Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-nvTmfsGDKxN0Jc6TGbgXpDcqEw.roa
File: 1-nvTmfsGDKxN0Jc6TGbgXpDcqEw.roa (raw, json)
Hash identifier: gerCFxMGJhosjPPDpeT4WiZ2sY0YZspC4pma/+pnEY8=
Subject key identifier: FA:7B:D3:99:FB:06:0C:AC:4D:D0:97:3A:4C:66:E0:5E:90:DC:A8:4C
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01956CC402CAD7C500AE3FDFBA3DE68101FC
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-nvTmfsGDKxN0Jc6TGbgXpDcqEw.roa
Signing time: Thu 06 Mar 2025 18:42:19 +0000
ROA not before: Thu 06 Mar 2025 18:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:c4:02:ca:d7:c5:00:ae:3f:df:ba:3d:e6:81:01:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 6 18:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa7bd399fb060cac4dd0973a4c66e05e90dca84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:17:73:ff:8c:fc:a9:b9:ea:af:29:bf:d1:
6c:6f:47:57:a5:f5:86:9f:a8:97:1a:23:0d:82:df:
06:b6:09:78:de:be:c6:1e:01:14:a7:f3:d7:9c:21:
f3:67:a5:2e:f5:5d:a1:f8:23:e2:78:d2:ff:35:b0:
54:51:92:0d:9f:21:87:54:64:35:ec:52:74:ec:bf:
63:85:16:e0:92:cf:ce:69:50:5d:15:21:0e:a9:ef:
b9:08:07:58:80:b5:a7:85:cd:10:ed:88:d1:76:73:
a3:e3:3f:7b:4f:cd:20:36:1d:b8:58:95:72:1e:d0:
c5:7b:3f:7f:fd:28:77:99:0b:f8:d1:e4:1f:25:e4:
af:fc:3c:1d:22:cd:e8:d4:bc:ab:76:1b:34:14:1a:
28:55:d5:82:93:ad:b7:95:00:c3:f7:88:d9:6f:63:
30:33:b4:6f:21:0d:e1:d4:45:db:03:9a:99:7c:60:
97:17:e0:97:b5:a1:f1:b5:c7:21:ae:47:27:ab:e8:
1c:51:5f:3c:5b:85:c2:ab:67:87:20:6c:0a:95:a1:
6a:09:49:ee:98:6b:9f:fd:fb:4e:6c:9d:76:39:ed:
eb:f9:bf:bd:7f:01:51:c6:b5:e2:3e:ef:46:0c:17:
81:d0:07:fb:0d:d8:49:59:c5:bd:d2:56:59:e6:77:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:D3:99:FB:06:0C:AC:4D:D0:97:3A:4C:66:E0:5E:90:DC:A8:4C
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1-nvTmfsGDKxN0Jc6TGbgXpDcqEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
00:53:2e:ca:a5:5d:9a:db:6b:80:5e:9e:cc:fc:c4:10:c4:a5:
75:4e:dc:2e:1c:35:fa:93:a5:e2:26:2e:14:7e:e0:8f:de:1d:
8e:38:45:78:ba:54:5e:67:03:15:60:3f:30:41:6c:1e:30:33:
27:32:d3:28:35:4d:40:01:e6:d8:19:3f:4b:36:6b:6f:2a:9a:
c5:97:1e:37:37:89:d2:8a:14:bb:35:36:e5:02:35:aa:b4:4a:
5e:d1:a0:19:54:70:ec:c5:91:0d:23:47:9d:e9:7e:89:81:cd:
00:17:75:72:52:41:0a:65:bd:e6:5d:b2:5c:32:3b:e4:ab:b9:
f1:83:00:b4:fa:25:c9:0a:83:39:5f:fa:81:00:18:86:42:57:
f3:45:9a:0a:65:84:50:7f:09:9d:36:76:7c:cc:09:27:2f:d2:
ac:ec:3d:e2:e7:a7:6d:3e:28:98:5e:58:0a:b4:95:60:67:bb:
c9:ef:81:31:a2:99:ff:22:e6:7e:b6:c4:21:43:82:ea:dc:d9:
1c:83:fb:93:f5:2f:bc:8e:3e:9d:95:36:7e:b8:ca:7d:91:61:
48:3d:a4:37:ba:37:66:4e:5d:fc:a3:fd:4c:d7:00:b8:e1:da:
3a:a9:02:47:d3:d7:57:03:2b:64:45:51:fa:de:ae:49:78:17:
7c:4b:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:49 2025 by rpki-client