Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUyauZFzWLubSyadnmzbsZyl6iM.roa
File: fUyauZFzWLubSyadnmzbsZyl6iM.roa (raw, json)
Hash identifier: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=
Subject key identifier: 7D:4C:9A:B9:91:73:58:BB:9B:4B:26:9D:9E:6C:DB:B1:9C:A5:EA:23
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0195468D574BBB75B1CCBF2F2E0B03A482D3
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUyauZFzWLubSyadnmzbsZyl6iM.roa
Signing time: Thu 27 Feb 2025 08:37:02 +0000
ROA not before: Thu 27 Feb 2025 08:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 973
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:8d:57:4b:bb:75:b1:cc:bf:2f:2e:0b:03:a4:82:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Feb 27 08:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4c9ab9917358bb9b4b269d9e6cdbb19ca5ea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:44:4d:1c:82:3c:20:31:e3:95:e1:2b:36:
17:e0:f8:52:5b:2b:8e:de:e0:1b:e2:ea:73:ef:03:
69:a2:0a:6c:67:4e:47:b6:a9:b6:cc:59:28:98:88:
5f:fe:b7:96:04:31:18:61:38:7a:a0:be:47:2f:d5:
33:2d:b3:17:27:3b:5f:a8:1c:1f:59:56:55:7f:e4:
4d:ee:d9:a6:0c:c8:25:4a:97:6b:3d:16:69:a1:4a:
94:fe:84:90:86:24:ed:03:30:45:79:b4:1d:12:7c:
36:46:56:c5:ab:a2:d4:39:e3:8f:dd:2b:a0:91:74:
bc:ba:f4:78:c8:de:a9:9f:13:81:f5:28:5d:a0:aa:
1b:3d:af:15:ae:91:03:ca:3d:a5:ae:7a:6f:7e:66:
0c:a4:03:41:9f:75:95:b3:c1:d7:06:cd:b1:2f:67:
dd:73:69:a3:fd:95:33:09:27:18:cd:ca:d6:51:6a:
c1:62:b8:88:90:a7:cd:b7:65:f3:5d:07:ca:b2:48:
d0:14:14:74:24:a0:7d:7e:52:d5:07:35:c8:32:a0:
3e:2b:51:31:10:51:a9:59:88:ab:40:3a:4b:8f:d0:
36:d5:43:52:7b:28:f8:15:0a:b3:f1:9d:a1:8a:d2:
33:51:b4:08:e5:82:7f:c1:67:81:4f:da:5c:d3:91:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4C:9A:B9:91:73:58:BB:9B:4B:26:9D:9E:6C:DB:B1:9C:A5:EA:23
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUyauZFzWLubSyadnmzbsZyl6iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:48:21:72:12:8f:b2:98:ca:b2:39:a4:5d:23:59:33:b3:68:
49:5d:62:01:64:9a:d7:54:6b:b5:93:18:06:86:94:d4:f5:0e:
09:ea:d6:12:e2:2c:c4:a0:20:4f:73:72:eb:12:62:38:24:2f:
28:36:1c:00:d4:3b:fe:67:a4:01:d9:35:55:35:9e:d3:55:43:
0b:cf:57:bf:f7:d5:4e:54:94:89:8b:c9:1d:7c:17:75:09:20:
be:59:11:e3:33:35:a2:0a:16:89:47:a4:f7:ed:84:db:e9:a7:
28:24:6b:61:99:16:6a:71:4b:c0:5f:7e:b1:2b:c7:d3:83:3a:
50:c4:60:27:e7:2c:b0:f2:7f:d4:95:de:61:50:62:ac:52:99:
17:5c:8d:78:75:73:95:2c:50:21:6c:58:ac:ef:84:38:02:73:
5b:b0:3d:ba:05:fd:f2:3b:e5:7b:a2:b7:0d:98:a9:25:39:88:
50:dd:68:f1:38:b6:96:e5:65:fa:7e:c9:94:b3:9e:f4:58:35:
e4:1a:27:5b:26:23:5f:6b:2a:40:51:b7:63:16:d8:7e:76:6e:
78:25:ac:bf:d8:ff:4e:71:43:22:8d:74:02:56:f0:6f:a9:7c:
65:e3:0e:6b:89:81:d7:3c:c1:2f:6b:9d:1d:57:e4:03:d0:74:
8a:e6:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:47 2025 by rpki-client