Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/bdOSuRKRee1uOsbVObRylNDB0a0.roa
File: bdOSuRKRee1uOsbVObRylNDB0a0.roa (raw, json)
Hash identifier: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=
Subject key identifier: 6D:D3:92:B9:12:91:79:ED:6E:3A:C6:D5:39:B4:72:94:D0:C1:D1:AD
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0194258EADA6A9CC43D3BC2B9B58AE2E9740
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/bdOSuRKRee1uOsbVObRylNDB0a0.roa
Signing time: Thu 02 Jan 2025 05:48:15 +0000
ROA not before: Thu 02 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.176.100.0/24 maxlen: 24
185.176.101.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ad:a6:a9:cc:43:d3:bc:2b:9b:58:ae:2e:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 2 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dd392b9129179ed6e3ac6d539b47294d0c1d1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:12:a9:1d:c6:92:e2:02:29:32:76:6e:0b:
ad:3d:f4:7a:d9:47:32:92:0f:0b:12:d3:9e:28:b5:
09:ae:12:e6:d1:01:44:06:29:61:1e:c1:8d:f3:9a:
36:19:d2:36:d0:0f:09:e6:8f:59:fb:8e:71:73:19:
be:e6:10:34:53:35:e3:a4:a4:93:d5:94:27:95:72:
31:b7:09:94:4e:79:78:ae:2a:c1:c8:06:48:29:ce:
96:d4:2c:bb:4d:46:47:20:2b:4e:31:01:b2:42:35:
93:2b:a5:a3:79:c5:5e:7a:91:75:52:0d:a0:13:95:
9d:43:6e:82:36:da:5f:0a:13:41:00:02:cf:d4:c9:
10:ce:d0:9c:f0:93:e0:e2:1a:82:36:c7:98:d9:52:
de:33:51:17:07:16:2f:da:cb:fb:ee:ba:ae:eb:f9:
2b:17:c3:4d:ae:66:97:54:48:6b:cf:42:9e:9b:e0:
b0:ed:a2:9d:ef:1b:4b:dd:06:d6:f8:b0:4c:28:21:
a6:54:e3:55:43:33:32:ec:0d:b2:ae:de:57:4e:57:
cf:49:62:d9:3c:f9:57:54:1b:a6:34:67:cc:f6:6d:
e1:6c:22:58:e9:58:4d:99:ea:15:38:80:7e:e1:63:
59:a1:5e:18:16:b1:a4:9f:e8:c5:6f:e7:77:1e:a7:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:92:B9:12:91:79:ED:6E:3A:C6:D5:39:B4:72:94:D0:C1:D1:AD
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/bdOSuRKRee1uOsbVObRylNDB0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:5e:4f:58:2e:3f:f0:8f:ef:de:99:4b:90:a4:62:ef:b7:16:
54:62:98:6c:81:fa:20:d7:44:c8:d3:a3:81:9a:e1:86:dd:cb:
8c:2c:cb:ba:d8:01:65:fc:43:45:6c:dc:2a:93:fe:06:5d:f7:
4c:72:4b:d1:1f:5b:e0:04:f6:ae:01:f0:66:25:0b:ba:f8:28:
57:5e:0b:2e:2a:0d:11:88:ec:85:c1:f6:09:3d:4b:c4:e9:4b:
d7:b6:be:e5:ca:a2:c7:5b:bd:78:da:c2:41:02:61:d2:2a:d6:
bf:3f:b9:04:66:6b:9c:93:d5:80:e2:ed:66:9b:7b:09:f6:bc:
ad:f6:50:ef:4e:33:de:39:9a:21:93:ed:f5:87:e0:27:56:e1:
f7:6d:09:00:f4:31:58:2d:f9:e3:b6:42:97:28:25:6a:8c:dd:
80:34:f5:36:62:c4:8d:de:35:66:94:90:c2:71:7b:30:54:f1:
0d:38:05:d4:bb:c2:de:4b:99:95:c9:55:0d:fd:00:8f:e0:13:
71:a3:0e:12:ef:56:a7:e7:78:b2:5c:e1:54:cd:0c:63:2c:54:
23:f8:2c:fb:80:fb:29:52:5a:0d:28:0d:b8:f6:7f:89:c9:cf:
7c:28:dd:15:74:64:6a:b6:9c:01:25:d4:99:b9:29:15:ff:cc:
79:fc:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:05 2025 by rpki-client