Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/ao9QVIVwkfU7fSgIworOAZL3tr0.roa
File: ao9QVIVwkfU7fSgIworOAZL3tr0.roa (raw, json)
Hash identifier: TzouXO1lq8jilU6sKLmogty4GWF5Po+oFJsw4pU2vOA=
Subject key identifier: 6A:8F:50:54:85:70:91:F5:3B:7D:28:08:C2:8A:CE:01:92:F7:B6:BD
Certificate issuer: /CN=b0abfff885ca54bb2526380f725051d53e7213c0
Certificate serial: 018434C1D8A03C903EF7B3F47B46AC55E1BE
Authority key identifier: B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/ao9QVIVwkfU7fSgIworOAZL3tr0.roa
Signing time: Tue 01 Nov 2022 19:53:49 +0000
ROA not before: Tue 01 Nov 2022 19:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48551
IP address blocks: 185.149.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:c1:d8:a0:3c:90:3e:f7:b3:f4:7b:46:ac:55:e1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0abfff885ca54bb2526380f725051d53e7213c0
Validity
Not Before: Nov 1 19:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a8f5054857091f53b7d2808c28ace0192f7b6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:3c:74:29:f0:22:66:26:de:dd:54:24:91:
7d:b0:fa:99:0e:1d:bc:9f:72:40:b2:09:83:e5:40:
5e:96:20:a6:8b:77:52:9c:84:b0:56:49:7d:d3:b1:
a0:54:b1:6f:f8:e1:54:4d:1e:db:05:24:b5:c2:56:
31:e7:de:81:fe:72:85:89:37:e0:73:cc:4a:4d:1f:
f7:f8:bd:42:ff:23:7e:7f:76:80:ea:5b:0a:41:0c:
2e:43:de:9a:62:0e:02:e9:f0:da:1c:79:f4:f2:94:
36:ea:82:aa:dc:3a:4a:83:d8:02:58:a1:ae:42:31:
93:7f:58:2d:ee:02:11:92:f3:f6:8e:f5:cf:11:ba:
6c:df:cd:4f:58:8e:55:1b:5d:84:00:be:3c:b3:a9:
83:7a:20:b7:79:25:6b:e6:7a:d2:e7:97:ce:b9:bf:
15:e9:34:27:79:db:00:8b:b5:1b:14:5a:ac:7c:d8:
41:94:1b:69:0b:46:15:b7:07:ef:87:9a:23:9e:02:
28:77:78:fa:e4:fd:ac:7f:cd:b0:d0:b9:54:6f:a1:
be:2d:99:1b:d0:f3:6f:03:e1:0a:ec:37:03:b5:37:
5a:23:07:3c:2f:85:17:23:32:3d:5a:49:66:9f:be:
61:63:5b:57:f5:19:be:09:34:eb:f7:a6:f8:89:da:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:50:54:85:70:91:F5:3B:7D:28:08:C2:8A:CE:01:92:F7:B6:BD
X509v3 Authority Key Identifier:
keyid:B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/ao9QVIVwkfU7fSgIworOAZL3tr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:be:78:f8:39:9c:69:4c:89:14:4d:0a:ca:ff:c2:81:c0:80:
a1:8c:be:88:d1:7c:a0:4e:e5:ea:32:ba:e4:92:d8:b5:fe:c3:
a5:d9:1c:40:48:cf:03:0b:3d:e9:ea:55:e8:7c:72:d9:1f:12:
3c:69:e2:82:29:c1:6c:ad:17:4c:56:38:bf:c7:c3:98:5f:c0:
ec:d0:00:75:75:4e:01:20:68:5d:7c:81:53:27:a5:32:af:02:
75:26:ae:8b:a7:2e:e8:c3:5d:cf:88:23:1a:01:7b:b4:f1:83:
ca:da:c6:3d:ef:45:5c:d2:e9:15:5a:9c:74:e2:43:36:92:da:
97:56:c2:ab:1f:84:13:3d:11:c8:0b:15:8b:e5:f7:ac:60:86:
22:92:f5:f5:36:8d:e6:ed:65:33:ff:ec:40:25:2c:8b:8f:a0:
7b:ec:2d:c8:d0:ec:de:c5:ac:15:f2:f4:f0:ab:1c:e6:ad:9f:
18:f8:ff:de:9d:5a:2c:1b:3a:1a:d1:31:85:97:5e:86:ea:ac:
0f:e3:db:a9:12:65:c9:33:25:9b:2d:b8:92:7f:d3:3e:32:7d:
88:e4:59:64:25:0e:7d:24:07:89:df:5e:b4:72:3f:bd:ac:f0:
67:1f:bd:7f:d4:1c:82:88:24:a8:be:48:97:2a:ec:e6:ab:e9:
79:26:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:19 2025 by rpki-client