Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BBrKZhTPdWUZk6pHS1UFTrsAewo.roa
File: BBrKZhTPdWUZk6pHS1UFTrsAewo.roa (raw, json)
Hash identifier: 31v+7dlC1hWppBgNS2JuSOJJiIcZPNU0AhHdRG2ixRI=
Subject key identifier: 04:1A:CA:66:14:CF:75:65:19:93:AA:47:4B:55:05:4E:BB:00:7B:0A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D30D17E54380CB8749EE8D08770B7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BBrKZhTPdWUZk6pHS1UFTrsAewo.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51472
IP address blocks: 81.23.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:30:d1:7e:54:38:0c:b8:74:9e:e8:d0:87:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=041aca6614cf75651993aa474b55054ebb007b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:8b:bb:ee:66:bb:c6:4c:2d:16:40:13:18:
9b:33:6b:25:51:9b:63:c9:fb:86:d0:60:ef:2b:8f:
3d:d8:1c:b9:57:03:3a:0e:e0:f9:96:9b:1c:1c:d3:
15:9a:6d:b2:c1:58:5b:01:1d:c2:05:61:04:51:92:
ab:39:ce:7b:5b:f6:49:27:62:e0:35:7d:07:ed:c1:
fb:d6:8c:e7:4a:01:a7:f2:a4:0e:0d:04:47:91:de:
67:84:c0:ae:27:e3:0a:d3:79:03:5c:d6:df:e7:8d:
40:7f:65:78:0b:1d:53:45:3c:cb:41:40:fd:05:c3:
f7:19:72:48:6e:c3:c6:03:c3:83:33:1b:0e:42:6d:
08:16:1d:94:50:b7:1f:7d:84:f3:ce:c1:93:54:79:
fa:10:25:88:71:2e:e1:32:35:df:d5:c2:f2:f2:84:
65:7b:0c:3f:15:81:14:fb:07:6d:c0:38:b3:68:91:
3f:eb:42:7d:9b:a5:9f:7d:44:ad:e0:43:9e:78:7c:
d8:11:4e:81:0a:a2:ef:2e:b8:0d:e8:f6:6b:c6:83:
80:3e:10:63:d7:26:85:4b:c0:54:d0:e8:ee:4e:2f:
cf:07:a5:78:f6:46:0d:af:d9:75:d5:a6:82:a3:5b:
49:da:43:cc:50:10:82:11:ed:f5:d7:75:eb:2b:e1:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:CA:66:14:CF:75:65:19:93:AA:47:4B:55:05:4E:BB:00:7B:0A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BBrKZhTPdWUZk6pHS1UFTrsAewo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ff:20:08:b8:20:41:73:71:03:79:46:7a:d7:17:df:3c:af:
58:6d:6c:a4:7a:29:dc:b2:17:65:26:0e:6b:82:06:aa:43:f1:
af:57:87:80:e5:5f:9c:21:70:fb:1f:fd:35:88:70:86:ff:5f:
e2:4b:20:14:ca:61:72:9a:83:ed:06:33:57:14:12:41:09:5f:
85:ab:05:c7:a3:6e:94:9d:b8:69:2e:bf:33:6f:fd:9d:fb:05:
ed:cd:1e:2e:e1:ef:d3:db:e0:f0:22:d8:ca:46:1e:8b:fa:00:
41:ad:05:6c:de:13:7e:bd:90:9f:c0:77:9c:dc:9d:af:89:66:
50:19:a3:4a:bd:d6:48:61:7a:fc:ba:65:ce:43:e8:b1:39:60:
54:72:cb:4f:da:1e:3e:47:10:c0:3d:fe:45:8b:37:0c:7a:87:
c8:a8:c9:cc:1d:29:f2:be:fe:26:37:c7:01:c5:77:60:00:aa:
8f:49:92:ee:8d:04:da:26:8f:50:00:5e:91:d2:51:60:08:a2:
b8:d0:24:a4:fc:50:5d:0e:3c:44:d3:0c:b0:3b:78:d1:a7:e8:
24:31:15:01:de:65:66:c6:9a:7e:bd:e3:6d:19:7b:75:d5:11:
0e:ef:69:22:57:29:5e:b2:c2:d8:ab:38:69:6e:f1:e4:eb:03:
15:1e:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:12 2025 by rpki-client