Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/bkDK8LpWEz7xNaLx7OkR52HqocY.roa
File: bkDK8LpWEz7xNaLx7OkR52HqocY.roa (raw, json)
Hash identifier: ZfUBWf9ZjG+1wYu3QuhywIJqjpLWZnLBYTFeu0FwB7k=
Subject key identifier: 6E:40:CA:F0:BA:56:13:3E:F1:35:A2:F1:EC:E9:11:E7:61:EA:A1:C6
Certificate issuer: /CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Certificate serial: 0185715555AAAB3A672D73AF1803DBD314A2
Authority key identifier: 6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/bkDK8LpWEz7xNaLx7OkR52HqocY.roa
Signing time: Mon 02 Jan 2023 07:14:55 +0000
ROA not before: Mon 02 Jan 2023 07:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:55:aa:ab:3a:67:2d:73:af:18:03:db:d3:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Validity
Not Before: Jan 2 07:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e40caf0ba56133ef135a2f1ece911e761eaa1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:96:4c:6d:e0:bd:30:f7:bc:d5:da:ee:f9:
a7:43:0f:62:63:57:61:6e:a3:9d:6d:44:1a:16:40:
4d:e1:4a:d3:cd:5e:74:ce:8c:37:1e:e3:f5:a8:c6:
bf:e6:d0:0f:57:ae:3a:b4:78:80:c1:29:b8:f9:6c:
24:d1:e0:b2:54:95:c5:26:24:ed:7d:48:43:a5:eb:
a7:35:e5:1a:ce:9b:df:fb:62:a9:5f:f9:ab:0c:39:
7e:9e:2b:50:54:7f:90:10:63:cd:28:b6:26:67:91:
ae:a5:f7:9a:48:27:a9:b7:a1:01:a1:25:a6:ea:2f:
8d:a3:28:18:9e:78:76:7f:a8:09:18:33:50:31:ee:
d6:cf:10:6a:c4:2f:f7:e1:e5:d9:46:29:76:e1:e2:
3e:62:d9:f8:71:46:27:2e:ce:0d:e7:35:06:6b:61:
b6:50:de:43:b2:02:35:b2:86:b6:05:ee:7d:28:ae:
ac:a3:bd:29:0f:d6:5a:fb:18:56:86:f4:17:50:4a:
d0:67:dd:e4:9e:35:39:ea:91:42:69:e5:c0:6e:1c:
dd:07:fb:7d:4a:f5:7d:1d:40:e3:c0:4a:70:3f:9e:
ba:3a:ed:19:ff:a5:27:ed:9e:b5:f8:d4:9b:ce:c1:
2b:e8:e0:f9:cf:bb:64:40:55:af:ba:45:83:12:a9:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:40:CA:F0:BA:56:13:3E:F1:35:A2:F1:EC:E9:11:E7:61:EA:A1:C6
X509v3 Authority Key Identifier:
keyid:6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/bkDK8LpWEz7xNaLx7OkR52HqocY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/avKvL-Kj7-VKFPoJJiAwrNBxHXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:20:c2:aa:a8:77:bc:e3:47:0d:6c:2f:76:36:01:d7:8a:75:
33:58:42:25:a6:2f:7a:61:31:5e:d3:f1:91:83:c0:d8:7c:8e:
f1:a2:db:1f:8f:fa:8b:1e:09:7c:4c:61:4a:9d:97:b2:77:a1:
d8:fc:35:f7:1f:ff:78:4a:14:bf:3b:55:d4:43:df:39:ee:04:
1d:c0:83:46:c6:fa:d4:cb:32:d8:0c:c7:1c:b9:37:05:4c:13:
07:af:ee:89:89:28:9f:8b:f3:6b:0e:0d:bb:21:99:c3:0b:2e:
70:9d:6e:01:41:33:6b:86:c5:ff:20:db:d0:95:49:31:3b:6b:
5a:1e:a9:92:25:a6:bc:f6:7a:57:58:ed:9d:7f:08:eb:c5:55:
37:ac:50:df:7b:b4:1b:ef:d6:70:8c:f3:dd:10:67:8f:1b:a9:
32:e7:2c:d7:ed:f0:a7:ea:7a:54:7c:36:fb:43:d3:ac:45:61:
f8:e7:cd:14:56:e2:5e:10:5e:a4:78:85:b1:d5:2a:0d:bd:a8:
28:d8:fd:15:9e:05:03:86:fc:a5:36:c5:a7:de:5f:be:25:67:
b3:82:da:dc:ab:fc:26:d3:cc:5b:bb:ec:2a:81:16:92:36:41:
b9:91:da:96:fa:6a:d0:0e:d5:b4:ba:8f:0a:6e:60:b4:7c:48:
d3:f1:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:31:26 2025 by rpki-client