Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBoGJbXAkuZ5bskT7X9EQ5jB9pc.roa
File: bBoGJbXAkuZ5bskT7X9EQ5jB9pc.roa (raw, json)
Hash identifier: 787wvoqbz5JQcJ+zj9mIOfHpkCvY5wIkuU1dFtdnQBM=
Subject key identifier: 6C:1A:06:25:B5:C0:92:E6:79:6E:C9:13:ED:7F:44:43:98:C1:F6:97
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018C8D0EFB3B5BFDD4C5A0A472C325BE2266
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBoGJbXAkuZ5bskT7X9EQ5jB9pc.roa
Signing time: Thu 21 Dec 2023 15:46:58 +0000
ROA not before: Thu 21 Dec 2023 15:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216347
IP address blocks: 194.68.244.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:0e:fb:3b:5b:fd:d4:c5:a0:a4:72:c3:25:be:22:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Dec 21 15:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c1a0625b5c092e6796ec913ed7f444398c1f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:03:33:8c:39:6d:1f:78:78:d9:47:3a:f4:
dc:a3:7a:bc:90:b8:be:a9:e5:40:39:69:85:50:70:
6b:b3:e5:ae:50:17:12:6e:88:6a:e8:6e:c5:e6:95:
fc:9a:d6:87:88:8d:48:df:8c:64:c1:6d:4a:1d:52:
c9:e5:a7:a7:af:14:99:c7:10:2a:53:44:23:09:47:
15:ac:96:d7:68:c1:58:2f:a3:de:dd:0c:5a:85:ed:
f3:84:88:da:31:75:b7:6b:ae:3b:90:70:6f:97:d8:
c3:f2:a2:db:ec:bd:a0:8c:9e:f7:98:12:26:e7:ca:
90:8b:b8:bb:dd:3a:8c:13:3a:a0:8b:b7:14:18:5e:
60:f1:37:77:fc:d6:f1:fe:a4:50:61:bb:84:22:db:
7d:24:ac:20:d9:e4:bc:85:4e:7a:5a:40:5e:d3:de:
42:83:d2:9c:dc:be:5e:a6:4a:72:58:38:e8:68:9b:
8e:7e:4e:77:43:bb:92:bf:e6:fa:1a:31:1a:70:24:
eb:f7:43:0c:22:24:8a:66:ed:6b:e4:e2:46:23:30:
d7:d1:27:28:e8:92:db:9d:46:a4:18:f0:01:95:4c:
44:cf:85:ed:20:35:d7:d9:97:8e:49:f3:ac:f2:4d:
86:94:44:22:a1:cb:85:24:f0:94:58:e6:37:fc:5d:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:06:25:B5:C0:92:E6:79:6E:C9:13:ED:7F:44:43:98:C1:F6:97
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bBoGJbXAkuZ5bskT7X9EQ5jB9pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.244.0/22
Signature Algorithm: sha256WithRSAEncryption
04:85:65:74:f0:94:c7:21:cb:7d:39:6f:e7:3e:0f:27:88:40:
32:72:b7:9e:60:01:6e:98:97:b0:10:bd:70:50:3f:ef:95:b7:
be:60:fb:48:df:96:5d:fb:2c:72:b3:61:d6:98:7c:15:fe:8b:
17:45:22:94:c7:6d:db:71:33:31:0a:fd:1e:ca:5c:ba:e2:ef:
c6:d5:b8:29:14:d4:80:d4:1c:2b:0d:1d:be:3e:4b:5b:0f:c6:
9f:e2:09:03:fe:c8:48:14:46:fc:80:3e:ad:34:da:e4:f3:99:
e0:55:66:3f:ad:e6:29:c7:44:0d:40:b5:15:0b:6f:c4:98:80:
28:a6:67:2d:41:cf:61:9b:e6:41:29:0d:e3:a4:45:96:ce:5d:
98:ed:dd:e1:61:0f:59:ec:4e:95:dd:d6:8b:cd:e7:c4:cb:80:
ae:2f:d2:9c:fc:1f:d1:ac:2f:bf:2e:ab:cd:75:cc:f7:e0:a2:
4f:d3:f6:8c:ab:95:e8:9d:a6:a5:8f:71:57:12:be:48:d3:9a:
0c:e4:98:97:0e:fd:4f:c3:e1:f5:32:e8:74:5a:47:c7:2a:1e:
7d:6b:91:22:0d:75:51:7a:7d:9b:fd:72:2b:7f:1e:29:63:10:
35:b5:1d:01:2b:00:0b:a5:53:17:ca:f1:34:ed:f1:b7:0f:94:
7d:86:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:13 2025 by rpki-client