Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/BxCrfrb8MepjOUn66ABB5pXZXGY.roa
File: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (raw, json)
Hash identifier: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=
Subject key identifier: 07:10:AB:7E:B6:FC:31:EA:63:39:49:FA:E8:00:41:E6:95:D9:5C:66
Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial: 019425215654E85472CFFB59330F7A318492
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/BxCrfrb8MepjOUn66ABB5pXZXGY.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42324
IP address blocks: 194.0.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:56:54:e8:54:72:cf:fb:59:33:0f:7a:31:84:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0710ab7eb6fc31ea633949fae80041e695d95c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:dd:15:e0:26:9f:3b:5e:ff:3b:58:07:87:
1b:f4:a2:ff:d3:98:b5:98:c2:6b:5f:0e:fb:e6:b8:
4f:2a:66:25:b9:b7:b6:42:75:3e:f8:80:eb:15:da:
aa:f4:34:c3:ad:04:29:e7:ff:d8:3d:ee:11:3b:cc:
52:66:46:4c:2d:e4:26:f1:1f:3f:64:0e:ed:f9:0d:
a1:95:fb:d3:43:eb:5c:6f:a9:c4:5a:f4:d6:6a:4a:
92:91:5c:21:59:4d:12:c0:e3:42:1d:8d:22:3e:46:
90:d8:b2:bc:4b:11:f6:3b:68:54:50:4b:5a:00:5e:
0e:2a:93:a9:60:7f:9c:dc:9a:a5:7e:7d:66:ff:8e:
81:56:3f:4c:5a:e2:50:52:a8:5c:3f:a8:48:67:29:
35:7f:e8:9c:fc:f3:be:f6:c7:29:a0:27:66:e0:d8:
8d:a9:d3:3f:d2:49:7e:33:91:49:58:93:1a:ab:53:
6e:70:b4:e5:21:08:eb:14:dd:6f:77:62:ce:a5:78:
89:34:84:ac:ff:07:8a:61:26:52:0b:24:df:48:c2:
39:b5:44:b9:ca:30:65:86:13:21:fa:79:6f:88:18:
73:05:78:ca:4c:74:46:8a:4e:fa:7b:1c:88:8b:c9:
1f:a0:31:7b:ae:d3:24:2c:d5:ab:ea:b4:2b:7c:95:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:AB:7E:B6:FC:31:EA:63:39:49:FA:E8:00:41:E6:95:D9:5C:66
X509v3 Authority Key Identifier:
keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/BxCrfrb8MepjOUn66ABB5pXZXGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
34:10:28:73:ee:47:ef:c0:e4:64:19:28:a3:2e:68:87:43:de:
55:1e:6f:cb:2d:03:05:e9:6b:c3:be:d3:2f:61:b1:5c:52:ac:
12:1e:1c:7d:47:26:22:e0:c3:c2:e7:8b:71:6d:f6:63:75:e0:
35:17:0e:13:e6:9d:30:7d:3d:fe:9c:4e:ba:1a:f4:74:d1:37:
e6:32:f8:ee:cf:a6:fc:c0:e9:17:f4:ad:69:2a:43:fd:09:90:
88:58:42:d9:41:bd:45:e6:13:84:15:35:ee:cc:c8:f0:93:64:
6f:ea:0f:c8:54:80:c1:63:48:80:c7:1d:60:84:d9:da:d3:2f:
18:bc:e6:11:ed:60:22:cf:11:8b:ec:83:d5:38:f0:61:b7:ca:
35:70:f3:d1:e5:d9:cd:ce:11:0f:0d:8c:98:c9:2c:45:a9:f8:
03:42:ca:2e:26:d8:46:d5:74:25:e0:50:ab:40:81:ca:4d:35:
dc:7b:4f:52:ad:0f:f0:af:f0:cd:fe:7b:ea:10:25:0a:80:08:
ab:35:c5:84:17:e3:0a:3d:e9:2c:5b:e2:22:ce:ac:9d:2f:19:
e2:dd:1b:63:d9:0c:7e:37:9e:ee:2b:b3:2d:05:3b:e6:cc:e4:
57:b7:12:09:f5:9a:68:aa:0f:d0:4a:5a:c1:4c:6a:83:b5:f4:
85:59:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:38 2025 by rpki-client