Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Bk5EEDboiWzloYLSbIprmQyOumI.roa
File: Bk5EEDboiWzloYLSbIprmQyOumI.roa (raw, json)
Hash identifier: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=
Subject key identifier: 06:4E:44:10:36:E8:89:6C:E5:A1:82:D2:6C:8A:6B:99:0C:8E:BA:62
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 0194266BEC63569122797EB26E806143EBCB
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Bk5EEDboiWzloYLSbIprmQyOumI.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30880
IP address blocks: 194.236.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ec:63:56:91:22:79:7e:b2:6e:80:61:43:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=064e441036e8896ce5a182d26c8a6b990c8eba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:6c:c1:c1:dd:77:b9:cd:f4:40:50:66:d6:
ec:7e:ab:e3:36:a7:df:26:63:ad:c7:86:67:ee:80:
c4:ce:dd:53:86:0d:a6:63:12:a1:a6:d3:c1:2b:fc:
70:83:d7:8b:bb:4d:40:73:06:3e:a6:b3:53:1f:74:
17:c3:2c:ff:b6:b1:7f:65:2d:d7:34:a7:b6:f5:78:
4c:ab:90:1b:18:35:03:32:11:8d:83:40:85:11:6a:
d4:60:c7:e0:16:bc:88:3f:5d:64:1b:6e:2b:57:b0:
18:0f:ef:60:11:ad:fa:a0:45:a8:36:89:10:e5:5c:
2d:76:13:52:b6:f7:de:dc:86:04:16:16:55:94:5f:
93:17:b8:6c:50:f1:1e:47:dd:9f:3c:f4:de:a4:d4:
07:25:73:48:70:ff:64:27:a5:bf:42:81:ff:88:55:
86:e1:2a:ea:0b:4d:e0:86:87:9a:a7:ca:60:70:1c:
18:33:7a:19:62:b1:0a:83:d7:6b:a2:f2:ad:80:bd:
e9:6a:16:e0:b3:9c:6f:f1:31:7a:05:d3:1b:9b:79:
cf:56:a9:4a:0a:56:0d:86:e4:d8:3b:6f:2d:bf:e1:
27:50:f4:a4:b2:d4:f5:b0:27:78:e9:fc:80:0f:4c:
ad:0e:99:0b:2c:2a:59:ec:2c:77:70:83:e8:4b:8e:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:44:10:36:E8:89:6C:E5:A1:82:D2:6C:8A:6B:99:0C:8E:BA:62
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/Bk5EEDboiWzloYLSbIprmQyOumI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.236.124.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:2c:eb:20:9f:41:f6:60:fd:a0:7f:9d:01:f3:39:4c:19:b5:
a3:fe:14:c5:a6:87:13:1c:84:b1:12:a4:99:b4:3c:9f:64:69:
e2:19:eb:28:f8:35:01:00:27:45:66:b8:26:31:86:f9:9c:41:
12:39:1d:ba:5d:80:07:da:13:1a:c2:83:03:03:7b:0c:97:72:
95:76:35:8f:3b:8d:bb:bb:11:ee:fe:30:42:6a:c6:a3:a1:0a:
00:e4:9e:2d:c6:35:43:14:97:2b:bd:95:70:e9:ad:f9:c1:48:
f8:f2:77:e3:3a:09:d6:12:b3:32:e7:7a:31:5b:ad:08:eb:7d:
c4:43:38:2a:b1:ae:c7:06:aa:da:67:27:93:cd:4e:56:f5:1c:
5b:15:36:c7:70:23:07:42:94:cd:42:ff:fb:25:35:ed:b9:34:
bc:f2:08:b3:b7:8f:57:e9:ba:09:ac:d3:fd:0f:22:8b:84:ae:
43:bf:0d:29:42:8d:d7:11:d2:fe:43:73:1b:97:d3:19:b3:00:
d7:b0:14:4e:af:fb:88:83:b0:b6:a0:5b:2a:8d:ef:ac:71:f6:
97:dc:e8:74:69:d9:02:ad:ef:7a:bf:e6:e9:ce:ad:10:52:43:
be:b1:b2:a7:1c:9f:cb:70:07:85:0b:be:fb:04:46:5e:7c:d2:
8b:4d:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:42 2025 by rpki-client