Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/BkoOf_uIORKFRdieYZeXGcLC6dQ.roa
File: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (raw, json)
Hash identifier: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=
Subject key identifier: 06:4A:0E:7F:FB:88:39:12:85:45:D8:9E:61:97:97:19:C2:C2:E9:D4
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019421446202DC79C1EA9267F876EE42810B
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/BkoOf_uIORKFRdieYZeXGcLC6dQ.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 185.145.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:62:02:dc:79:c1:ea:92:67:f8:76:ee:42:81:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064a0e7ffb8839128545d89e61979719c2c2e9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:bf:02:ae:ad:f3:54:bb:18:dd:f3:10:c8:
16:38:16:21:b0:65:f8:27:f2:b2:83:7c:65:e2:b9:
8b:22:30:5a:0c:1a:83:66:46:93:1c:6c:eb:60:dd:
71:25:69:cb:2b:24:2a:fa:5a:33:c3:d2:6c:44:7a:
ba:2f:54:4d:51:5b:e9:5c:44:cc:c5:f8:39:bb:d7:
49:f5:09:61:0b:d7:3a:f4:17:81:09:4c:f4:95:d3:
af:ad:bf:34:03:2b:dd:96:ef:e3:26:ae:2a:2e:50:
87:b4:88:1e:04:26:0b:58:65:5b:ff:78:c6:b5:f5:
ac:93:8d:26:7e:8a:4e:8f:ab:7b:f7:c9:66:96:08:
6d:24:2b:b0:82:67:d1:b5:ac:38:d5:72:1d:89:a0:
f9:3c:0a:6e:96:cb:4b:7c:01:eb:76:5a:7f:28:36:
16:b9:ba:4c:cc:6f:7d:94:77:5d:fa:a2:42:03:1c:
7f:d1:9b:bd:f8:88:a3:24:d9:d1:44:88:90:bb:f0:
0d:9f:f8:da:c1:de:94:c0:7a:f8:1c:96:3e:d1:6d:
89:a2:95:d3:bb:4a:fa:68:7e:60:b2:b2:74:a4:b0:
11:79:da:15:79:41:01:0e:8e:e2:f7:c6:64:ac:3e:
d2:d5:07:cc:41:59:72:f0:34:4d:92:9e:58:e0:6e:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:0E:7F:FB:88:39:12:85:45:D8:9E:61:97:97:19:C2:C2:E9:D4
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/BkoOf_uIORKFRdieYZeXGcLC6dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.3.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9a:c0:86:e0:23:87:98:0a:47:2d:74:dc:3a:f4:5f:d4:92:
16:f6:11:9d:86:27:ff:52:a4:e2:ea:27:cf:9a:2b:38:b0:01:
7f:74:54:50:ff:d8:47:3b:6d:a3:d5:8f:6a:76:15:f6:fc:16:
ab:06:e5:f2:f6:fa:f9:4b:00:38:a0:ba:48:9d:0d:ea:21:f7:
c6:48:e3:4f:46:ff:a2:3a:05:ec:72:68:40:78:d3:56:f6:33:
90:19:b8:ac:d3:66:96:8f:40:6e:e1:35:36:cd:a7:3d:5b:ff:
d3:b1:cd:99:03:e1:61:02:be:48:1f:96:e3:74:17:42:d2:8f:
e2:d2:17:1d:55:33:ff:14:0c:31:49:49:dc:a1:aa:f8:64:f3:
4c:4b:e0:94:73:83:4c:24:e4:20:ab:a3:5a:fe:32:b0:cc:eb:
53:3d:f4:b9:fd:5a:1b:f0:fb:ff:57:5d:f3:65:5f:f6:20:98:
41:b0:9a:0b:97:f6:bd:a9:ab:2d:23:1b:91:ce:e8:fa:a6:77:
7a:29:08:4c:c8:09:3a:13:26:ad:8c:ab:90:f7:4a:59:c9:e4:
c7:51:fc:50:82:6c:b5:8e:9a:44:d3:cc:1a:5c:2b:f5:14:fe:
3c:6e:71:4e:9a:48:f1:b9:26:b0:74:e6:ac:e0:10:a7:da:2d:
01:95:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:25 2025 by rpki-client