Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/bnTkJ1iOYiyhAP5ocSx1UhGskH8.roa
File: bnTkJ1iOYiyhAP5ocSx1UhGskH8.roa (raw, json)
Hash identifier: z8LIxkOv5h+IVFnSSbVcBErOihk5w4Qykab9W6ZSCgw=
Subject key identifier: 6E:74:E4:27:58:8E:62:2C:A1:00:FE:68:71:2C:75:52:11:AC:90:7F
Certificate issuer: /CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Certificate serial: 01856F549CF2536BC8EA0BDC85EBDF2DB29E
Authority key identifier: 05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/bnTkJ1iOYiyhAP5ocSx1UhGskH8.roa
Signing time: Sun 01 Jan 2023 21:54:54 +0000
ROA not before: Sun 01 Jan 2023 21:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57348
IP address blocks: 185.67.149.0/24 maxlen: 24
185.67.150.0/24 maxlen: 24
185.67.151.0/24 maxlen: 24
185.67.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9c:f2:53:6b:c8:ea:0b:dc:85:eb:df:2d:b2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d658594b65364b2c2e56a6a45ebb06847b3849
Validity
Not Before: Jan 1 21:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e74e427588e622ca100fe68712c755211ac907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:51:f1:60:46:dd:10:51:0c:18:d2:cd:3e:87:
bb:94:bb:2b:0a:f4:ee:ca:b5:7d:0c:5a:56:d8:e1:
90:05:ee:88:40:78:ca:d8:4e:0c:f8:08:82:85:87:
3d:df:7a:fc:2e:c9:51:bd:cb:30:a1:7a:0d:1c:4d:
d1:ef:f3:5f:16:e1:a1:a0:54:c8:97:18:a2:61:89:
e2:ac:1b:97:a7:fd:2a:44:3e:34:68:eb:6c:75:28:
c0:4f:3d:b9:c5:33:04:bf:31:75:b2:36:1a:07:b0:
f6:2f:0c:62:2c:f4:d4:7c:68:6c:51:ad:a2:11:f7:
a3:74:14:d7:35:d8:2e:80:03:21:ca:61:ef:7b:cc:
ab:b7:85:42:0a:76:c2:a9:2b:5a:11:de:b9:ba:b0:
d9:d5:fe:c8:92:f9:c5:a6:ee:6b:2f:bc:dd:25:eb:
8f:b1:b3:5e:39:12:df:17:d2:94:d9:3b:f5:b0:04:
f4:aa:7e:89:a0:35:03:92:99:1b:61:7a:d9:0d:ab:
b2:41:c1:c8:8e:14:fd:2b:8a:71:7e:08:f4:c1:d0:
0f:f1:ce:3a:d6:00:ff:79:62:c8:79:31:e6:12:71:
ea:32:19:5c:88:51:02:8b:42:e8:fb:bb:f4:01:34:
fd:50:44:ac:ad:3a:b3:22:d5:99:a6:14:9c:e0:db:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:E4:27:58:8E:62:2C:A1:00:FE:68:71:2C:75:52:11:AC:90:7F
X509v3 Authority Key Identifier:
keyid:05:D6:58:59:4B:65:36:4B:2C:2E:56:A6:A4:5E:BB:06:84:7B:38:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdZYWUtlNkssLlampF67BoR7OEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/bnTkJ1iOYiyhAP5ocSx1UhGskH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/BdZYWUtlNkssLlampF67BoR7OEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:2b:99:24:5b:70:2d:02:9c:60:2d:17:b9:1e:56:58:29:79:
