Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/bpBIhzN6_jcsLynIJwoeN7YmjYc.roa
File: bpBIhzN6_jcsLynIJwoeN7YmjYc.roa (raw, json)
Hash identifier: /pIo5l52nBI31yG3ihoa9e0Fh467xGhrD8O7Uqlgruk=
Subject key identifier: 6E:90:48:87:33:7A:FE:37:2C:2F:29:C8:27:0A:1E:37:B6:26:8D:87
Certificate issuer: /CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
Certificate serial: 06CEDC16
Authority key identifier: 11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/bpBIhzN6_jcsLynIJwoeN7YmjYc.roa
Signing time: Sat 01 Jan 2022 14:07:12 +0000
ROA not before: Sat 01 Jan 2022 14:07:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44780
IP address blocks: 185.148.168.0/22 maxlen: 24
2a07:60c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114220054 (0x6cedc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111f4b0a73ac1b633d24ed5a094fde3a2ef51b94
Validity
Not Before: Jan 1 14:07:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e904887337afe372c2f29c8270a1e37b6268d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:b5:a0:76:cc:2a:fa:ed:d5:94:92:b5:80:
fe:0f:af:f3:0e:83:4c:fd:25:65:3b:1d:f1:bc:a5:
b4:d1:ea:97:21:58:04:a5:4f:9f:1f:6a:08:4b:d3:
e6:28:64:1e:35:58:a9:8b:fc:3e:d1:29:33:64:94:
f4:5d:d7:f8:7e:fa:9c:2c:d0:b2:14:08:27:9b:43:
5a:42:bc:ab:07:00:66:09:89:6c:59:54:fc:43:44:
d8:3f:9f:16:25:3f:5d:b6:55:4f:38:6e:46:cd:93:
db:5f:00:10:1c:bd:3d:d2:1a:d6:06:77:e1:ce:5c:
a3:02:be:d5:10:c0:4d:fa:8c:92:af:93:8b:8c:7e:
01:df:8d:06:6c:73:6e:3c:17:c3:ee:df:bc:05:77:
97:24:1a:10:6f:a5:16:bd:8c:80:e5:ea:d2:9b:ed:
f4:55:6c:30:7d:ef:4f:34:aa:dd:e5:77:59:41:04:
b5:a9:04:fc:55:43:b0:a9:c7:1a:76:37:d3:7d:3b:
47:77:5f:20:52:17:d2:3d:4d:b1:4c:0f:5e:10:59:
23:60:1b:3c:8d:fd:04:6d:ec:53:3a:45:55:a6:df:
89:88:22:5c:ba:f5:8f:47:f5:5e:1c:0b:2e:20:0b:
2c:af:d2:64:79:24:21:5d:af:6c:ba:d7:57:26:84:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:48:87:33:7A:FE:37:2C:2F:29:C8:27:0A:1E:37:B6:26:8D:87
X509v3 Authority Key Identifier:
keyid:11:1F:4B:0A:73:AC:1B:63:3D:24:ED:5A:09:4F:DE:3A:2E:F5:1B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER9LCnOsG2M9JO1aCU_eOi71G5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/bpBIhzN6_jcsLynIJwoeN7YmjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e3c854-2262-4895-b92a-f2c65a7013ef/1/ER9LCnOsG2M9JO1aCU_eOi71G5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.168.0/22
IPv6:
2a07:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:c9:e4:fe:20:f0:a4:92:b2:0a:df:e0:0d:e3:69:a0:65:c9:
19:14:4f:04:7b:c3:ad:71:1a:be:08:04:36:4b:6a:7e:67:f6:
e3:04:ac:f8:ac:c6:4d:25:3f:4c:25:0f:85:9d:f9:cf:24:83:
06:ba:ee:5b:9c:8b:6b:81:e9:dc:d8:79:3e:50:8f:2a:6f:cb:
15:cc:2d:4c:b7:9b:5b:fc:95:70:ca:08:01:35:9f:f4:33:07:
49:2d:9d:6e:d1:9a:20:43:00:62:ab:a0:d0:40:19:77:37:43:
52:88:2f:1f:61:07:99:c2:44:af:4a:e2:3e:aa:8d:8b:e6:1a:
a5:be:e9:eb:f5:59:56:c1:e7:b6:22:e5:48:99:b6:09:52:86:
0f:2e:08:58:67:2f:83:18:66:e2:58:97:8f:c1:fa:72:4a:a0:
1c:83:3f:c9:0b:35:4e:73:dc:41:5e:8b:95:e8:65:04:5a:c7:
31:ba:b1:2e:a1:1f:23:be:96:7e:7c:bc:c6:da:b7:24:b8:a9:
8d:c0:d4:cb:79:05:6a:2c:8a:b8:05:ac:4d:d7:c2:41:8f:cf:
a9:a0:07:e6:c9:f5:02:52:53:a0:6c:e4:41:fd:f9:89:33:e9:
71:a3:3e:7c:4e:e8:ea:fa:2d:43:ec:d3:78:eb:78:b8:ac:21:
67:26:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:38 2025 by rpki-client