Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/bcB5okDaWmn7RMVidh8tdfFPgOY.roa
File: bcB5okDaWmn7RMVidh8tdfFPgOY.roa (raw, json)
Hash identifier: lSUSlQ1zSOJzm6h6u0LOaQA4U12mYOALordnaj8TYMs=
Subject key identifier: 6D:C0:79:A2:40:DA:5A:69:FB:44:C5:62:76:1F:2D:75:F1:4F:80:E6
Certificate issuer: /CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Certificate serial: 018820E18075C249E39FD58AB4B5326D1F80
Authority key identifier: 14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/bcB5okDaWmn7RMVidh8tdfFPgOY.roa
Signing time: Mon 15 May 2023 19:27:09 +0000
ROA not before: Mon 15 May 2023 19:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:e1:80:75:c2:49:e3:9f:d5:8a:b4:b5:32:6d:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Validity
Not Before: May 15 19:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dc079a240da5a69fb44c562761f2d75f14f80e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:a0:72:bc:26:e7:cf:24:0c:d8:39:8c:68:
76:29:fc:31:88:94:ce:44:e1:c1:2f:33:4e:c2:f1:
70:ff:e8:3a:78:e7:54:34:5b:35:1f:40:08:3a:53:
00:df:70:71:92:c3:d7:ed:16:7c:aa:e6:b7:b3:ba:
64:72:88:89:95:7f:6e:3f:73:7d:d4:39:68:7a:1d:
2a:61:f2:63:b8:d4:41:15:e0:ae:5b:3a:ce:dc:70:
d0:50:39:8d:5e:2b:2d:34:76:61:14:0d:89:00:39:
ca:67:49:e5:b6:3c:54:e8:77:23:1f:f8:ee:08:67:
9a:61:ba:04:da:39:da:cc:ea:5c:8d:d6:77:34:1c:
51:ab:09:d7:10:8c:50:fb:b4:68:0b:b8:9e:9d:f7:
67:5f:12:fc:1b:80:82:88:07:66:d3:a0:a5:91:42:
b3:cc:10:de:8b:69:bb:0a:3b:1a:1c:bb:ff:1e:26:
3e:d7:f6:6b:aa:ea:fd:17:e1:28:65:89:d8:89:5d:
e0:89:cf:d4:67:cf:51:11:32:7d:9c:8e:7a:b5:3f:
20:82:a3:f4:8b:1f:8d:8a:dd:e3:dd:6b:fd:ab:c7:
b2:c4:23:0e:e5:9d:60:14:68:c3:0b:a8:a0:9a:37:
fc:af:74:a1:a9:b7:4b:d3:83:0a:34:f4:4e:24:77:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:79:A2:40:DA:5A:69:FB:44:C5:62:76:1F:2D:75:F1:4F:80:E6
X509v3 Authority Key Identifier:
keyid:14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/bcB5okDaWmn7RMVidh8tdfFPgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:46:dd:30:73:d1:79:bc:94:dd:40:9b:86:32:11:4b:57:13:
5a:c3:4b:79:e9:53:25:ab:5b:34:0b:a9:39:a4:ab:25:96:0d:
92:ce:f2:bd:d6:94:4b:05:65:02:e8:f5:2b:6d:ef:74:f2:6e:
93:83:c2:cc:eb:d5:2a:8b:36:05:fa:a3:ae:b5:65:ee:b4:b3:
66:94:bd:86:b5:18:1d:e4:30:8f:6f:5b:f7:64:e6:eb:56:39:
c8:25:94:e0:7e:f6:98:89:ee:c4:c5:f0:8a:7c:38:7d:4c:2d:
ed:d7:98:c8:47:09:75:5a:45:3e:9f:9d:03:4b:e9:46:6c:fa:
4e:ce:b2:8b:b2:ce:dd:85:bf:e8:45:db:bc:5b:15:69:b8:85:
0e:77:ac:4b:12:e0:b7:d9:a2:24:63:2e:2f:70:50:31:ed:31:
03:22:f5:59:ef:13:f7:ab:a7:06:f1:0c:b5:4d:4f:d7:29:33:
b1:21:b6:7c:2e:a6:4b:b0:9f:8a:5e:8e:8d:71:31:97:35:6a:
d7:50:4f:4c:58:ea:5a:11:57:18:af:c6:6d:83:fb:69:59:f5:
b6:09:3e:76:8f:21:71:6a:dc:cf:07:d2:35:cb:2b:d1:29:42:
19:2f:73:82:b0:9d:02:8d:06:19:cf:39:39:1f:a8:8b:83:5b:
c2:ee:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:43 2025 by rpki-client