Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/bg33hMq247nwN2ocfn600Uq226s.roa
File: bg33hMq247nwN2ocfn600Uq226s.roa (raw, json)
Hash identifier: jy5n/pc22gAxoVNf8j6fp7NCHs8gAd8vhQdpOkm6prM=
Subject key identifier: 6E:0D:F7:84:CA:B6:E3:B9:F0:37:6A:1C:7E:7E:B4:D1:4A:B6:DB:AB
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0188E6F771A72C624BB0B232E96B21BA550D
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/bg33hMq247nwN2ocfn600Uq226s.roa
Signing time: Fri 23 Jun 2023 06:35:56 +0000
ROA not before: Fri 23 Jun 2023 06:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 185.23.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:f7:71:a7:2c:62:4b:b0:b2:32:e9:6b:21:ba:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Jun 23 06:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e0df784cab6e3b9f0376a1c7e7eb4d14ab6dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b3:ef:08:60:e1:f7:68:ac:a3:2e:0a:c8:
10:f1:fd:65:f6:e9:6e:dd:b6:54:68:2a:0e:bd:81:
56:dd:30:01:a8:09:dd:96:ac:fa:11:6f:28:97:59:
72:94:9d:72:62:36:41:84:77:9a:57:b6:b1:7e:5c:
49:9f:45:b0:91:ae:58:85:5a:e4:df:35:32:58:82:
d7:a0:b4:54:37:29:e6:b6:11:fa:cd:ba:cb:4a:37:
a5:ab:6e:5d:c8:a0:be:61:2f:36:27:03:48:b1:aa:
c1:f0:55:cc:f9:b0:c7:0c:94:b1:6d:c5:1e:e0:63:
a5:2f:a1:31:d7:d6:64:fa:b7:04:57:58:89:2c:81:
c0:6e:3f:cb:b7:59:c1:62:8c:3d:69:60:7f:02:58:
a0:9c:ce:96:13:7a:6f:86:dc:09:b2:37:f4:ed:4a:
c9:36:c1:c6:e9:ad:9d:af:99:d4:f1:ce:bd:d0:80:
b3:d0:4f:23:85:02:42:99:01:36:b3:d2:ad:19:35:
0e:cc:73:f3:cb:76:e2:12:e9:b7:00:0b:3f:28:2f:
cb:8e:be:53:8a:e1:44:b0:01:4e:39:03:cd:ba:fc:
24:cf:5f:df:d0:fa:33:11:05:d2:44:ff:56:cb:04:
d7:22:54:49:9a:b6:e4:27:f7:ba:40:63:17:e4:d0:
53:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:F7:84:CA:B6:E3:B9:F0:37:6A:1C:7E:7E:B4:D1:4A:B6:DB:AB
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/bg33hMq247nwN2ocfn600Uq226s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.16.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:fa:d2:4e:b9:73:84:6a:7d:f1:6f:2d:42:67:cd:64:51:50:
75:16:35:74:09:80:36:01:c3:bb:5c:5d:51:0b:eb:cf:ef:f7:
9c:1d:7e:af:6a:50:d8:1c:a3:97:e7:28:13:64:5b:60:c8:e4:
7b:2a:2d:2a:32:91:4f:88:61:7d:13:5e:dc:da:8d:1b:3d:89:
b2:c2:8d:b5:13:ab:57:78:84:36:a0:7e:65:c3:5d:ed:93:13:
e1:45:a6:6a:21:06:65:a1:65:8b:2e:44:3a:51:ff:67:a6:52:
42:0c:f9:28:9f:bc:8c:52:09:ac:23:d2:ef:8e:b0:c1:59:2d:
ce:78:e0:83:74:93:a9:a3:67:af:81:a6:e1:75:12:f6:1a:da:
25:b8:33:03:68:45:41:55:4a:05:96:d7:20:d3:ce:d0:86:36:
e5:19:8b:29:13:e3:27:65:79:57:52:6f:44:9a:8d:e9:bc:c3:
4d:8b:22:80:a1:32:93:55:98:fd:61:32:84:d3:67:bd:ba:6a:
46:d5:93:be:61:74:93:1e:6e:bb:09:8e:78:d2:c1:b5:15:26:
15:05:c1:4b:28:ce:f5:af:ad:41:e5:eb:c5:4c:e3:d5:6c:9d:
ac:e9:62:91:cb:1e:a3:0d:b1:e9:44:16:98:7d:d4:ba:b7:e4:
e0:0a:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:40:21 2025 by rpki-client