Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/bjFNuvRZLnVPhxbqDpaNVvasSyc.roa
File: bjFNuvRZLnVPhxbqDpaNVvasSyc.roa (raw, json)
Hash identifier: Or9p+aN5TKflixXpvac1BP39grelci5lle0PuJ0UsF8=
Subject key identifier: 6E:31:4D:BA:F4:59:2E:75:4F:87:16:EA:0E:96:8D:56:F6:AC:4B:27
Certificate issuer: /CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Certificate serial: 019426D908B5FB0B2F2FD2958C7FEE0639EB
Authority key identifier: B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/bjFNuvRZLnVPhxbqDpaNVvasSyc.roa
Signing time: Thu 02 Jan 2025 11:49:05 +0000
ROA not before: Thu 02 Jan 2025 11:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203904
IP address blocks: 185.118.44.0/24 maxlen: 24
185.118.45.0/24 maxlen: 24
185.118.46.0/24 maxlen: 24
185.118.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:08:b5:fb:0b:2f:2f:d2:95:8c:7f:ee:06:39:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfb0fc298965476bc10f58792bf286c14d9ff1
Validity
Not Before: Jan 2 11:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e314dbaf4592e754f8716ea0e968d56f6ac4b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:2b:97:35:9e:83:ab:15:48:82:35:24:a2:
d9:2b:7b:1f:c4:bf:7e:3f:af:9b:56:b6:29:11:fa:
a2:b5:ba:24:76:a5:3f:a5:89:73:05:74:06:af:bb:
ce:1d:d9:da:c5:16:a8:14:e6:28:f7:f1:0f:6b:73:
77:cc:fd:5b:1f:11:b6:be:2d:91:d7:da:0f:39:47:
ee:8b:e7:fa:b1:74:af:17:58:0a:54:2a:e0:46:41:
aa:81:4c:d9:6e:db:9d:51:d4:68:a9:bb:d1:cd:5b:
93:b5:33:6b:fa:b3:e4:ee:d1:68:8d:a9:e9:03:05:
c2:0f:1b:84:98:10:c9:0b:7c:3d:7f:50:dc:32:48:
e3:56:93:3d:22:66:af:63:93:62:5c:48:f9:12:b5:
13:a0:e0:bf:af:a4:ae:51:c7:6d:6d:5d:ab:7b:eb:
c9:96:09:ff:82:14:0c:13:98:0a:ad:1a:dc:8c:2a:
40:87:62:d8:f4:e9:81:22:f3:53:01:15:24:11:6b:
4d:77:93:ce:0b:67:df:ae:15:ac:78:ff:b0:7f:55:
e8:0b:5a:a6:20:50:37:bc:e0:4f:6e:4a:f1:f1:22:
41:45:45:89:f0:1d:b2:fc:ac:41:b6:3a:d9:58:d1:
e3:a4:4c:84:3a:ba:29:8f:05:7a:c7:a8:d5:76:9c:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:31:4D:BA:F4:59:2E:75:4F:87:16:EA:0E:96:8D:56:F6:AC:4B:27
X509v3 Authority Key Identifier:
keyid:B0:BF:B0:FC:29:89:65:47:6B:C1:0F:58:79:2B:F2:86:C1:4D:9F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/bjFNuvRZLnVPhxbqDpaNVvasSyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7e67d0-ecb7-4c66-99b8-85b0e7478856/1/sL-w_CmJZUdrwQ9YeSvyhsFNn_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:58:a2:6a:90:e4:00:e1:ce:f5:3b:76:95:2e:76:74:0c:bd:
91:61:27:08:80:87:a6:0b:22:3e:2d:49:0f:19:69:fb:c1:87:
19:a3:4b:83:8c:32:30:56:04:e0:e2:2f:9e:e7:75:d6:fb:e9:
cf:0b:b0:e5:3e:b4:af:f3:06:97:80:2f:42:37:2a:7c:ba:47:
a4:62:dc:46:d6:90:22:22:3e:16:00:c2:7c:84:ba:e4:fe:25:
18:84:0f:0c:24:8d:a7:cf:ed:1c:ae:52:02:e9:c6:a6:cc:04:
4b:cc:bc:c2:a1:d9:6c:88:29:1f:58:e4:d7:dc:37:ce:ea:4f:
51:ca:35:92:9e:5e:52:48:46:be:e2:10:e1:f1:ea:46:4c:53:
ed:88:d3:72:72:a5:6d:15:94:85:98:66:4b:9d:94:04:4a:2d:
3d:95:c5:d6:dd:7f:1b:6c:20:b5:54:f5:cc:1c:c9:56:8a:e9:
51:5c:45:59:ce:9e:6a:a7:10:6a:0a:79:32:de:e2:4b:70:65:
9a:94:3c:12:ab:55:b9:6e:3b:8f:8b:cf:d0:3a:dd:77:78:10:
6c:48:ec:4f:ef:8d:ba:f4:0b:19:16:f0:2c:32:51:ac:70:42:
09:38:b8:1e:c9:bc:3f:df:34:61:22:5f:13:21:75:1e:66:85:
97:01:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:23 2025 by rpki-client