Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fsNgs8L3r9VKuUxHgB3FYDjNqtk.roa
File: fsNgs8L3r9VKuUxHgB3FYDjNqtk.roa (raw, json)
Hash identifier: b6qFxopox4YBDDE1aqc+Vi91lI4Ge7qaETTVl5IMZX0=
Subject key identifier: 7E:C3:60:B3:C2:F7:AF:D5:4A:B9:4C:47:80:1D:C5:60:38:CD:AA:D9
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF60CC7812AE4688D18687156E0E9
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fsNgs8L3r9VKuUxHgB3FYDjNqtk.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 147.185.196.0/24 maxlen: 24
207.244.197.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f6:0c:c7:81:2a:e4:68:8d:18:68:71:56:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec360b3c2f7afd54ab94c47801dc56038cdaad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:cb:a4:b7:80:34:7a:d9:44:51:67:d2:40:
d4:c8:f8:c1:e4:d8:d0:2d:c3:80:33:25:09:c1:aa:
6d:47:57:2b:23:c0:b7:37:14:bc:46:43:ac:8f:97:
0e:4a:de:1c:46:19:54:f7:dd:83:36:63:5e:4e:51:
e5:8a:8f:88:76:2c:fd:ac:73:52:4e:12:db:66:24:
4d:1a:c5:2d:ec:25:6b:65:04:1d:fd:d2:b5:3f:d7:
68:20:4d:fd:32:f7:23:c6:da:68:69:75:fe:8a:b4:
b1:0b:3f:bc:9b:42:54:37:fb:79:e4:2f:d2:48:e0:
48:b5:2e:5e:7c:56:73:51:35:0e:6c:f3:5d:1e:42:
a8:0b:58:0b:1b:64:79:8c:3d:f2:a2:4f:30:e7:bf:
9f:0c:8b:05:22:92:df:d5:6f:07:d5:58:74:25:a5:
e0:41:75:d2:88:58:5c:54:22:30:f2:0b:a2:ab:ac:
55:ba:a6:c2:0a:85:82:1d:16:f9:e2:13:71:84:67:
18:fe:e1:ac:f1:9c:6c:a5:1f:91:7b:e6:fe:9a:17:
9a:8a:30:32:5a:26:5d:f5:b7:9b:a5:4c:53:ab:20:
5e:60:2c:7a:ba:ce:1b:c5:c1:b6:f2:60:1f:d5:7c:
eb:8d:3d:12:ed:d1:3e:ea:0d:85:36:52:33:ef:8d:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:60:B3:C2:F7:AF:D5:4A:B9:4C:47:80:1D:C5:60:38:CD:AA:D9
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fsNgs8L3r9VKuUxHgB3FYDjNqtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.196.0/24
207.244.197.0-207.244.198.255
Signature Algorithm: sha256WithRSAEncryption
4c:e3:ab:a7:5d:5c:f3:0a:d8:5e:04:fa:76:0e:08:16:3b:1d:
01:72:24:37:10:08:7f:f1:b9:4f:c4:ca:af:5d:ca:02:e4:c9:
d0:55:b6:82:7c:42:45:55:5e:21:5f:37:d0:3d:a5:dd:18:7e:
0d:06:08:a8:3c:cb:f9:02:ad:7c:5c:0e:5b:0b:1e:0f:dc:5c:
24:ad:a4:82:1e:31:8e:61:24:f4:3f:d2:12:98:cd:e6:47:cc:
c9:7b:2c:33:da:01:fd:b8:84:11:de:b7:33:7b:d0:59:c1:14:
6a:39:05:ba:9b:d3:9d:4a:23:a0:db:5d:29:d0:2f:42:55:3f:
12:69:8f:63:5a:78:d9:c1:1c:37:05:9d:e5:31:90:fe:30:81:
4c:12:08:15:f4:3d:31:bb:94:e7:e5:90:09:0b:0c:30:96:b6:
5d:ff:c5:f5:97:54:0c:49:14:13:8a:94:68:15:08:b2:d8:51:
f5:75:1b:66:0d:a5:f8:76:9d:47:58:16:63:9a:6f:a1:a5:e1:
d4:c5:4f:69:c9:2f:8d:1e:28:67:96:e0:d2:40:01:6a:10:84:
35:74:a3:c6:27:09:a7:e5:66:35:56:3e:6e:9b:59:40:f1:53:
7a:0a:52:3e:cb:31:73:3b:6a:c0:6f:39:5f:a9:75:87:7e:2f:
69:89:ec:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:38 2025 by rpki-client