Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa
File: KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa (raw, json)
Hash identifier: VVRgPU6ad8eS1qcsKHKSv+wKjZh6Z/W5rALcLUsFcKA=
Subject key identifier: 2A:C4:F2:38:3F:5B:03:24:C4:9D:4E:67:E9:5E:6D:34:12:A0:26:D2
Certificate issuer: /CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Certificate serial: 012BA5A8
Authority key identifier: BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa
Signing time: Sat 01 Jan 2022 11:57:26 +0000
ROA not before: Sat 01 Jan 2022 11:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.161.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19637672 (0x12ba5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfc12c499ceb1c61204625326f00eda7b5257d0
Validity
Not Before: Jan 1 11:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ac4f2383f5b0324c49d4e67e95e6d3412a026d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:81:63:33:eb:16:cf:f6:50:d8:01:3c:bb:c3:
97:d2:56:35:fe:14:c7:6d:15:44:f5:12:37:7f:90:
be:48:88:9a:01:51:a1:99:1c:d7:6d:1b:c6:e3:2f:
ea:65:9e:b6:1b:fe:73:96:c0:ec:98:37:ad:8f:18:
79:04:cb:f9:0b:66:d4:0f:5e:4f:4d:b1:8e:9b:0e:
df:a2:a0:31:e3:6f:fa:22:17:fc:fb:d6:09:b3:ff:
68:11:eb:6a:91:4c:d4:89:a9:50:f7:2b:57:f1:13:
8d:be:fb:8d:7a:c9:07:24:1e:75:dd:89:00:4a:58:
3f:6a:75:1f:ec:6d:0e:f3:2b:d6:f1:f4:ab:83:4c:
b8:ee:92:35:30:c8:ae:7a:11:3a:b2:34:83:53:87:
61:15:37:99:0c:64:2a:32:b6:04:6e:29:80:e8:42:
ea:bd:8b:af:2a:ed:73:a1:b7:1a:f3:4a:23:a8:f1:
d1:0c:a5:01:98:18:da:de:a2:ab:c1:a4:58:0f:28:
9c:ae:78:fb:ef:16:e9:ed:e1:83:13:d5:d2:25:04:
45:2c:27:a2:85:f5:32:03:81:9a:0f:b0:51:e4:5e:
a7:4d:2f:1f:6f:7d:2c:0f:f4:56:5e:53:a4:21:9b:
56:23:f0:31:65:1a:b7:0c:79:2c:94:c6:66:a2:a5:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C4:F2:38:3F:5B:03:24:C4:9D:4E:67:E9:5E:6D:34:12:A0:26:D2
X509v3 Authority Key Identifier:
keyid:BC:FC:12:C4:99:CE:B1:C6:12:04:62:53:26:F0:0E:DA:7B:52:57:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPwSxJnOscYSBGJTJvAO2ntSV9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/KsTyOD9bAyTEnU5n6V5tNBKgJtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60b458-131d-4581-a840-6c03fdbd8d17/1/vPwSxJnOscYSBGJTJvAO2ntSV9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.123.0/24
Signature Algorithm: sha256WithRSAEncryption
28:08:b8:57:1c:48:6f:b4:ec:a2:74:73:0f:68:68:43:19:08:
41:aa:50:d7:6d:fe:be:80:8e:24:1f:4c:97:5d:0d:28:53:ec:
45:6a:07:d4:2a:1b:f3:73:76:56:d3:84:b3:6d:0b:55:b0:d8:
f8:f3:00:8e:81:6e:5e:15:c0:1e:3b:24:d9:17:fc:bd:c2:b2:
12:e2:fa:8a:9e:b5:80:1f:62:68:57:78:93:04:39:26:ae:f1:
83:0f:fe:e5:40:8a:66:04:3f:2d:a5:6f:64:02:e9:b2:61:b3:
5c:45:7e:be:70:54:87:4b:8b:d3:77:84:9e:1e:cc:09:9b:7b:
26:33:47:66:79:b3:41:b0:f6:95:6d:31:34:9b:90:57:ab:44:
f4:fb:d0:a3:2e:71:32:a9:75:65:ff:07:39:de:02:81:41:05:
1c:77:68:1e:a6:38:c0:f0:f9:27:a0:60:eb:ec:6a:de:53:41:
2d:8c:3a:b7:52:34:18:80:16:b1:b4:dd:da:a3:4e:2a:6b:37:
b2:40:d1:82:31:0c:5d:ee:38:df:df:93:f9:2d:8a:43:49:2c:
98:6a:ba:fa:26:4a:b1:ce:df:35:17:0e:09:f6:6e:85:1f:08:
7a:7d:d1:e0:cc:4f:38:c1:8b:f1:25:d5:a9:79:51:05:03:64:
23:60:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:55:41 2025 by rpki-client