Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/kVsLk-GwVR6PxNcCkI01AGuQido.roa
File: kVsLk-GwVR6PxNcCkI01AGuQido.roa (raw, json)
Hash identifier: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=
Subject key identifier: 91:5B:0B:93:E1:B0:55:1E:8F:C4:D7:02:90:8D:35:00:6B:90:89:DA
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 019421B2026A9E0E3D5FA17800931D344F35
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/kVsLk-GwVR6PxNcCkI01AGuQido.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29686
IP address blocks: 194.0.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:02:6a:9e:0e:3d:5f:a1:78:00:93:1d:34:4f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=915b0b93e1b0551e8fc4d702908d35006b9089da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:19:96:c4:10:a2:d1:27:3e:69:33:e0:44:
cd:9b:e3:84:6d:f6:f9:31:71:93:c5:b3:a6:42:c4:
9a:bc:f5:58:44:7d:ca:d4:92:7f:86:08:07:19:84:
e9:9d:d1:d3:b0:0e:ef:54:c5:4f:e7:36:ae:28:1b:
70:ed:d0:63:93:05:50:3a:ed:b4:b1:42:f1:b3:68:
a6:a1:47:ae:fe:6c:09:35:38:e1:48:21:b2:c5:d5:
e4:75:8b:22:90:a3:09:0b:1a:ec:5b:7a:02:48:89:
6b:b7:01:f8:8a:b1:23:64:30:bc:e9:61:50:8d:b1:
e8:be:0d:2f:a0:84:f3:d6:14:6f:ad:8e:84:9f:ec:
4c:8e:e5:cb:6d:b2:8a:3e:ed:ea:38:61:bf:d2:5a:
64:28:17:99:7a:5b:3a:90:48:18:c8:89:5f:3e:8d:
c2:2e:c2:44:f5:79:83:83:50:41:a5:57:0b:e3:79:
99:e3:12:ea:d3:f3:9b:eb:42:1a:91:d2:e9:d9:c5:
ca:33:3c:99:18:1d:09:4e:5c:59:28:e7:6c:62:c3:
5d:99:f2:79:5d:0b:8e:ee:e1:50:1b:fc:4c:74:4c:
99:69:40:19:af:ef:e4:00:15:dd:49:df:9d:cb:32:
a7:7b:dd:5f:27:84:22:26:f7:29:0c:60:29:e6:1c:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:0B:93:E1:B0:55:1E:8F:C4:D7:02:90:8D:35:00:6B:90:89:DA
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/kVsLk-GwVR6PxNcCkI01AGuQido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.208.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c0:ca:a3:9b:38:90:3a:a0:9c:f7:65:42:06:3b:5d:de:b7:
0f:29:de:ba:05:16:55:89:f2:c9:f0:39:09:9a:a0:e5:df:28:
71:ea:a7:d1:69:ba:9a:e8:56:eb:af:b6:2a:08:35:69:01:07:
f7:7a:ca:d7:1b:aa:b6:83:ec:a4:3e:95:33:82:40:41:91:a3:
0b:14:82:1d:ad:49:be:02:82:a6:fc:60:85:e9:78:2b:cb:3b:
63:c9:94:3d:ef:f2:eb:23:0d:f1:88:59:f1:a3:2e:f3:07:c7:
39:e0:96:1b:10:50:bd:e8:fe:8c:48:7f:bc:d7:33:dd:8d:3d:
13:88:6b:49:1c:c4:ee:03:52:63:4f:cf:dd:a9:f1:f0:cb:cb:
27:62:d2:f6:17:1a:d9:d0:c8:8a:2e:0b:94:f5:a7:b8:58:05:
25:13:c5:2f:89:05:c1:25:f3:e6:0f:4d:86:34:17:ff:a7:30:
16:a5:cd:8c:35:7a:d8:a0:11:bf:8c:c0:d2:ff:59:71:cd:1c:
37:c0:26:00:6b:c6:76:d1:c8:0d:94:00:80:6a:03:85:92:36:
6f:77:c1:1a:ea:15:4c:0a:ac:e0:6a:09:52:c4:4e:76:aa:76:
df:db:f8:db:5b:58:62:af:ea:40:54:2c:41:8b:f8:f3:c7:ff:
d5:e5:4f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:35 2025 by rpki-client