Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FBn8UknXk8vivSlq9wzPZvWqOkU.roa
File: FBn8UknXk8vivSlq9wzPZvWqOkU.roa (raw, json)
Hash identifier: OdMSCjqfnHGB7XX0sNNBFVxs0dBHqXJ2t7qFly4YPyU=
Subject key identifier: 14:19:FC:52:49:D7:93:CB:E2:BD:29:6A:F7:0C:CF:66:F5:AA:3A:45
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D55CF05FE77D963B96654444BE2E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FBn8UknXk8vivSlq9wzPZvWqOkU.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204510
IP address blocks: 194.209.4.0/24 maxlen: 24
194.209.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d5:5c:f0:5f:e7:7d:96:3b:96:65:44:44:be:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1419fc5249d793cbe2bd296af70ccf66f5aa3a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:b9:a3:89:78:9e:54:4b:d9:a5:c8:89:1a:
e5:44:ee:5d:72:0e:e1:06:ec:ec:60:d9:4b:ff:e8:
70:e1:9e:6d:cc:cb:84:3e:45:41:0b:b5:ec:3f:b7:
9d:c2:40:d6:81:64:6c:85:6d:97:60:9f:bc:d9:13:
62:f4:3f:fb:79:a8:2d:41:9f:57:88:98:c0:67:f8:
f0:e5:cc:27:c0:e9:24:44:88:06:30:d8:10:e4:be:
ef:fd:c3:b1:11:43:3b:79:59:71:04:aa:d9:ed:0d:
4b:e6:ad:f9:68:11:ea:4f:3d:74:a8:e2:29:1c:ac:
e0:51:a8:a3:d8:4a:2a:16:34:03:bb:55:11:9c:c1:
c5:8c:3e:29:f9:1c:36:1a:fe:37:06:11:fb:c0:08:
f5:43:8b:4f:f2:7f:b2:82:82:70:c4:bf:23:3c:3b:
3b:ec:f4:32:fa:0f:c4:98:b6:f6:d9:5c:34:94:d2:
c9:fa:a0:1f:0b:7c:e8:0a:0f:f3:f7:3a:c3:ae:91:
de:0d:4f:1b:58:18:a8:1e:b8:70:57:d1:42:d8:b5:
56:6b:fe:b3:c9:d5:94:e2:0d:fb:bd:b9:01:17:26:
e6:9b:d7:59:d1:80:85:72:55:e3:4e:ce:c9:c5:c4:
36:1f:76:94:b9:db:63:c7:9e:3a:fc:db:e9:7f:d7:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:FC:52:49:D7:93:CB:E2:BD:29:6A:F7:0C:CF:66:F5:AA:3A:45
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FBn8UknXk8vivSlq9wzPZvWqOkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.4.0/24
194.209.28.0/24
Signature Algorithm: sha256WithRSAEncryption
89:42:aa:a5:07:bd:0e:e0:dd:a5:06:5c:37:75:fd:87:ad:1f:
46:b8:e8:bd:2a:62:9e:db:88:2e:0f:ca:02:b1:10:89:e0:4d:
9b:53:5e:2e:f8:02:ad:02:02:fb:8e:d9:c7:6f:fd:6c:cc:57:
6a:03:25:0f:62:8a:ec:aa:61:b5:19:bf:3a:21:f1:ae:10:6e:
95:38:a4:eb:5e:1a:b6:8d:e5:05:1d:87:81:ff:f3:4a:68:2a:
39:6b:cb:ba:86:bd:a0:6a:d6:17:2c:16:cd:16:d6:62:52:e5:
7b:d7:4b:aa:64:9b:cb:13:c4:aa:d4:bd:75:ad:d4:14:ac:1f:
68:d7:e1:88:69:3e:16:b9:39:7a:22:70:ef:ab:70:75:fe:fd:
9c:5b:7a:42:38:77:9b:35:bd:b9:33:8b:12:9c:ac:e2:69:d3:
09:fc:36:00:70:b6:36:11:da:37:53:1e:7d:44:61:ae:ca:ef:
e1:ce:ef:5d:1f:6b:a7:81:25:13:8f:d0:f7:90:05:b1:95:64:
69:90:93:c4:cf:cb:c1:bd:12:0a:06:0d:77:f5:b6:07:17:6c:
60:7f:99:c6:f5:88:9c:ac:80:b3:1a:7d:32:f5:32:d4:69:45:
3d:93:b4:c2:cc:ba:bc:54:a7:dd:da:34:04:e5:51:0f:15:8a:
99:0a:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:07 2025 by rpki-client