Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/v3HFdHwV6DzsPluqCUq9IWt3HRU.roa
File: v3HFdHwV6DzsPluqCUq9IWt3HRU.roa (raw, json)
Hash identifier: OmdRSfSJ7CgIcZtLixNyQ2ZAGZdYv5eG+plgikn172E=
Subject key identifier: BF:71:C5:74:7C:15:E8:3C:EC:3E:5B:AA:09:4A:BD:21:6B:77:1D:15
Certificate issuer: /CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Certificate serial: 01904AF0341A8411F0BEEDDD04F63E516475
Authority key identifier: 93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/v3HFdHwV6DzsPluqCUq9IWt3HRU.roa
Signing time: Mon 24 Jun 2024 15:49:34 +0000
ROA not before: Mon 24 Jun 2024 15:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16347
IP address blocks: 185.49.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:f0:34:1a:84:11:f0:be:ed:dd:04:f6:3e:51:64:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9334a82fdc08f0e8de5d848d377e0cc5d97799bf
Validity
Not Before: Jun 24 15:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf71c5747c15e83cec3e5baa094abd216b771d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:7c:11:35:32:c0:04:09:0c:10:35:91:6e:
92:ea:75:4e:c7:51:71:48:3d:b9:58:dc:ee:e3:ce:
06:28:4e:d3:94:1f:9f:6a:2f:17:8c:3b:58:fe:de:
9e:d2:2f:2b:54:bf:4e:6e:26:50:5d:df:a6:61:e8:
26:ea:66:4a:7a:2e:8a:8b:05:5d:49:73:3f:1d:49:
32:f1:13:8a:82:34:22:ac:89:a6:28:bf:61:b7:fa:
67:64:c6:97:f8:11:48:45:e6:36:cf:af:0d:33:b9:
6e:fd:b7:72:ce:3f:80:ed:ac:29:8a:2e:c8:10:b2:
10:90:c8:bc:d2:38:a3:29:e0:9c:cf:b2:66:4d:7f:
03:9a:4c:41:aa:d3:d2:c2:67:d2:91:31:47:2d:ba:
83:d0:04:4b:01:b4:a5:79:d8:03:de:18:88:6f:25:
61:c5:9f:2f:b0:cb:cd:99:5c:d7:88:b7:e7:25:9a:
0e:0e:6f:7a:23:5e:0e:da:61:25:f9:29:2e:45:4b:
6a:57:5f:e6:45:94:96:51:8d:f8:61:99:e3:14:8a:
3a:79:2d:0b:ff:03:7d:ca:f8:e5:ce:7f:a9:3e:19:
0f:ec:9f:8a:45:d5:82:98:d2:ea:fe:9c:05:6c:57:
73:74:59:91:f8:bd:5b:41:09:ec:cd:65:77:be:d5:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:C5:74:7C:15:E8:3C:EC:3E:5B:AA:09:4A:BD:21:6B:77:1D:15
X509v3 Authority Key Identifier:
keyid:93:34:A8:2F:DC:08:F0:E8:DE:5D:84:8D:37:7E:0C:C5:D9:77:99:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzSoL9wI8OjeXYSNN34Mxdl3mb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/v3HFdHwV6DzsPluqCUq9IWt3HRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb6e7e-ab1d-4da5-9c96-ff68e9225f7d/1/kzSoL9wI8OjeXYSNN34Mxdl3mb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:98:65:ce:2d:92:29:5b:62:83:8e:cc:c9:5d:51:5b:80:88:
63:38:7b:b5:c5:92:24:c0:2b:c8:68:fd:41:0e:20:9e:29:06:
5a:eb:a6:14:7a:fc:4f:6b:bc:5c:87:94:b4:79:cc:3e:a2:93:
bf:ea:1a:3b:30:50:4e:1b:1d:4b:bd:08:7c:b9:41:f4:40:50:
f9:31:f6:4a:8a:ee:03:69:16:c4:a8:d1:ea:92:46:1d:d5:e6:
83:d1:e4:51:c4:c8:84:64:26:fe:50:8b:20:78:78:b7:6b:53:
bb:1b:5a:32:a6:61:9a:9b:a0:5d:87:c6:d9:aa:9a:d2:8f:1b:
b5:fe:2e:95:28:2e:2e:02:36:bb:9e:b6:ef:a8:e4:4b:ef:f6:
22:74:3a:be:51:0a:4a:98:dc:55:36:29:f6:bd:52:af:41:33:
73:7f:db:d3:3a:56:bd:a9:c5:76:19:8d:dc:db:1c:7b:ba:c2:
b7:f8:68:00:54:32:ef:d7:a7:4a:54:51:36:bf:ef:c6:a7:33:
4a:3d:1d:bf:68:d7:60:58:e2:66:d8:fe:7a:c2:50:f0:ff:07:
9d:e2:26:55:18:59:e2:34:1a:af:1c:a2:6b:da:5b:85:07:80:
71:c4:ef:5b:f6:7a:79:44:07:9d:01:dd:44:74:37:bd:56:81:
10:fe:ed:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:15 2025 by rpki-client