:43:24:1f:41:56:d9:7b:
e7:28:47:15:83:16:f7:56:b4:dc:a7:27:05:76:0a:
eb:02:2d:13:c5:ff:72:51:40:8e:d1:90:5b:2d:46:
0b:55:5b:4a:49:cb:25:f6:71:cb:2b:9f:0c:07:94:
e9:f2:a2:f6:53:90:8b:2d:b2:45:56:76:c9:a8:29:
d6:8e:3b:08:95:9e:04:5d:39:73:bf:43:35:4a:c0:
0f:50:c2:9c:67:ed:a2:ca:d3:9b:0d:0e:f7:80:85:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:69:39:0B:F1:28:E8:62:BF:20:13:B1:A1:51:02:91:BC:0E:F2
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/RbtpOQvxKOhivyATsaFRApG8DvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
76:09:60:4e:7f:c7:ec:88:0e:63:9d:01:68:97:b6:35:d0:e7:
e9:bd:b8:72:52:00:c0:7a:3f:b4:90:12:d1:b0:6b:c7:95:fa:
95:78:b1:54:82:ad:16:68:64:ab:97:ce:78:4b:38:9a:72:eb:
55:88:96:17:2b:01:3b:cf:32:60:37:06:fd:f0:64:b6:e0:59:
ca:8e:d8:7a:14:6c:72:a3:d1:a5:1d:84:2c:79:21:dd:a8:dc:
2b:aa:91:4b:b3:e2:2e:70:4a:d5:a5:d2:2e:48:64:01:cf:8e:
eb:22:9f:2e:48:6c:8f:39:02:fb:2d:69:47:b7:7e:0c:c2:15:
7f:07:4f:28:38:81:c0:5c:30:5c:e6:39:3b:a3:1e:e1:23:51:
ac:f9:be:b4:3a:7e:a0:fb:7c:3e:e1:64:c6:8f:e8:b6:a2:5d:
83:f5:d2:30:65:d8:aa:5f:0f:33:36:7f:3b:9e:c1:ee:f3:65:
9f:8b:87:36:bd:51:57:b0:a2:47:47:74:08:dc:69:08:d5:7e:
81:04:86:95:e0:f3:12:bd:47:d3:28:d4:75:fd:17:c5:70:45:
47:58:12:bf:1a:e5:6f:d3:65:9b:3a:ff:19:5a:3e:2b:80:f5:
05:c6:e6:b9:b4:d3:cf:2a:0c:91:d5:e0:f9:d4:58:71:e0:c5:
8a:36:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:34 2025 by rpki-client