Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/kIoXSOBJVGL2wOnwc997EpFfJ8w.roa
File: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (raw, json)
Hash identifier: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=
Subject key identifier: 90:8A:17:48:E0:49:54:62:F6:C0:E9:F0:73:DF:7B:12:91:5F:27:CC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019427B579C3F47C0699D5D9B9A9A7A104FA
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/kIoXSOBJVGL2wOnwc997EpFfJ8w.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47581
IP address blocks: 185.146.127.0/24 maxlen: 24
212.58.157.0/24 maxlen: 24
212.58.158.0/24 maxlen: 24
212.58.159.0/24 maxlen: 24
2a07:7b80:106::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:79:c3:f4:7c:06:99:d5:d9:b9:a9:a7:a1:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=908a1748e0495462f6c0e9f073df7b12915f27cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:35:a9:77:de:ac:28:e0:39:11:c0:c7:33:
a4:a2:83:18:03:40:48:fc:ff:fd:f2:38:0f:f0:96:
46:8d:84:fa:4c:59:3a:55:5c:22:c9:da:61:bf:14:
bb:7f:cc:5a:53:02:67:97:23:46:73:0a:b9:31:4f:
d7:b0:57:19:5e:af:48:b9:86:63:2a:e5:db:71:ce:
8b:d1:62:75:32:00:53:db:e1:7f:dd:88:b2:62:43:
0f:8e:96:f1:2c:e5:ee:39:c7:58:de:1a:a4:32:d1:
be:25:31:65:33:aa:3e:59:cc:5e:e0:2b:aa:63:ec:
b5:56:0e:f8:33:53:4a:a5:23:b6:dc:14:1f:66:6e:
63:a6:7d:db:d1:b8:f0:31:78:0b:19:a9:ee:af:94:
28:07:f2:94:86:30:6d:c7:7e:8a:6f:ea:68:07:1f:
fc:60:b5:d5:a8:74:02:9b:6b:52:d2:70:e7:81:cf:
0f:b2:f7:ac:85:7f:7c:21:95:5f:c4:2c:14:a8:cc:
fa:0e:3c:31:e6:fc:55:36:98:e9:2d:5a:4d:62:7c:
5e:0c:9e:2a:ad:ce:dc:be:eb:f4:9f:17:fc:64:a0:
2a:c9:8e:ac:d8:ba:20:48:c1:6a:b9:bc:86:51:b6:
21:d1:53:07:cc:ea:88:19:ee:0c:4c:59:5f:3d:b4:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:17:48:E0:49:54:62:F6:C0:E9:F0:73:DF:7B:12:91:5F:27:CC
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/kIoXSOBJVGL2wOnwc997EpFfJ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.127.0/24
212.58.157.0-212.58.159.255
IPv6:
2a07:7b80:106::/48
Signature Algorithm: sha256WithRSAEncryption
b3:63:6c:9f:53:21:8f:b8:1f:f4:ac:dc:20:2a:53:af:ab:b8:
13:f7:10:13:9c:94:07:26:f1:71:68:10:86:cd:05:f8:5f:e9:
a0:b7:04:6e:3e:54:b3:4e:3d:7b:48:e6:b8:20:34:c4:c4:28:
24:1f:03:0b:27:41:a5:2a:8a:d5:1a:12:46:32:c3:00:64:1d:
fb:f1:69:74:4e:71:17:db:5f:98:11:b6:eb:fb:fe:db:5a:8b:
86:40:6d:d7:59:89:75:d3:e2:e9:4b:7a:89:d4:d4:50:1e:98:
62:48:9b:05:d3:76:30:0a:4b:82:f6:3e:a2:5e:d5:47:e3:0f:
2c:20:72:bc:71:f3:c4:0c:08:78:8d:6d:d0:42:f3:52:bd:04:
57:44:07:b2:8f:87:aa:08:37:87:85:15:55:70:95:5d:78:3e:
21:d0:b2:28:df:9f:34:ef:0d:40:e6:28:76:7d:39:37:54:f3:
3a:f2:39:30:3e:f7:01:b6:3c:89:10:39:fa:ea:b6:ba:22:e7:
4e:84:76:ca:9b:6a:88:ac:fc:64:46:a3:46:14:75:35:6b:9e:
0c:fb:43:f0:9a:de:1b:f6:24:dd:fe:30:7b:6a:08:9d:1a:c2:
26:3a:3f:ef:d9:95:d5:a8:e1:d7:ab:38:2c:0f:be:0f:6a:b0:
58:da:e2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:50:38 2025 by rpki-client