Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa
File: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (raw, json)
Hash identifier: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=
Subject key identifier: 0B:7C:6D:1B:1C:52:82:9F:CF:97:3E:0B:A6:4F:94:7B:E0:61:BA:7A
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 0194244558F7D770100E3FBC050F22E75CEA
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34620
IP address blocks: 85.255.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:58:f7:d7:70:10:0e:3f:bc:05:0f:22:e7:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7c6d1b1c52829fcf973e0ba64f947be061ba7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:72:73:b8:4f:00:3e:7b:74:bb:df:77:84:
8b:86:02:c5:3e:55:38:e2:0c:61:70:b6:9b:fe:81:
6e:af:0c:f6:73:58:96:70:47:a6:b4:14:0c:8a:d6:
2f:24:26:1e:31:7c:03:af:99:34:39:37:38:b6:4e:
21:cd:fa:30:f2:97:70:a9:ee:df:d1:be:6c:88:61:
40:8f:3f:45:38:54:fd:30:3e:9c:c7:08:ae:77:c3:
f2:c4:d4:ba:ca:68:c0:14:4f:74:a5:b7:dc:de:c5:
0f:34:fb:fb:01:cf:a9:12:6b:d1:bd:ef:67:73:f9:
9b:f3:a4:b9:87:f9:38:aa:68:fb:86:ab:da:41:49:
ae:3e:49:47:e2:83:5e:b7:d8:1c:c8:fc:a7:f6:b9:
5d:70:79:94:21:8c:12:ed:e9:3a:82:b4:21:76:31:
b4:47:73:9b:71:a7:70:93:81:0e:dc:19:62:c4:1b:
cf:78:57:1e:04:a2:22:a8:7e:99:bd:08:56:08:ad:
cd:76:08:f9:60:5b:7c:87:f1:7d:65:53:68:c7:44:
5e:80:22:e2:58:fa:03:f6:fb:79:ed:64:6a:16:53:
27:5d:4e:5e:af:09:5e:fb:42:b2:34:c5:e3:a8:aa:
f7:06:fa:1a:ca:a5:07:85:39:8a:a0:f0:50:54:40:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:6D:1B:1C:52:82:9F:CF:97:3E:0B:A6:4F:94:7B:E0:61:BA:7A
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.64.0/20
Signature Algorithm: sha256WithRSAEncryption
83:10:ba:d3:6e:99:04:5e:65:74:41:eb:c6:7a:8c:d3:c9:62:
72:94:9f:70:c5:9d:d2:36:e9:4d:7b:20:a9:69:4f:77:cf:13:
da:74:78:25:56:a8:4f:37:43:f1:41:94:d4:6c:8c:38:54:eb:
c5:74:a0:ee:60:61:39:e0:c5:76:f4:b4:61:9a:2b:cf:ea:e9:
31:1b:18:91:8d:c1:7f:46:2d:50:85:8e:3d:7d:5d:4b:ea:2e:
22:3b:8b:34:58:fa:f7:3a:f7:d4:dc:fb:fa:91:da:c5:a1:11:
07:b0:67:12:f6:8e:72:86:fc:77:42:df:5c:64:68:46:e2:85:
11:1d:0f:69:a1:9f:a8:66:aa:d7:d8:98:c2:5a:0d:17:f5:51:
5e:1c:b6:8a:42:67:7d:a0:a6:f4:4b:00:d2:7f:2e:a0:12:6f:
6e:ba:00:a1:9c:a3:48:cb:fd:53:3c:bb:6c:2a:32:b8:69:d2:
0c:a3:ac:94:c2:7d:71:af:95:a5:68:0a:87:90:ab:a2:52:f3:
d5:f0:b9:c3:2b:7c:da:9c:17:a5:ea:65:a8:e8:3b:09:99:58:
4c:af:79:b3:44:49:5e:a1:51:97:ce:d3:0c:95:80:49:be:cb:
b3:c1:64:32:9a:ed:85:4c:f9:c2:62:d6:d9:1e:ed:19:ea:07:
62:3f:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:21 2025 by rpki-client