Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa
File: 1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa (raw, json)
Hash identifier: RYE6k3//z5KNEk7H3IQ1JZYxDGCNXiKaq546ajQsong=
Subject key identifier: FA:97:75:4C:C4:6E:5C:5B:DB:D3:2B:D0:B4:72:AD:DC:DC:18:AD:59
Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Certificate serial: 0195603A2C5C4A6E237F29BFCB38EC0443CE
Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa
Signing time: Tue 04 Mar 2025 08:16:20 +0000
ROA not before: Tue 04 Mar 2025 08:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 147.235.242.0/24 maxlen: 24
147.235.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:3a:2c:5c:4a:6e:23:7f:29:bf:cb:38:ec:04:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Validity
Not Before: Mar 4 08:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa97754cc46e5c5bdbd32bd0b472addcdc18ad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:b8:49:3e:29:5a:5e:f4:aa:69:b8:1f:22:
85:32:00:24:6c:e7:f9:6d:34:60:97:f7:6d:55:1f:
0b:7f:26:db:2a:6d:0d:05:73:f2:ae:44:b0:92:b6:
74:ab:f4:3d:07:78:01:a4:64:9f:1c:4e:e8:b6:02:
c9:34:bd:b6:e1:67:85:fe:d8:f4:e1:39:ef:72:6f:
3f:dd:c5:d4:b6:e1:8a:82:fa:37:79:5f:47:b9:ce:
96:5d:24:eb:57:07:c3:3d:a9:cd:16:7a:81:f2:89:
9a:15:24:a3:c3:58:2a:72:ad:0b:be:83:34:e9:17:
11:77:3e:f1:50:ec:a6:ae:be:2e:7f:ea:75:3a:a2:
04:a2:da:91:bc:78:20:42:6e:9f:7b:78:c3:48:fb:
a1:b2:c1:c1:f9:fc:1a:fd:2a:3c:e2:b4:22:99:75:
53:8e:17:9b:03:8d:fa:4d:3e:8d:90:f8:ff:76:55:
e9:29:82:80:c3:f0:fa:44:fd:fb:49:53:47:ce:7e:
3b:04:f7:01:92:ed:32:9b:5b:04:d5:2f:4f:25:4d:
dd:00:77:f3:0f:7d:66:af:c2:75:f8:f3:80:7c:71:
b2:b9:29:3e:f3:af:53:62:f3:98:fd:7f:31:84:e3:
4e:99:8b:c4:25:2e:5d:d4:af:d4:be:4a:24:9a:0b:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:97:75:4C:C4:6E:5C:5B:DB:D3:2B:D0:B4:72:AD:DC:DC:18:AD:59
X509v3 Authority Key Identifier:
keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/1-pd1TMRuXFvb0yvQtHKt3NwYrVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.242.0/24
147.235.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:92:fd:f2:27:40:95:7e:88:78:5a:eb:f4:ff:5c:f1:ec:72:
e8:25:8a:b6:6b:65:42:79:38:df:fc:dd:95:3c:ad:51:64:91:
56:a3:d8:3e:62:ea:e1:fb:e3:58:66:36:96:d4:5d:72:e8:c0:
2a:05:13:ab:2a:5f:88:62:8d:f8:37:20:16:57:a6:cd:14:5f:
00:17:7c:54:59:b4:ac:34:f1:a6:04:7d:ca:e6:ac:d7:c3:90:
37:60:2b:83:28:08:7f:52:6e:01:ab:7a:01:b9:c2:1c:a5:42:
96:a7:6b:ff:00:fb:91:93:38:54:92:34:54:a7:2c:2a:22:37:
64:68:ef:32:83:2f:75:d0:a1:e2:1d:3d:ad:49:76:fc:0b:64:
4f:7e:1a:fa:23:53:92:cf:02:8a:88:51:f2:d9:32:8c:0e:73:
94:94:77:9e:87:fa:ce:a6:dc:cc:74:30:98:c9:bf:78:c0:ff:
e8:d7:bc:d1:7d:e8:bb:f9:f4:88:7b:2c:ff:08:4e:80:2b:10:
e9:43:38:0c:ef:db:6e:36:59:28:a7:15:7e:d1:96:2f:8c:ab:
25:69:f9:72:45:a3:8b:5c:a1:29:79:93:d6:79:2a:ca:f3:f4:
e5:be:5f:bd:73:7e:9e:12:35:9a:4b:54:80:18:e0:30:cb:24:
98:57:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:06 2025 by rpki-client