Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fv6yppycFYOnKjqSu7N4m1n21Zs.roa
File: fv6yppycFYOnKjqSu7N4m1n21Zs.roa (raw, json)
Hash identifier: 6TWXHfCvxnax91UiORqC3t0t7ZWpiIZIbAqMx557rNQ=
Subject key identifier: 7E:FE:B2:A6:9C:9C:15:83:A7:2A:3A:92:BB:B3:78:9B:59:F6:D5:9B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C46FFEA734EE7745DC6E7CE3463A3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fv6yppycFYOnKjqSu7N4m1n21Zs.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215545
IP address blocks: 85.120.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:ff:ea:73:4e:e7:74:5d:c6:e7:ce:34:63:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efeb2a69c9c1583a72a3a92bbb3789b59f6d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:f4:16:e7:a4:2e:f3:b9:4e:24:25:b7:11:
be:e8:ff:0c:78:76:15:22:bc:2b:5b:5c:b5:b3:85:
cc:37:c9:d8:95:2b:c9:73:49:06:7c:e0:7e:d6:d0:
d6:7e:49:22:f9:7f:53:c1:e7:f4:de:eb:cd:68:50:
ce:0b:44:75:88:23:3f:e0:69:7b:50:fa:25:8e:90:
12:67:86:72:69:92:73:27:03:e6:41:e2:f6:fd:25:
c7:00:e9:a8:2b:1a:bf:8f:d2:67:d0:66:ff:88:e1:
4e:cc:16:e9:a1:67:29:ca:c6:fb:54:79:68:45:54:
9c:0b:74:cc:f4:a8:be:8a:ee:97:a7:e4:a7:18:6c:
b4:6a:62:e6:f0:0a:30:15:09:a4:08:35:f4:25:07:
9c:29:cd:3f:16:a2:77:65:ad:5d:28:3e:92:48:58:
a8:e7:4f:35:4d:24:69:28:b7:51:0b:d0:8e:07:eb:
9b:13:4c:80:8f:30:51:b8:0d:29:3c:6d:d1:2d:49:
c1:64:33:3f:ca:ef:6c:0d:db:db:3a:25:6c:d4:d5:
bc:e0:af:79:8c:2d:4d:c5:77:bf:e4:6c:98:03:17:
11:9c:99:14:5f:5c:db:a9:e7:b6:20:5f:94:a6:84:
6a:7c:7e:4f:b5:b3:73:bf:fd:49:6d:2b:3c:94:91:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:B2:A6:9C:9C:15:83:A7:2A:3A:92:BB:B3:78:9B:59:F6:D5:9B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fv6yppycFYOnKjqSu7N4m1n21Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.4.0/24
Signature Algorithm: sha256WithRSAEncryption
35:78:c5:53:6f:48:29:7a:5f:49:69:90:be:ed:07:a1:e3:b3:
c8:fd:35:c0:5a:dd:c0:ad:d4:90:27:85:9c:57:96:05:dd:14:
87:7b:43:20:2a:65:02:4a:70:16:39:d1:ad:41:13:24:8f:3e:
3a:a7:07:8b:84:f2:5f:5b:35:6e:11:0d:33:9f:d1:04:82:f5:
92:cd:0a:f0:34:0b:27:e1:6a:62:7e:60:77:7c:7d:cc:be:6c:
f2:9b:7d:17:78:31:28:b1:e5:24:52:5e:81:41:cb:5f:f5:05:
f5:7f:12:2e:89:2d:35:8c:10:d2:96:b3:a3:08:ca:25:9b:76:
50:0a:c2:0c:6d:c4:ba:0b:2f:6f:6d:28:59:4b:92:61:b1:5a:
1b:22:aa:25:d7:ff:1d:39:43:2e:8f:9d:79:a5:b4:6d:52:85:
ed:7b:49:74:74:db:4b:bb:7e:1f:6b:8c:9d:af:13:62:14:a2:
68:75:0f:13:61:5e:cf:06:f3:c2:5b:9a:55:45:f9:d5:b3:ca:
ba:77:c8:1b:ae:17:7f:22:b9:b3:cb:1e:45:3f:79:06:dd:22:
c5:ab:19:b9:dd:18:f8:6d:8d:79:e8:6c:8f:ec:68:e1:67:d1:
72:b8:29:53:1e:72:10:19:40:b3:fb:81:22:14:9f:52:5e:6b:
92:66:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:36 2025 by rpki-client