Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/BP0phasRWtGjX2RLC6Bm9ntdm00.roa
File: BP0phasRWtGjX2RLC6Bm9ntdm00.roa (raw, json)
Hash identifier: vrTVFa1+yEVVA9IPNx4Zy5sL63Mn2TuWL6xhIUF75CQ=
Subject key identifier: 04:FD:29:85:AB:11:5A:D1:A3:5F:64:4B:0B:A0:66:F6:7B:5D:9B:4D
Certificate issuer: /CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Certificate serial: 018CC94DDEFC2033DA3F2082BE6281836475
Authority key identifier: D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/BP0phasRWtGjX2RLC6Bm9ntdm00.roa
Signing time: Tue 02 Jan 2024 08:32:52 +0000
ROA not before: Tue 02 Jan 2024 08:32:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 185.248.224.0/24 maxlen: 24
185.248.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:de:fc:20:33:da:3f:20:82:be:62:81:83:64:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d557f65aa23dbacea5b1cf833a63482ef3e43057
Validity
Not Before: Jan 2 08:32:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04fd2985ab115ad1a35f644b0ba066f67b5d9b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:ea:33:e9:28:0b:e0:f5:35:40:09:72:07:
a0:f3:b5:f9:ee:56:b4:e2:11:d9:68:89:ed:4e:35:
41:e4:44:f8:5d:4f:08:f3:1a:d3:c5:b6:57:8b:60:
f2:31:e2:ff:8c:fc:21:28:53:4f:23:03:e1:bb:03:
17:77:1a:e6:fc:b8:2b:e0:f8:8c:1e:6f:8a:ad:46:
6d:70:db:27:b1:de:5c:a3:41:94:a1:3a:d0:72:4e:
72:d0:7d:26:e6:b7:7e:9f:87:ff:78:bf:54:3e:df:
58:67:21:bb:f1:85:c1:e9:ca:92:2f:ff:4a:8c:44:
46:93:f1:66:9f:0b:a6:68:bd:01:a1:0c:61:08:de:
3f:a5:55:84:d1:b6:5e:2f:9e:5c:6f:ce:10:0d:e4:
29:df:5a:8f:8e:99:5c:9e:a7:b8:fc:01:e5:04:1a:
b7:db:b9:0b:50:42:0c:8e:fa:bd:97:99:0c:51:12:
6e:3d:69:03:7b:80:86:ca:74:52:2e:13:37:3a:44:
46:9f:7d:7d:91:a3:50:97:77:a2:af:de:07:6d:bd:
29:24:f3:b4:6a:5c:87:c1:c2:29:47:f5:c2:97:97:
ae:07:2c:fa:e7:67:64:a9:65:9a:98:04:1c:07:dd:
6c:0b:b6:57:d3:2e:6d:2c:7c:82:e2:50:62:d1:fe:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:29:85:AB:11:5A:D1:A3:5F:64:4B:0B:A0:66:F6:7B:5D:9B:4D
X509v3 Authority Key Identifier:
keyid:D5:57:F6:5A:A2:3D:BA:CE:A5:B1:CF:83:3A:63:48:2E:F3:E4:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Vf2WqI9us6lsc-DOmNILvPkMFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/BP0phasRWtGjX2RLC6Bm9ntdm00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7951b5-9cb6-4535-95c6-63c52e92c47e/1/1Vf2WqI9us6lsc-DOmNILvPkMFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.224.0/23
Signature Algorithm: sha256WithRSAEncryption
46:3c:d6:74:58:e7:14:82:83:ae:cd:d9:5f:76:c9:f0:29:80:
b1:9b:90:75:15:9a:4c:76:de:fa:78:39:06:b5:c1:cb:5d:5f:
ad:3e:42:64:66:e4:92:8b:cf:fc:3b:94:71:c7:a0:72:e0:a4:
98:e5:64:f1:91:79:74:ae:98:f0:7d:72:e0:ca:1f:3a:6d:65:
29:15:bb:6c:63:49:33:38:31:81:e6:bd:1b:77:ed:1c:e0:9b:
bd:91:6b:5f:1e:07:ea:ad:90:18:0f:6d:c0:3b:2b:69:06:3c:
9f:e8:3c:c0:b4:3f:dc:5d:37:15:91:12:13:6b:ea:53:00:0b:
c9:2d:35:6e:d6:72:fc:33:0b:7b:9a:a3:18:2c:f4:b3:78:4b:
11:0c:bd:68:48:15:52:a2:a4:8e:b3:97:91:a9:13:f1:7f:b4:
60:68:c8:78:85:89:2a:50:82:71:72:ac:a3:de:40:4b:eb:2a:
69:20:9f:8e:46:9e:0b:04:1a:51:1c:74:0e:e8:68:3c:12:36:
23:3d:5e:29:4c:d9:f8:d8:19:a4:e0:bd:fb:13:81:46:2c:53:
ba:3f:b2:82:11:7b:95:c9:05:e3:ea:79:f7:29:27:c8:5e:d1:
12:a4:06:89:26:e9:e4:51:5c:88:f7:5f:77:d1:88:36:da:3a:
77:31:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:22 2025 by rpki-client