Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/fLRTTBlGuXvzenVsLXjVIru2ZhY.roa
File: fLRTTBlGuXvzenVsLXjVIru2ZhY.roa (raw, json)
Hash identifier: K+Pyp4HdZQZlYpDx7COlUM/X5sosLmMqlyaPbzQnWwQ=
Subject key identifier: 7C:B4:53:4C:19:46:B9:7B:F3:7A:75:6C:2D:78:D5:22:BB:B6:66:16
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019420D6527FCEEFDE82D146DEFF01E89042
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/fLRTTBlGuXvzenVsLXjVIru2ZhY.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62131
IP address blocks: 193.201.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:52:7f:ce:ef:de:82:d1:46:de:ff:01:e8:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb4534c1946b97bf37a756c2d78d522bbb66616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:e0:87:66:ad:7b:65:d0:a5:0f:ec:bf:d5:
8f:48:6d:00:ba:13:42:8a:cf:fd:41:7d:08:d0:51:
f4:d8:bc:29:50:e6:19:85:9f:81:2c:b6:26:b3:ee:
8a:3c:d6:4d:73:b2:6e:26:4d:97:73:a2:c9:e8:36:
1b:56:34:80:5a:82:0b:79:e1:b6:9b:33:81:7e:e1:
19:a2:d3:5d:7c:a6:ac:0b:7c:18:31:bc:bf:92:3f:
95:b0:36:d1:d5:8a:f6:7d:f7:67:6a:a2:d2:1c:0b:
97:c9:b0:9f:9f:73:31:4e:27:40:4d:f5:b8:11:18:
9e:6c:1a:bc:37:f2:8c:a9:54:aa:6a:ee:6b:0e:91:
99:98:30:25:fd:2a:4d:2c:d2:cb:51:32:a1:3b:cb:
75:81:67:54:dd:66:a4:92:8b:e9:3b:42:71:c0:98:
a0:31:5f:6a:a4:e7:40:49:99:18:17:3b:c8:98:ae:
ae:bf:95:7e:0c:f3:1d:95:fd:4c:d7:5c:97:6e:4b:
0e:af:02:ca:8c:63:77:10:c9:4e:8f:14:7a:cd:0a:
49:48:78:0c:d8:a6:73:92:43:de:84:53:d8:0e:9c:
d8:dd:4c:6d:ad:8b:f8:33:4a:23:19:64:bb:4c:b1:
1a:f7:9e:b4:53:4f:4e:68:b4:87:c1:7c:e0:95:66:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:53:4C:19:46:B9:7B:F3:7A:75:6C:2D:78:D5:22:BB:B6:66:16
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/fLRTTBlGuXvzenVsLXjVIru2ZhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.96.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c7:68:0e:1e:0e:4f:ca:c9:84:ed:dd:c3:a3:95:7c:36:ed:
44:e9:fd:15:3c:a5:05:53:0b:e1:c0:6f:f9:a2:fc:1d:0b:ce:
fc:48:99:54:79:2c:3d:3d:53:d2:c1:49:4f:72:18:d2:18:e9:
23:95:3e:f0:cf:c3:8d:aa:bb:40:2a:df:1a:74:d5:40:d5:03:
4e:2c:8f:b4:b4:7b:cb:c3:05:fe:aa:80:24:34:7f:a2:d8:ce:
6a:1b:a2:9c:6d:de:22:df:8c:72:98:c1:73:ed:0b:b3:5a:4f:
5c:8c:d5:6f:cf:96:fc:db:9d:c5:ee:49:42:3b:3d:b6:d1:98:
33:a0:5e:a2:0a:a3:a2:29:1f:b3:2b:93:67:52:3e:1f:9c:ba:
73:e8:bd:5d:2d:5c:e4:07:79:d6:cd:ad:4e:06:4d:29:9a:0e:
c1:c3:01:81:53:a7:d1:5e:02:c6:d9:8d:a3:fb:d6:63:12:71:
5c:8c:5e:fb:3d:70:4e:3e:a1:b9:98:85:42:97:47:be:11:de:
d3:b3:30:33:c2:f1:6f:d7:a0:92:d4:6a:17:8b:89:37:81:a7:
61:a0:0b:b6:c3:a0:f4:c9:94:a1:ad:0c:95:52:4f:47:dc:8b:
17:3a:91:c7:dc:c8:35:43:63:06:83:6d:d7:e6:dc:57:0d:f4:
f6:25:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:43 2025 by rpki-client