Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/BvOwPiqKuqus8t3oY2Oo_3T1PL8.roa
File: BvOwPiqKuqus8t3oY2Oo_3T1PL8.roa (raw, json)
Hash identifier: 8GxC/cxnsegCUuCOUEw6uBG3rZLCtl/31DyW/C2QuMo=
Subject key identifier: 06:F3:B0:3E:2A:8A:BA:AB:AC:F2:DD:E8:63:63:A8:FF:74:F5:3C:BF
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 018D0DF33C166CF042693B533CCCEDB2503E
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/BvOwPiqKuqus8t3oY2Oo_3T1PL8.roa
Signing time: Mon 15 Jan 2024 16:27:40 +0000
ROA not before: Mon 15 Jan 2024 16:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 217.28.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:f3:3c:16:6c:f0:42:69:3b:53:3c:cc:ed:b2:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Jan 15 16:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06f3b03e2a8abaabacf2dde86363a8ff74f53cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:5a:45:53:ca:18:37:c6:6a:67:a8:1f:0b:
bd:a1:05:2f:54:e3:f0:8a:cd:0f:3e:5b:2c:18:0e:
24:26:4c:00:07:75:e6:7a:82:c2:56:f2:e6:d6:a7:
b5:ca:92:cc:2b:fe:63:3c:d3:54:93:d8:ee:43:38:
de:75:b3:4b:b2:2d:ab:44:78:b4:72:ab:d4:2f:bd:
87:a0:11:d7:c2:29:66:31:df:8b:5d:cf:0a:f7:54:
9e:11:93:24:2d:48:91:56:d9:94:03:81:dc:7a:bf:
35:1c:3f:85:66:c4:18:f2:37:f5:98:1e:52:ba:8d:
68:cb:92:e6:ea:c5:69:44:27:ea:2e:29:01:c0:b4:
7a:65:64:bc:c6:ba:96:e2:d7:15:04:6c:bd:28:b0:
6a:2a:63:9d:73:46:7f:3f:53:89:9e:aa:80:a7:f3:
4e:c8:4a:91:46:1b:72:49:94:32:86:23:29:0c:0f:
d4:66:9e:59:48:03:8b:e5:43:f5:c4:b7:7c:14:4c:
60:47:24:57:9e:1b:4b:c2:38:2e:d2:05:80:02:24:
0f:9a:a4:70:0d:9d:67:8a:a2:41:14:c4:ff:ca:da:
5e:c3:a1:74:fd:dd:f0:2c:ba:43:24:0e:17:7b:e2:
63:0b:f7:a9:fe:4b:b4:13:e5:bf:31:72:07:c1:b0:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:B0:3E:2A:8A:BA:AB:AC:F2:DD:E8:63:63:A8:FF:74:F5:3C:BF
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/BvOwPiqKuqus8t3oY2Oo_3T1PL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:96:c0:2e:42:e9:47:28:65:12:13:b4:c0:9e:ed:93:e9:7e:
b8:7f:17:d7:0b:44:20:0b:d7:1e:05:0e:1f:5f:13:11:f6:c2:
c0:13:58:66:51:0e:9e:b2:3f:9b:f3:30:8a:5c:ab:a7:b9:7f:
5e:62:91:5a:7e:d6:bb:9a:e8:88:7c:33:d3:cb:bd:aa:3f:77:
7b:c6:7b:8d:53:31:3a:90:15:59:c7:c1:f3:06:9e:0d:53:49:
a9:ef:6d:cc:61:6d:47:9a:31:53:59:d5:cf:24:1c:31:e1:57:
93:f2:d0:f4:6d:41:87:d6:86:1a:71:bc:b1:11:c1:8d:d1:29:
85:c2:6d:3a:9a:69:fe:fc:58:e9:56:99:0e:fc:4f:bf:a1:4e:
d3:60:96:c2:26:c5:8f:a6:96:e1:24:c5:c6:67:74:59:d3:ff:
d7:60:ca:c6:28:91:de:61:47:82:6a:b0:3f:ca:e0:bb:2f:c3:
ab:8d:91:14:7e:33:5a:3d:48:45:43:85:2d:e7:2c:6e:13:6e:
38:08:5d:33:f5:d4:b0:58:bc:34:10:cf:43:94:a6:04:c6:3d:
3a:ec:15:54:5a:5e:34:1b:f9:f3:a8:17:b5:85:ae:b9:25:c4:
31:77:2f:c2:2b:e2:9a:f9:76:33:5b:14:64:dd:bc:0e:a7:94:
60:19:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:40 2025 by rpki-client