Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/BpM-voHb9K2iJxJY8SxNfPQuLF4.roa
File: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (raw, json)
Hash identifier: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=
Subject key identifier: 06:93:3E:BE:81:DB:F4:AD:A2:27:12:58:F1:2C:4D:7C:F4:2E:2C:5E
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194258F0AC2CB44913BD4218814ECC130C4
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/BpM-voHb9K2iJxJY8SxNfPQuLF4.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.148.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0a:c2:cb:44:91:3b:d4:21:88:14:ec:c1:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06933ebe81dbf4ada2271258f12c4d7cf42e2c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9e:01:a4:28:70:64:82:35:d1:61:9d:62:7d:
b2:3c:f3:e7:a8:af:12:52:53:cb:54:96:4a:8e:ec:
f7:64:37:24:7b:4b:ad:bd:f3:c2:bd:35:de:82:00:
1f:c0:38:eb:5f:23:33:3e:3c:5c:3d:17:7f:6f:b2:
c0:a3:f1:1b:d2:a1:ee:7d:c6:20:c9:9b:76:84:2c:
44:21:fe:9a:85:a9:8f:04:1e:a4:a7:85:e2:2d:03:
c0:51:70:33:c0:68:a1:24:ee:e7:8d:bb:d5:20:8f:
8f:c1:27:58:92:8f:7b:6c:a8:3a:1c:e8:09:1d:6e:
3f:a6:d6:9f:cb:b7:85:76:fe:5e:20:c4:0a:ce:5f:
42:0a:32:72:56:72:55:09:4a:2d:e9:95:0c:01:10:
77:20:23:30:d8:fe:77:1d:64:62:96:4c:a6:a1:38:
ed:a5:2a:50:2a:b9:1a:fc:f7:05:d7:bd:ca:00:4d:
b0:4a:08:6b:2e:89:5c:01:58:16:98:11:43:0a:2f:
65:c2:e5:ff:bc:b0:2c:c7:1b:40:3c:70:82:01:ab:
ba:45:36:4c:75:30:62:69:7d:2d:e9:90:ed:e0:07:
d3:a3:00:25:24:66:e9:71:db:90:4d:31:99:7e:61:
35:f9:f1:95:4b:99:89:61:a0:80:b6:79:1a:46:44:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:3E:BE:81:DB:F4:AD:A2:27:12:58:F1:2C:4D:7C:F4:2E:2C:5E
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/BpM-voHb9K2iJxJY8SxNfPQuLF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.68.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:aa:c1:14:80:d5:c8:51:62:7e:dc:31:60:dd:44:03:93:ad:
a7:d4:49:00:3d:98:a6:38:67:fb:7f:21:0e:8c:37:37:78:fe:
0f:da:86:d5:dc:69:96:56:e0:8a:ef:31:5b:45:21:d0:94:01:
aa:6d:91:2b:15:e8:13:04:16:81:df:bb:ce:3d:5a:f6:00:f4:
74:2c:26:c8:c5:9f:f3:fe:90:c2:16:d3:21:db:3f:14:b9:0f:
31:74:0e:b5:bd:3a:be:9a:97:b1:8b:ca:02:66:05:98:b9:4f:
fa:c1:89:47:dd:3d:73:72:d6:4c:e3:01:22:f5:a0:9f:b7:12:
a4:77:1c:35:9e:18:22:80:16:4e:4e:c0:45:1e:3b:54:ff:ee:
40:cc:f5:37:4b:a6:e8:5c:6c:b1:91:83:c4:32:d4:a1:48:79:
4f:6c:d2:11:a9:37:a6:d8:e9:48:5c:f3:8f:56:94:88:11:51:
31:8b:df:57:cc:3e:91:ee:08:e6:13:5a:4f:53:25:33:24:a9:
c7:bc:8a:59:9c:5a:80:fc:f7:eb:50:d7:d3:e6:ea:c6:50:b0:
69:ea:6b:db:b9:2f:df:e6:60:e7:b4:ee:32:57:86:9d:c4:34:
02:c0:f6:74:94:c8:68:0e:b4:3a:8d:6d:66:71:3c:8a:64:a5:
0c:7a:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:03 2025 by rpki-client