f0:4f:c7:99:e6:11:2f:64:71:01:8b:3f:38:8b:59:6f:c8:4e:
31:36:8f:ac:3d:77:b1:b9:93:bb:fe:22:23:9b:80:9b:10:e5:
3d:44:8a:bf:3e:f0:e1:ad:bf:04:0b:6e:60:e4:6d:68:54:a1:
8d:df:62:20:2d:a5:79:2e:62:12:2e:fb:60:d8:ae:5e:09:2f:
73:82:85:e0:df:6b:55:0b:d4:7a:74:c0:c3:95:9c:a8:c6:b3:
cd:f2:d3:3d:41:b2:74:ed:d8:92:58:0f:52:a6:9d:42:ad:56:
50:54:a0:65:78:17:2d:17:f1:6b:1c:1b:ad:88:f9:3b:b8:f3:
1b:91:ef:14:61:f1:70:ca:cb:c3:f4:a4:de:61:97:48:61:2a:
36:46:1a:42:5c:23:ac:f8:94:55:b9:87:3a:d6:7d:18:f1:06:
33:1f:23:8c:e4:3c:69:29:6c:f5:cb:72:f7:00:34:6a:db:14:
fa:31:83:00:66:e3:7f:43:25:9b:f4:e1:a5:78:f9:19:fe:3e:
df:a9:33:a1:b9:24:c2:b6:af:fc:81:a3:25:3d:b7:ba:a1:3c:
f1:6d:12:c9:8d:5f:70:b2:85:94:c9:5e:89:75:d3:26:b6:28:
46:cc:6a:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvVJzyU2vI6gvchevfLbKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDY1ODU5NGI2NTM2NGIyYzJlNTZhNmE0NWViYjA2ODQ3
YjM4NDkwHhcNMjMwMTAxMjE1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc0ZTQyNzU4OGU2MjJjYTEwMGZlNjg3MTJjNzU1MjExYWM5MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVHxYEbdEFEMGNLNPoe7lLsrCvTu
yrV9DFpW2OGQBe6IQHjK2E4M+AiChYc933r8LslRvcswoXoNHE3R7/NfFuGhoFTI
lxiiYYnirBuXp/0qRD40aOtsdSjATz25xTMEvzF1sjYaB7D2LwxiLPTUfGhsUa2i
EfejdBTXNdgugAMhymHve8yrt4VCCnbCqStaEd65urDZ1f7IkvnFpu5rL7zdJeuP
sbNeORLfF9KU2Tv1sAT0qn6JoDUDkpkbYXrZDauyQcHIjhT9K4pxfgj0wdAP8c46
1gD/eWLIeTHmEnHqMhlciFECi0Lo+7v0ATT9UESsrTqzItWZphSc4NsLDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG505CdYjmIsoQD+aHEsdVIRrJB/MB8GA1UdIwQY
MBaAFAXWWFlLZTZLLC5WpqReuwaEezhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRaWVdVdGxOa3NzTGxhbXBGNjdCb1I3T0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUt
N2JmZGE2MjU0NGNlLzEvYm5Ua0oxaU9ZaXloQVA1b2NTeDFVaEdza0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUtN2JmZGE2MjU0NGNl
LzEvQmRaWVdVdGxOa3NzTGxhbXBGNjdCb1I3T0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUOUMA0G
CSqGSIb3DQEBCwUAA4IBAQDSK5kkW3AtApxgLRe5HlZYKXnwT8eZ5hEvZHEBiz84
i1lvyE4xNo+sPXexuZO7/iIjm4CbEOU9RIq/PvDhrb8EC25g5G1oVKGN32IgLaV5
LmISLvtg2K5eCS9zgoXg32tVC9R6dMDDlZyoxrPN8tM9QbJ07diSWA9Spp1CrVZQ
VKBleBctF/FrHButiPk7uPMbke8UYfFwysvD9KTeYZdIYSo2RhpCXCOs+JRVuYc6
1n0Y8QYzHyOM5DxpKWz1y3L3ADRq2xT6MYMAZuN/QyWb9OGlePkZ/j7fqTOhuSTC
tq/8gaMlPbe6oTzxbRLJjV9wsoWUyV6JddMmtihGzGpf
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:35:55 2025 by rpki-client