Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/BsRapsb8l_5PZmhK-px6P5ft8IQ.roa
File: BsRapsb8l_5PZmhK-px6P5ft8IQ.roa (raw, json)
Hash identifier: 1fAnCm4EJ79w7i06j6XOQWbgBTnA5p0hJhM5t0Htbbo=
Subject key identifier: 06:C4:5A:A6:C6:FC:97:FE:4F:66:68:4A:FA:9C:7A:3F:97:ED:F0:84
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 01942143DA3901614EAB79E57C3D6F9010E4
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/BsRapsb8l_5PZmhK-px6P5ft8IQ.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207741
IP address blocks: 193.192.0.0/24 maxlen: 24
212.102.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:da:39:01:61:4e:ab:79:e5:7c:3d:6f:90:10:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06c45aa6c6fc97fe4f66684afa9c7a3f97edf084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:7c:23:53:7e:2f:64:25:b3:b3:83:61:38:
5e:c9:6f:28:06:99:a1:c4:52:3c:08:63:1b:d2:7e:
93:b1:2e:bb:b6:6b:67:fa:97:63:8f:59:3a:48:9e:
fc:ae:bf:fa:d4:f6:08:6b:27:97:b5:25:42:95:ea:
5a:0f:c7:f8:c8:9a:8b:00:4b:01:3d:91:4f:30:2e:
c1:00:4d:45:e3:d8:c2:c3:44:56:6c:d1:8f:c0:88:
d0:2a:34:db:13:be:73:05:c6:f9:40:db:6c:e6:b4:
11:32:6d:2d:0b:91:98:43:56:ea:b4:8b:b5:ab:e0:
90:ae:e7:1d:f7:54:02:5c:a8:69:82:51:f5:9e:50:
00:17:d8:a7:87:33:b8:09:81:c2:a2:59:b8:b2:d5:
20:44:46:59:e8:8a:35:41:73:6b:db:1f:d1:d5:82:
44:3a:6f:48:96:19:f1:2c:d3:aa:36:6e:24:b6:96:
b6:52:ba:70:6d:6c:e1:51:6d:56:5b:f3:24:9c:11:
e2:52:a6:7e:81:b4:59:52:2a:56:01:3a:3b:65:1d:
83:c1:c3:7d:73:65:0a:fb:89:e9:a1:ff:8d:13:48:
87:eb:cb:bc:36:22:45:c7:ee:65:c0:82:25:d5:93:
d0:83:85:29:97:6e:ba:41:97:5c:56:57:ae:5f:a7:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:5A:A6:C6:FC:97:FE:4F:66:68:4A:FA:9C:7A:3F:97:ED:F0:84
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/BsRapsb8l_5PZmhK-px6P5ft8IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.0.0/24
212.102.117.0/24
Signature Algorithm: sha256WithRSAEncryption
91:04:da:e8:d3:58:fa:80:41:94:3e:3b:a3:6a:7f:d2:23:4f:
3c:a6:c5:53:8f:6d:ff:f2:ba:42:03:4b:f4:b0:cd:f7:c5:28:
c1:14:43:9c:78:5a:66:c8:78:a9:2d:34:31:e3:15:27:e2:dd:
f6:f7:b6:73:5a:dd:20:b6:a2:fd:20:01:2d:82:9b:34:89:7c:
0b:16:37:f9:89:11:1e:65:bb:1d:85:89:22:9f:d2:f8:03:fd:
b5:4f:5a:3d:4b:18:d1:bb:f0:92:7d:1a:71:df:33:dc:e6:ef:
6e:98:d1:db:5c:5d:e0:4e:eb:f0:fc:06:c2:d5:04:e1:91:65:
ed:f9:e7:c7:d9:da:dd:97:d3:ab:46:7e:73:96:e5:18:72:3a:
bd:8d:8e:bf:43:3d:b1:61:c4:8a:be:f5:16:d0:19:24:c3:61:
30:bc:d2:c9:8c:b5:48:dc:12:7c:77:3a:f8:a0:ca:97:af:8b:
e7:66:2d:c9:ad:19:ef:0a:6b:96:09:63:63:c6:14:f7:5e:fb:
2c:8e:cb:41:32:9f:cc:dd:bb:d9:65:5d:1a:2d:ff:94:51:6b:
7f:4a:4c:d5:0b:a1:7a:b2:2c:98:74:56:0d:cd:63:25:af:f6:
a2:31:27:65:d7:2a:85:58:50:aa:f4:6e:e2:db:eb:7a:38:8a:
dd:dd:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:16 2025 by rpki-client on console.sobornost.net