Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/k228-bewHScQpnRNpC4KIJkr3eY.roa
File: k228-bewHScQpnRNpC4KIJkr3eY.roa (raw, json)
Hash identifier: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=
Subject key identifier: 93:6D:BC:F9:B7:B0:1D:27:10:A6:74:4D:A4:2E:0A:20:99:2B:DD:E6
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 0194CC5DB54800F5F2909917B544B7D5F75D
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/k228-bewHScQpnRNpC4KIJkr3eY.roa
Signing time: Mon 03 Feb 2025 15:11:20 +0000
ROA not before: Mon 03 Feb 2025 15:11:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 77.74.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:5d:b5:48:00:f5:f2:90:99:17:b5:44:b7:d5:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Feb 3 15:11:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=936dbcf9b7b01d2710a6744da42e0a20992bdde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:e0:c4:f7:e2:00:bb:fe:16:4c:bb:27:3c:
e3:e1:b4:35:c1:1b:dd:03:29:6f:a3:14:05:15:ce:
79:f1:3d:52:55:71:7e:c6:93:7f:22:80:19:52:9e:
0b:c7:e6:f2:7c:91:1e:18:8c:80:d9:1a:92:fd:1e:
16:00:88:ac:65:dd:e2:e1:0e:c8:87:ff:4d:b4:26:
8b:a2:73:27:3d:71:ed:7b:c0:9f:a0:34:ac:02:85:
16:a0:b5:1c:76:99:5f:8d:51:13:ab:66:e4:6d:0a:
32:b9:0f:b0:44:7c:7b:ae:b2:66:e7:94:15:85:1a:
69:56:f3:a0:4e:1d:17:2d:87:e1:ec:68:c3:33:f9:
5b:f3:58:b0:b5:23:15:8f:bc:5e:da:df:38:01:39:
27:e5:f1:c9:61:94:42:c5:eb:aa:54:ba:4d:b0:75:
22:0a:da:a5:fe:8e:20:95:b1:6c:5c:e7:f7:6f:ea:
08:2a:ba:52:68:b3:07:69:3e:81:b9:21:9e:0a:8a:
ae:ad:01:d0:71:97:7c:e1:3a:72:83:b7:a1:d7:d5:
33:30:f4:1a:61:c2:89:46:b2:77:51:d0:07:02:57:
01:11:7e:45:5a:68:a7:69:ff:67:82:fd:5f:87:a0:
48:ab:17:30:48:51:f9:3e:ee:d7:52:46:04:b8:bb:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:BC:F9:B7:B0:1D:27:10:A6:74:4D:A4:2E:0A:20:99:2B:DD:E6
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/k228-bewHScQpnRNpC4KIJkr3eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.158.0/23
Signature Algorithm: sha256WithRSAEncryption
90:15:d4:6c:e8:0d:eb:6f:4f:79:d4:d5:21:0a:63:96:ec:1a:
d1:01:32:10:46:a7:cc:f8:ee:83:ac:fa:0e:72:a9:7c:64:df:
a3:57:05:9f:27:af:e6:42:05:47:12:2c:53:05:af:c6:e3:60:
17:db:c1:39:74:d5:cb:93:f2:e9:9f:e7:19:70:c4:a6:c5:c6:
7a:78:3a:4f:a4:ec:cd:1b:24:a0:a8:ca:33:0b:4b:f4:cf:15:
56:3e:c7:be:4d:69:5a:a2:5d:19:42:c6:bf:c6:79:e2:db:50:
c2:49:b4:97:a5:f5:99:d9:ef:f1:51:ef:09:c4:2c:b0:4f:62:
38:4a:32:67:0e:56:f6:99:d4:65:75:8e:de:df:bb:ef:c4:28:
68:22:27:31:8b:08:00:92:db:24:c5:24:bb:6b:ec:4b:8c:7d:
f3:f3:bf:c4:aa:81:8b:ef:f1:51:af:2b:4f:bf:14:f4:76:a9:
a8:c0:61:71:24:3f:7f:d0:71:ac:a2:45:e9:d6:ca:f8:ea:40:
e2:98:e8:55:8d:26:11:78:ab:9d:f6:18:a9:fd:19:eb:20:a7:
79:c5:83:cf:dc:23:30:b9:e0:3a:e0:35:79:85:c4:92:89:53:
82:47:30:50:e2:f1:45:ac:bd:27:d5:d5:da:6d:9f:69:7d:fa:
d7:51:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:19 2025 by rpki-client