Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BxtsjwaylqDgyShxS785H67TnbY.roa
File: BxtsjwaylqDgyShxS785H67TnbY.roa (raw, json)
Hash identifier: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=
Subject key identifier: 07:1B:6C:8F:06:B2:96:A0:E0:C9:28:71:4B:BF:39:1F:AE:D3:9D:B6
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCE502A10BAD05EBC03556FB80C5FC
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BxtsjwaylqDgyShxS785H67TnbY.roa
Signing time: Thu 02 Jan 2025 07:48:38 +0000
ROA not before: Thu 02 Jan 2025 07:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 92.249.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:e5:02:a1:0b:ad:05:eb:c0:35:56:fb:80:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=071b6c8f06b296a0e0c928714bbf391faed39db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:b0:14:f4:ff:78:90:82:8a:b2:0d:64:01:
19:f5:00:cd:5c:21:61:9f:63:94:90:e8:c9:0b:f4:
b9:64:b6:3f:48:f6:f6:45:54:9a:33:ed:f4:7e:72:
00:73:1f:48:1c:21:3b:12:db:8b:64:f5:3f:11:de:
4c:99:00:4f:fc:a1:d2:f5:1a:fc:51:a4:75:1a:43:
96:e8:00:92:eb:58:3a:df:44:82:3d:da:80:3c:4f:
aa:1a:c8:4b:96:61:03:68:22:ad:12:8d:33:ed:00:
03:11:8d:15:69:18:14:25:89:1a:7d:e1:aa:8b:57:
22:5d:5e:e9:d7:bf:b9:c5:c6:5b:26:a9:20:08:b6:
f2:c9:95:c9:3a:27:2f:a5:7f:cf:89:b6:b8:af:5d:
9c:13:cc:2f:27:bd:a6:07:89:1e:ff:d0:1e:3f:09:
43:a3:01:a6:03:fc:c4:b6:2e:d1:73:ed:fb:df:ce:
cc:a9:37:87:e5:4d:70:a7:80:e4:11:eb:8a:97:06:
13:20:39:73:f2:e6:bf:b8:6f:0c:c9:8e:3c:bd:9b:
08:9d:62:11:8f:cb:68:26:3b:3e:0f:2e:63:da:05:
cf:b1:19:d9:43:b5:d8:97:08:cd:a3:45:50:59:29:
fd:dd:ba:f0:d1:a0:7f:c3:bf:e9:8d:4b:5c:ec:ad:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:6C:8F:06:B2:96:A0:E0:C9:28:71:4B:BF:39:1F:AE:D3:9D:B6
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BxtsjwaylqDgyShxS785H67TnbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:de:f2:e7:e9:a8:88:d0:b8:92:db:4d:f4:1a:4a:e0:2c:50:
1c:3b:77:b7:82:46:fa:d2:15:e2:87:a1:7f:c3:27:ff:09:2f:
f0:c3:9e:51:fa:eb:f7:8f:9c:ff:a3:c0:03:e3:74:d5:9b:a8:
17:6a:a6:da:28:cb:0c:1e:eb:e2:f5:9d:a2:98:e7:f8:91:24:
ec:f7:ab:2e:73:9c:07:e0:c0:fe:f5:d8:54:53:d3:06:cc:08:
ce:3c:f0:8e:23:c8:44:77:20:af:a3:59:5c:40:f7:db:84:a0:
d0:af:57:05:58:93:a5:4c:0d:6e:e2:de:fc:68:48:f0:88:55:
2b:b6:6c:ed:3f:d9:7c:17:bb:c7:08:86:c4:25:c5:28:f2:86:
3e:b1:ca:36:eb:67:ce:a2:e8:b9:ac:5c:d7:c1:27:1b:78:9b:
46:e2:1c:f7:42:db:b1:e5:b4:60:6a:09:73:50:f2:4d:f9:d2:
cf:d7:24:78:b5:9b:c1:f7:17:36:1c:f6:b1:fc:de:6e:23:43:
de:3b:07:21:61:f5:fb:2b:5b:f7:c9:64:56:0d:1d:a7:e5:a2:
b4:86:d1:40:d7:b7:c0:1d:59:1e:a3:65:02:8d:8f:f2:7c:b7:
6e:46:f5:38:7a:2f:bf:cf:f0:78:9f:41:4a:4c:f2:b4:95:0c:
f6:e4:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net