Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa
File: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (raw, json)
Hash identifier: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=
Subject key identifier: 04:3B:81:F5:37:72:D5:B9:1D:1E:28:8A:6C:22:C6:38:B5:E1:2E:03
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019422FC344F7CAFC027E0CAC5B4316AC088
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50300
IP address blocks: 92.118.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:4f:7c:af:c0:27:e0:ca:c5:b4:31:6a:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043b81f53772d5b91d1e288a6c22c638b5e12e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:26:7a:ca:cf:c9:8c:cf:78:fb:72:66:99:
cf:d6:e9:5e:28:f5:3a:67:8a:b9:35:a3:49:0b:d7:
3f:9f:16:e1:23:46:04:aa:c1:8f:56:37:2c:a6:fe:
86:f5:c2:62:6f:f1:15:f7:2a:34:0f:f7:cd:cd:c8:
cc:27:d2:14:16:a4:e5:b8:95:96:15:2c:60:8a:e5:
a2:a7:02:f6:73:97:67:f0:e6:5b:c4:a3:4d:84:d5:
49:d8:5b:81:69:e7:fa:79:90:2c:11:57:07:29:4c:
32:06:c1:b7:98:03:6e:f5:a6:7b:17:10:a8:5f:33:
7c:ff:69:ae:32:b7:44:ad:41:30:c5:63:cf:39:5b:
5c:99:7d:f4:2c:6c:bd:dd:cb:cf:95:0a:63:b9:33:
3c:34:bb:43:15:3b:d9:89:a1:53:19:76:c5:ef:26:
7c:df:10:0f:7b:a3:f2:d1:f2:b6:86:3f:c5:22:c6:
ba:1b:ff:a2:3f:40:c3:9f:cd:a3:a8:cd:dc:8e:11:
5d:5e:9c:08:ab:28:84:52:71:28:08:e5:0c:3d:ba:
85:e0:9b:da:03:3e:bf:cf:91:cd:33:11:81:29:df:
fe:e8:e7:01:00:e7:dc:a2:46:1f:52:f0:4a:26:1a:
c4:91:9a:bd:52:f6:72:ed:21:94:41:35:7c:fe:d2:
70:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:81:F5:37:72:D5:B9:1D:1E:28:8A:6C:22:C6:38:B5:E1:2E:03
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c1:11:59:fe:59:64:d6:78:dc:fe:f8:2c:f2:a5:08:d4:41:
98:cb:87:ba:cc:dc:e2:21:fe:58:5d:21:cf:4d:cc:32:5b:d2:
40:1b:33:61:f8:3c:45:14:a1:7d:83:45:a5:5e:01:dd:7f:20:
de:75:36:af:ae:c7:86:2c:83:06:b4:96:a7:c9:a3:e2:32:c4:
a3:af:88:cf:17:01:71:81:7a:6c:eb:30:73:8e:34:1b:41:14:
cd:32:b7:ce:e2:cd:52:ce:42:6f:ab:95:5e:2f:05:10:1c:6a:
e9:89:c9:f2:4c:fe:cf:94:03:6d:65:02:78:8d:e9:90:9f:64:
f9:42:61:79:ef:bf:18:ac:10:60:8c:b4:3b:f2:2a:82:8a:2e:
1e:16:dd:bf:a3:eb:fc:6f:97:ec:8b:4e:57:28:5d:16:5f:a0:
56:98:61:54:c7:63:ca:48:7b:02:33:d0:ce:f5:9e:fa:5b:e6:
41:d1:0e:e1:55:b0:46:cf:1f:a5:69:db:6c:76:e4:1d:68:7d:
ab:49:72:dd:2d:f7:09:be:7e:cd:77:26:52:b9:9f:04:ba:09:
b0:2d:79:27:78:0a:f1:59:25:fc:72:98:61:01:92:61:bd:0c:
49:d5:ca:48:0d:8e:a2:49:d7:e4:59:38:6c:bd:b7:30:21:3b:
4c:79:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:05 2025 by rpki-client