Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/1-WBgAjJPuRyexfyhE7pZIai77Jg.roa
File: 1-WBgAjJPuRyexfyhE7pZIai77Jg.roa (raw, json)
Hash identifier: zLaRmB+93bkn/7W0orUviXnsNrK88DlmN/NWoaVcvTM=
Subject key identifier: F9:60:60:02:32:4F:B9:1C:9E:C5:FC:A1:13:BA:59:21:A8:BB:EC:98
Certificate issuer: /CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Certificate serial: 01856CE636565B1FF8A483CD79828B605D18
Authority key identifier: FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/1-WBgAjJPuRyexfyhE7pZIai77Jg.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39728
IP address blocks: 194.31.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:36:56:5b:1f:f8:a4:83:cd:79:82:8b:60:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9606002324fb91c9ec5fca113ba5921a8bbec98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:08:98:60:25:dd:77:49:06:5c:07:f9:78:
30:5f:b2:cd:2a:96:10:96:23:de:33:fe:8f:6d:3a:
7a:8c:36:0a:42:7e:9a:53:d3:17:94:7a:2c:78:21:
37:54:f5:96:a8:6f:56:f9:5b:32:52:62:a8:66:c1:
1e:f2:f1:19:8b:f5:fd:6e:6f:c2:b8:c4:09:d0:e1:
d2:7e:02:12:9d:b0:8e:05:18:bb:a8:40:74:95:11:
c0:54:2a:6c:70:a3:64:fc:84:ef:eb:b8:32:25:ac:
0d:b4:0a:1c:f8:4f:2d:c8:ee:fc:9f:5c:c4:be:ca:
04:0f:92:90:1d:a6:08:0c:0b:53:e2:e6:60:2e:93:
b8:c2:4f:68:ed:b2:77:c3:35:6a:2a:72:bf:97:48:
a0:22:56:18:88:a0:bf:67:bb:ed:73:3d:23:e9:b2:
03:f2:85:b2:cd:9a:22:e2:9e:fd:89:0d:7b:1c:35:
e5:a5:10:62:9e:d2:43:b7:ba:18:13:d2:73:1c:92:
2d:12:eb:4f:f2:6c:f4:18:86:60:27:ef:0a:3a:0c:
dc:30:e6:2a:37:f7:12:52:85:b7:9f:ab:80:97:3c:
13:eb:7a:22:7e:dc:64:63:c8:87:7e:ac:d6:e2:da:
e3:80:65:6c:4d:15:5d:e5:db:69:b6:11:f5:a0:14:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:60:02:32:4F:B9:1C:9E:C5:FC:A1:13:BA:59:21:A8:BB:EC:98
X509v3 Authority Key Identifier:
keyid:FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/1-WBgAjJPuRyexfyhE7pZIai77Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.152.0/22
Signature Algorithm: sha256WithRSAEncryption
20:3f:7f:40:0f:b1:14:58:67:d1:d0:09:e4:44:42:8d:3e:d2:
b4:b2:e2:31:b3:df:38:b1:cd:cb:8b:11:38:26:38:ec:c9:5f:
3d:0d:88:d1:db:51:df:bf:c3:e5:bd:da:5a:0e:fe:3f:44:bd:
a3:10:d0:d1:91:4f:7d:83:8d:e2:6a:5a:3c:e3:ef:4c:e4:6c:
cb:58:be:80:c6:52:59:99:2d:22:fb:45:d1:47:d0:bb:ee:76:
62:7a:b3:17:78:84:ca:4f:4e:93:76:7c:dd:32:20:5c:41:19:
fd:43:0f:78:52:de:19:68:1a:5b:89:f5:2d:b5:05:57:7f:78:
03:ae:3b:bb:ca:ce:b6:f6:35:7a:93:1a:ae:a6:12:72:c6:db:
38:bb:9c:8e:d2:f7:82:f9:c5:8a:d2:1d:b2:ae:9c:b8:86:1e:
b9:60:ea:dc:55:d7:e1:7a:20:fa:d0:b3:1a:52:46:65:38:af:
77:ff:d0:cc:bd:d6:3f:93:9b:fd:c1:6b:bf:c0:58:ec:4f:bc:
d3:8e:bd:a1:e8:3b:1d:3c:b3:ee:0e:21:91:78:f5:12:88:0d:
62:f4:0e:fc:f6:27:42:3c:6e:0b:45:c2:7a:82:3e:9a:74:63:
cf:38:09:a1:bf:2a:f0:89:56:30:23:18:66:82:99:c0:05:30:
ec:c6:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:44 2025 by rpki-client