Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fWfdo5anA-airPJRfppwQ7zxscQ.roa
File: fWfdo5anA-airPJRfppwQ7zxscQ.roa (raw, json)
Hash identifier: hBM5vvQyPcLBSkI8JN3d3TQZX/UxBSzSb/R3wZBfYRA=
Subject key identifier: 7D:67:DD:A3:96:A7:03:E6:A2:AC:F2:51:7E:9A:70:43:BC:F1:B1:C4
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 01857079846F69E5499E1729C8DCF1369D09
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fWfdo5anA-airPJRfppwQ7zxscQ.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.228.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:84:6f:69:e5:49:9e:17:29:c8:dc:f1:36:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d67dda396a703e6a2acf2517e9a7043bcf1b1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:ff:f4:e3:4d:3e:2c:06:65:f5:14:45:d3:
85:b2:24:5c:d1:dd:ee:f3:86:68:08:5c:fc:64:45:
00:55:0a:2e:23:ef:42:b1:1a:f1:c6:b6:a5:6a:ab:
21:8a:a2:98:98:f6:63:a6:14:7f:4a:56:c0:d7:5a:
72:12:23:23:ea:5d:6e:4d:6d:63:1b:14:66:f6:b3:
f8:aa:63:e6:18:6e:ce:b6:dc:af:25:93:9c:e3:ec:
bf:ac:45:c4:89:0e:c2:2d:47:46:0e:8f:7d:36:4a:
d3:6c:63:a0:4b:0a:77:18:df:fa:6f:b9:1f:d7:16:
47:a1:63:de:40:25:55:da:3e:50:d8:c5:57:f0:ca:
0c:47:de:90:dd:13:1d:d1:e5:3d:d4:d9:cf:c1:d4:
7b:a2:21:78:71:2d:a6:77:2f:2a:8b:b4:fa:8a:9a:
30:d5:9d:8e:ed:05:61:22:47:e0:7e:68:a7:9c:7d:
70:01:0f:78:52:94:e7:c7:86:f6:1f:13:ff:74:9c:
94:59:7e:74:d3:89:0f:fb:cb:ad:d3:ba:a2:c3:01:
fd:62:7c:de:75:74:c0:5e:50:93:0b:4b:a1:38:ae:
59:76:9e:11:cc:de:e5:79:f3:63:17:4b:32:d0:32:
60:7a:9e:f3:77:47:70:66:67:47:da:4a:25:89:34:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:DD:A3:96:A7:03:E6:A2:AC:F2:51:7E:9A:70:43:BC:F1:B1:C4
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fWfdo5anA-airPJRfppwQ7zxscQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.90.0/24
Signature Algorithm: sha256WithRSAEncryption
30:29:63:0c:85:24:4d:72:a6:f3:42:51:c1:1d:f7:d6:e1:2e:
3a:2a:8a:7d:37:03:dc:60:a8:d6:88:0f:cc:23:c3:38:70:b9:
35:bb:aa:35:78:84:68:c9:99:c6:b8:27:0f:44:82:91:0b:0b:
d4:81:0a:a1:e2:50:4d:53:b1:c0:70:a1:da:63:ce:fa:75:24:
7b:a5:6e:61:4c:05:bc:d3:d4:c6:3f:e9:bf:78:a8:55:32:5c:
24:99:93:29:92:66:d8:cf:ac:3b:52:3b:e3:6f:db:43:21:d6:
9d:34:b5:fe:c0:76:ae:85:f0:a7:3a:0b:d8:db:9b:49:a3:39:
e8:91:4b:d2:ff:15:40:5e:3f:ba:7a:11:da:76:0b:66:95:e2:
9d:df:bb:8a:fc:09:59:23:c4:b9:b8:8d:a2:b3:8a:f0:73:67:
a0:5c:28:79:17:60:3e:43:6f:f4:b7:d3:e1:99:6b:e2:19:97:
76:95:1d:e6:ea:5f:e6:c3:e6:57:ae:6c:83:f5:9b:28:ae:7f:
4d:d7:bf:64:d5:83:e9:e2:7a:8a:9b:9f:c0:0e:8a:d6:b6:bf:
36:e6:3b:d5:cf:e6:5e:6b:70:7d:65:af:6e:e0:6f:c5:f8:a2:
1c:66:7c:07:2a:3a:70:2f:04:ca:9f:cc:d5:4c:69:04:be:04:
60:ee:58:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:47:14 2025 by rpki-client