Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/bFkRdjlL0hn20ip0p52U66tWUIo.roa
File: bFkRdjlL0hn20ip0p52U66tWUIo.roa (raw, json)
Hash identifier: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=
Subject key identifier: 6C:59:11:76:39:4B:D2:19:F6:D2:2A:74:A7:9D:94:EB:AB:56:50:8A
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 019420680D6BE12172DD3AF505D3E2D9BC3E
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/bFkRdjlL0hn20ip0p52U66tWUIo.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204546
IP address blocks: 185.213.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0d:6b:e1:21:72:dd:3a:f5:05:d3:e2:d9:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c591176394bd219f6d22a74a79d94ebab56508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:81:c0:85:10:e8:5d:04:de:60:f7:2a:3b:63:
90:c3:bf:74:7e:f9:46:cf:41:cc:a4:8b:77:b6:46:
7f:d0:5e:3d:34:33:b0:2f:fc:b4:e8:04:2d:4f:89:
5e:17:5a:be:9d:8a:fd:c6:88:09:a6:fc:da:e4:30:
12:27:25:f0:a5:b2:88:d3:4b:3d:c7:e4:72:54:bf:
5d:6a:26:b2:80:bb:1a:5d:7e:cc:79:fe:74:c7:cd:
56:12:95:3f:c4:87:2f:14:d9:09:30:ea:ef:11:33:
86:68:ba:12:5d:60:75:3d:31:a5:58:80:bf:1a:f9:
b3:76:e3:84:71:2a:1e:6d:98:40:70:5b:cf:d7:17:
c4:95:0a:df:fe:26:c5:53:94:ea:6e:4e:e4:8e:74:
7f:4b:40:7e:77:66:1d:72:3d:48:41:7a:f9:9d:31:
5b:5c:8f:2d:9d:65:b6:18:27:f9:c6:77:99:70:0f:
ff:98:61:06:8c:6c:f1:1e:13:ef:58:ff:4d:f4:4d:
e2:9f:06:94:1f:4f:c1:3c:68:d6:e8:e6:57:f4:f7:
01:17:62:35:61:66:78:b5:64:e0:37:7b:21:63:68:
a9:bc:2e:37:eb:8a:c4:87:9b:df:f4:e6:97:be:91:
9d:56:46:8a:f9:bb:63:af:27:20:44:e3:19:06:fc:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:11:76:39:4B:D2:19:F6:D2:2A:74:A7:9D:94:EB:AB:56:50:8A
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/bFkRdjlL0hn20ip0p52U66tWUIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d8:67:4e:86:03:7f:61:7a:38:d5:63:23:37:6a:a0:7d:ed:
56:0c:a9:ac:da:31:5c:92:8a:ae:d5:27:f9:1a:ca:64:5f:bf:
c6:bb:b0:01:e4:5a:cb:57:42:05:9f:13:7f:5d:de:02:0a:09:
cf:d3:08:58:60:78:1f:95:34:2f:2b:1d:f8:1b:25:53:1d:d8:
37:74:2f:7f:c1:98:ce:88:a6:d0:45:42:44:c8:58:c2:18:ca:
c2:ba:dd:f7:e2:04:8d:df:c6:97:50:f7:e9:8a:a5:e0:20:21:
f1:16:d7:e4:a7:81:b8:8d:02:15:f5:24:1c:79:33:fb:7e:80:
12:a3:2d:94:94:ad:e7:d0:06:c7:8e:99:9c:71:f3:5b:2e:6a:
99:ea:ce:b3:1a:af:de:b7:82:16:49:f2:60:22:dd:24:8b:7e:
e4:03:fa:12:77:4f:bd:f4:ff:1a:f5:4d:7a:af:18:7d:63:34:
38:bc:0b:69:6b:b4:c4:f2:a7:8c:91:e8:54:4e:33:74:92:5f:
9b:ec:51:b3:40:c5:cb:98:fd:ff:0e:ac:db:3e:5f:8d:f2:32:
79:32:09:f5:5f:6d:52:9f:88:6e:15:9a:31:7d:f1:f1:a3:a0:
24:bc:ad:f3:60:70:e3:64:a6:df:fc:fd:a5:35:cf:05:1c:13:
94:2d:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:29 2025 by rpki-client