Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/bHI4QTonk3m080h4RB4RhN5M5CM.roa
File: bHI4QTonk3m080h4RB4RhN5M5CM.roa (raw, json)
Hash identifier: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=
Subject key identifier: 6C:72:38:41:3A:27:93:79:B4:F3:48:78:44:1E:11:84:DE:4C:E4:23
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 019426D9DE24C76CB21F7F183E6CA7FB2FF8
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/bHI4QTonk3m080h4RB4RhN5M5CM.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207951
IP address blocks: 185.7.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:24:c7:6c:b2:1f:7f:18:3e:6c:a7:fb:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7238413a279379b4f34878441e1184de4ce423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:96:f6:1d:ed:71:bd:0d:8f:44:03:cd:1c:
a8:10:9c:19:31:83:0f:2a:0e:fe:a0:f8:4f:d6:b1:
49:4f:5d:51:e2:d1:40:f6:ac:f2:0c:5d:1c:32:18:
c1:8e:68:37:5c:10:1f:a7:db:7a:81:16:48:2b:4e:
59:2d:01:58:26:4f:bc:76:37:e4:4c:07:19:eb:e6:
02:62:3f:24:b5:14:d2:ee:45:41:be:6f:7e:3c:b6:
8f:88:e9:3d:ca:30:bf:f7:dd:c1:a7:e4:1b:07:38:
36:65:56:76:fe:65:96:d1:91:32:a7:6a:54:90:23:
40:85:c5:a3:50:46:fa:c6:a2:5a:37:b0:d9:8d:cb:
71:96:f0:ed:17:8a:5f:2c:b4:ef:bb:ce:da:84:f2:
1a:ce:94:3c:54:54:64:e1:1e:46:4c:17:47:35:32:
84:57:99:91:81:f5:78:29:21:f1:69:6d:6c:57:ab:
92:5f:9e:8b:63:70:0b:8d:0e:c6:16:e5:d3:47:50:
53:2d:f6:bd:0a:0f:a2:cc:c8:83:94:2f:9c:c0:52:
41:66:24:2f:8c:67:14:eb:80:a9:79:64:8d:e8:f7:
3a:66:9b:b6:e5:97:58:25:a0:b0:f6:12:d1:09:9b:
13:ce:27:d3:6d:0c:f2:b7:88:b5:2a:a3:7f:5e:7e:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:38:41:3A:27:93:79:B4:F3:48:78:44:1E:11:84:DE:4C:E4:23
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/bHI4QTonk3m080h4RB4RhN5M5CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f5:a2:8e:f0:a8:60:ba:c4:af:1f:4a:58:b9:cc:61:8e:95:
45:0b:a1:91:b3:aa:46:e6:e9:b1:20:f1:0a:46:dd:2d:68:f3:
46:78:56:f5:de:ee:07:5b:e0:21:d3:46:6b:fa:91:5b:13:e4:
83:85:74:cc:61:46:1f:f4:b4:c1:76:7d:c3:c1:b7:2b:2f:36:
8e:92:48:4a:9f:38:b8:d6:c9:52:53:c7:61:1c:70:10:1d:e3:
93:34:c8:91:89:02:0f:44:7c:00:9e:ad:67:c0:8e:6d:5d:4a:
5f:65:19:87:49:ce:64:45:d8:49:c9:9f:59:dc:28:30:79:35:
4c:34:93:e8:c3:7d:22:4b:1c:e5:45:e7:55:8a:53:1a:e3:5b:
21:9a:81:f2:ca:3e:b6:e2:cd:9f:0b:d9:1b:d3:81:61:77:b9:
43:67:a4:5a:30:d2:e6:09:41:16:f1:3f:78:9e:f5:91:24:df:
c1:df:7f:f2:92:8f:0c:5b:87:00:66:e7:6d:7f:c9:7f:63:22:
e3:ae:6c:9e:27:ff:e3:62:fa:33:d1:d6:9e:b2:a9:37:f0:30:
2c:07:8b:34:33:2c:69:70:bb:bf:dd:60:2d:52:f6:65:6e:33:
50:e1:0b:af:be:b6:a9:9f:21:fe:85:41:06:d9:e8:85:df:12:
af:c9:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:13 2025 by rpki-client