Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/FR-DdZ6l_dWRg1pnEEZHKy-TtaU.roa
File: FR-DdZ6l_dWRg1pnEEZHKy-TtaU.roa (raw, json)
Hash identifier: rix3FP+IdraYXi5amLMY1G7LW1GF5A8pUKN7Wo60tBo=
Subject key identifier: 15:1F:83:75:9E:A5:FD:D5:91:83:5A:67:10:46:47:2B:2F:93:B5:A5
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 019423D6ACB4BE1E1C6EC0B47028A7C6D176
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/FR-DdZ6l_dWRg1pnEEZHKy-TtaU.roa
Signing time: Wed 01 Jan 2025 21:47:38 +0000
ROA not before: Wed 01 Jan 2025 21:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 185.105.192.0/22 maxlen: 22
2a06:3880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ac:b4:be:1e:1c:6e:c0:b4:70:28:a7:c6:d1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Jan 1 21:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151f83759ea5fdd591835a671046472b2f93b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:7a:8d:01:68:89:04:bd:0d:b0:f7:81:35:
b9:8d:39:d6:3a:dc:e6:54:88:e9:79:25:b6:44:14:
a0:2c:55:44:ad:5b:e2:40:fc:1e:de:f3:87:c4:31:
c0:7a:57:54:6e:b9:57:3b:04:d5:3c:0f:f8:e8:46:
a9:74:bc:2c:8b:06:1e:90:1d:39:fc:e0:0f:60:5a:
d4:21:5e:c7:96:69:87:a9:4e:f2:59:f4:74:bb:6c:
86:a8:51:14:1e:56:10:99:78:9e:f4:3d:d6:79:d3:
70:92:ce:43:de:c0:cf:2b:7d:5a:02:a7:90:1e:77:
92:ca:07:86:a2:97:16:b3:59:76:ba:05:39:05:75:
92:48:6a:12:2b:91:17:36:7b:f7:85:11:bf:5d:9b:
c2:ae:58:86:69:9e:5f:b9:30:1b:80:24:35:e1:7e:
f9:70:7f:19:1d:f2:16:4d:dc:13:43:8e:20:09:02:
09:f1:51:9b:fa:b5:0e:70:99:a6:eb:4e:79:66:f4:
19:c4:93:8f:34:2f:48:18:62:0f:da:12:cf:a5:35:
27:9e:62:8e:3b:5f:05:06:8f:79:1f:c8:f7:e1:82:
74:9f:7f:80:a1:ae:6f:4b:e4:ef:b4:32:43:64:20:
12:6f:c8:c0:4b:a9:96:64:0c:44:eb:88:ec:4d:84:
47:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:83:75:9E:A5:FD:D5:91:83:5A:67:10:46:47:2B:2F:93:B5:A5
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/FR-DdZ6l_dWRg1pnEEZHKy-TtaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.192.0/22
IPv6:
2a06:3880::/29
Signature Algorithm: sha256WithRSAEncryption
1e:c3:dc:4f:fe:96:4d:aa:89:00:d5:c4:7f:e5:f7:39:29:89:
f0:bc:fa:4a:51:b7:63:ed:c6:b2:68:5b:c5:93:01:eb:b5:c9:
dd:e9:c7:28:4b:ea:3c:b9:cb:af:5c:15:c6:63:0d:a5:c3:b2:
6d:48:55:72:31:f9:82:05:9e:ef:45:82:78:c8:6d:de:e7:70:
f9:cd:20:a7:92:39:27:57:a9:22:5a:eb:95:da:ef:be:d6:74:
2f:dc:94:55:77:0c:b5:19:c9:94:ea:0f:13:ae:6b:55:33:21:
7f:49:b8:0b:a1:e9:4a:ba:03:81:b8:cd:bc:58:81:e1:1f:2c:
9d:c6:fa:ee:3b:c4:a9:25:c0:99:de:4b:47:3f:ba:4b:fd:4e:
e3:67:5e:e8:5c:15:5c:6f:b3:28:59:d4:26:ee:53:96:5a:4f:
ee:af:8d:2d:2a:40:c4:62:e4:48:c1:58:d5:53:64:52:b2:7f:
8f:f4:de:7b:b5:a2:7c:99:26:54:5f:4f:99:b4:25:58:ad:9a:
42:a4:27:85:4d:f6:df:5c:b4:06:fd:cd:08:55:e2:1c:90:f0:
fa:d1:91:f2:ff:0f:b3:c6:29:74:a2:1e:bb:f1:c1:6c:48:f3:
e7:63:08:3d:b7:ad:d8:b0:57:c0:d3:86:31:ca:0b:c5:39:29:
11:b8:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:21 2025 by rpki-client