Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/BrsakIEiAcwjPTcCLG3zbepg-vM.roa
File: BrsakIEiAcwjPTcCLG3zbepg-vM.roa (raw, json)
Hash identifier: 5FBRDzckPB45ax3enSwljCfLMbv0Km95YXZs1gmXrpg=
Subject key identifier: 06:BB:1A:90:81:22:01:CC:23:3D:37:02:2C:6D:F3:6D:EA:60:FA:F3
Certificate issuer: /CN=f5b75ad5609cef112579bd01938c6c73267fff07
Certificate serial: 018CC500971FB7306DCE09462CAACFE96733
Authority key identifier: F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/BrsakIEiAcwjPTcCLG3zbepg-vM.roa
Signing time: Mon 01 Jan 2024 12:29:59 +0000
ROA not before: Mon 01 Jan 2024 12:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 185.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:97:1f:b7:30:6d:ce:09:46:2c:aa:cf:e9:67:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b75ad5609cef112579bd01938c6c73267fff07
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06bb1a90812201cc233d37022c6df36dea60faf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:23:d4:37:67:20:90:6e:6b:de:aa:11:26:
c0:56:e3:fd:ea:a5:e9:7a:e4:ff:bb:9b:2e:16:1c:
e9:28:37:0e:44:ac:f0:79:23:c2:ea:5e:bc:d9:33:
26:cb:bb:b1:6d:5a:8d:73:fe:f3:1c:66:39:8e:0b:
73:ff:45:26:87:c9:cc:18:e6:0b:11:ad:d4:ce:ea:
39:b1:a5:69:5d:2f:bc:70:f9:25:50:00:60:c6:7d:
1e:3a:6d:c0:a9:d6:92:6b:d5:37:37:18:ea:d3:9d:
29:60:d8:3a:b6:ef:95:3e:f1:4a:46:21:ff:b2:41:
5e:8a:c3:46:e9:d5:03:71:31:81:02:27:98:11:38:
81:d7:3b:ff:0a:e4:2a:04:99:95:3b:c6:7b:08:1d:
11:00:ee:82:c9:1c:28:7b:b1:25:94:93:d9:09:5c:
17:f3:59:df:24:2a:85:6a:3c:1f:5d:bd:11:f8:c2:
97:94:d8:48:9f:58:21:7f:e2:70:7e:69:6d:2c:8f:
33:57:67:90:b9:bc:b9:bc:1d:0e:89:7a:d2:ee:01:
41:5e:2a:26:65:c4:1a:c0:10:2b:c2:6d:f8:f6:60:
66:ae:34:83:3e:10:9e:ef:ef:41:68:25:82:95:57:
29:19:b8:29:55:d2:a1:8b:bb:68:b7:a8:87:d9:f7:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:1A:90:81:22:01:CC:23:3D:37:02:2C:6D:F3:6D:EA:60:FA:F3
X509v3 Authority Key Identifier:
keyid:F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/BrsakIEiAcwjPTcCLG3zbepg-vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
81:52:41:8e:d7:13:3d:be:5c:50:5e:25:e0:57:a9:01:43:f1:
a8:39:81:da:13:f4:a8:ca:e0:ce:d0:99:1e:38:7e:dd:49:c7:
46:3b:10:83:ac:a0:78:b0:fe:32:3c:76:cc:42:b6:20:5d:90:
c5:7a:e1:d8:16:c3:dc:c7:38:eb:51:9f:4d:94:52:7e:35:9f:
c3:6a:ae:93:cf:9b:b2:ba:8c:e5:2e:60:65:fe:f2:c0:fa:26:
14:f9:ff:c3:19:7e:50:0f:2e:ef:da:f6:2f:95:c7:22:dc:98:
fd:b0:16:87:8b:2c:8a:50:5d:88:79:6a:13:d3:19:04:6f:40:
a6:8e:32:85:0f:54:43:43:1b:40:70:f9:63:a1:05:52:0d:e9:
9d:4d:5e:e3:ec:45:f7:bc:94:39:0a:7f:8b:e6:7b:0e:78:27:
91:c5:cc:24:86:be:ae:a2:36:ac:3f:48:36:1a:47:d1:e7:69:
e5:cc:7f:2c:19:9d:12:d8:68:76:2e:6c:29:79:35:5b:1c:3a:
90:de:22:da:78:0d:83:90:9a:0b:af:74:30:56:3e:b6:3c:e2:
8e:12:b1:98:4f:36:51:e1:a1:41:a6:98:28:11:a9:68:6b:11:
3f:08:f0:97:52:d0:43:21:c5:6a:66:bc:2c:09:53:58:29:b9:
2f:2c:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:25:19 2025 by rpki-client