Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/tBAS_FoKGxR_Af3dujh8natBvBA.roa
File: tBAS_FoKGxR_Af3dujh8natBvBA.roa (raw, json)
Hash identifier: 0z0RHNnmoAVXEutoHkv/7S0eNmF8+K+BsjIqU/LIS4E=
Subject key identifier: B4:10:12:FC:5A:0A:1B:14:7F:01:FD:DD:BA:38:7C:9D:AB:41:BC:10
Certificate issuer: /CN=b98b79836afe75370a680bb136c1b99bc88d4519
Certificate serial: 01826D4439817371E5AD41230505A79241AB
Authority key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/tBAS_FoKGxR_Af3dujh8natBvBA.roa
Signing time: Fri 05 Aug 2022 09:09:23 +0000
ROA not before: Fri 05 Aug 2022 09:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 195.191.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:44:39:81:73:71:e5:ad:41:23:05:05:a7:92:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Validity
Not Before: Aug 5 09:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b41012fc5a0a1b147f01fdddba387c9dab41bc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:40:a4:c0:38:a8:f7:71:28:ff:b4:b4:a7:
72:7b:a4:7f:9c:64:7c:d0:76:81:e2:d1:33:f8:76:
03:33:3b:d4:b7:e2:00:d7:fd:f0:a9:84:33:ee:e4:
6c:e1:e8:83:50:50:16:57:d1:4b:61:4d:63:1d:34:
c6:c8:f5:c8:72:ee:ed:d4:7d:9c:71:09:ab:c9:eb:
42:60:88:93:17:3b:b8:31:c2:bc:ea:b0:4b:d5:8b:
e7:40:15:80:61:51:90:85:70:cb:ba:65:d1:17:17:
f3:24:8a:47:2f:06:87:c3:3e:30:ff:5d:d6:d9:8c:
4b:81:eb:ae:88:43:cd:0e:c3:73:26:aa:6d:0c:af:
1b:20:fc:73:1a:7b:39:1f:62:c1:c9:5b:43:ef:90:
bc:e6:04:11:95:97:d1:bf:6d:26:24:5e:4b:c3:c4:
c6:6b:f6:c8:72:2a:b0:82:d0:29:29:c0:cc:62:e3:
b0:17:40:a0:f5:cf:56:6b:a5:e4:6e:cc:6f:2b:2c:
bc:0d:a1:81:e3:2c:8e:a3:c0:00:16:f4:e7:92:38:
d4:94:38:d5:15:a7:ed:c1:f4:f6:4c:e7:2c:84:77:
e5:e3:bd:06:17:a9:20:a1:a1:a5:63:d3:d2:3c:19:
ad:30:a5:ab:7d:ba:b8:a5:64:63:15:5f:cc:5c:b0:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:12:FC:5A:0A:1B:14:7F:01:FD:DD:BA:38:7C:9D:AB:41:BC:10
X509v3 Authority Key Identifier:
keyid:B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/tBAS_FoKGxR_Af3dujh8natBvBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ec:c3:2f:66:75:68:eb:bd:25:25:40:eb:63:90:47:0b:62:
5a:7f:75:5c:1b:11:42:37:6f:26:55:4b:8e:85:d7:1e:d3:53:
a4:5e:09:57:10:80:29:52:a5:73:29:73:5d:c6:8d:3d:9e:0e:
da:b4:77:13:78:85:b3:40:c2:bb:3b:10:91:23:14:49:a6:f4:
cf:4b:89:0d:4a:b7:94:e5:b8:dc:2b:63:00:32:b2:50:84:08:
15:37:91:a2:b8:83:80:43:9d:1e:2e:c3:b5:fa:d8:7b:6b:b7:
9a:c8:2e:77:2e:80:69:76:ae:bc:2d:b4:8f:84:db:e7:1a:14:
44:16:21:37:e9:de:7a:f9:fb:3d:6a:eb:83:74:71:5b:50:f6:
38:10:9b:a1:40:e1:89:b4:62:5b:da:bf:af:27:b1:c9:b2:8e:
fc:a9:62:e5:4d:76:fe:28:fa:05:74:f2:90:34:4e:65:51:e2:
6c:dc:ec:aa:61:7d:f0:87:e0:4d:fa:30:d3:95:cc:f2:25:6f:
72:b4:b8:6a:94:e5:e1:3e:d9:5f:2e:fd:d1:17:b5:52:76:98:
43:55:e9:e6:74:f8:c1:ad:4b:a5:4e:50:49:22:97:11:f8:d5:
8c:01:3e:43:aa:58:4b:61:97:80:bb:fc:16:db:7b:66:73:99:
01:92:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:29 2025 by rpki-client