Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/_HboziFCCXY6Aftni-9e_QXHS7Y.roa
File: _HboziFCCXY6Aftni-9e_QXHS7Y.roa (raw, json)
Hash identifier: 1Dtm7p4VO9zPNWsz+P/VL1I6c+v4X7GMgtJoAtf8pBU=
Subject key identifier: FC:76:E8:CE:21:42:09:76:3A:01:FB:67:8B:EF:5E:FD:05:C7:4B:B6
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 01942747BC7653E669F30931173E7E2CE61F
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/_HboziFCCXY6Aftni-9e_QXHS7Y.roa
Signing time: Thu 02 Jan 2025 13:50:00 +0000
ROA not before: Thu 02 Jan 2025 13:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3308
IP address blocks: 193.8.36.0/24 maxlen: 24
193.8.37.0/24 maxlen: 24
193.8.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bc:76:53:e6:69:f3:09:31:17:3e:7e:2c:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 2 13:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc76e8ce214209763a01fb678bef5efd05c74bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:69:9d:23:f1:e1:e8:ea:f4:03:a0:c3:7f:
83:ca:2d:6f:76:82:f7:9a:f0:35:f3:65:32:a4:a4:
fd:e9:87:e5:d7:4e:e3:79:8f:ef:04:0a:5a:fd:f1:
15:75:d5:46:e2:f8:d0:c7:56:03:0f:25:a2:d9:1a:
95:53:60:17:b2:10:f5:20:36:aa:3c:19:55:36:6d:
be:98:cb:a1:dd:7f:ed:00:c6:b8:96:46:9a:bb:ec:
5e:a6:7b:ed:d7:66:75:3d:30:59:37:5d:4f:d0:e0:
da:9c:02:2a:28:91:ff:4a:df:0c:b9:bc:a9:78:a2:
e1:25:d5:b4:fb:4d:ac:cf:a1:43:17:d8:49:34:be:
6e:76:c1:08:a0:14:f0:9c:14:7a:a8:8b:40:7f:62:
44:40:c6:95:bf:a2:5d:89:21:b8:7c:25:9e:35:46:
70:f7:74:4e:b1:75:3e:4e:01:eb:60:fe:91:71:e1:
1d:8b:c2:e7:80:8b:61:7f:09:e2:82:86:3d:7c:99:
fb:88:ca:83:c0:e6:ee:3d:93:62:2f:50:f3:7e:c9:
68:5d:b6:4b:3f:35:64:53:dc:95:f4:8f:c3:24:3a:
dc:df:5e:69:8a:45:1b:5e:f9:22:b1:8f:ad:a5:ed:
51:cf:22:7a:59:3d:02:62:1e:a4:c3:37:86:b5:4a:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:E8:CE:21:42:09:76:3A:01:FB:67:8B:EF:5E:FD:05:C7:4B:B6
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/_HboziFCCXY6Aftni-9e_QXHS7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.36.0/23
193.8.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:37:81:d3:e8:7a:96:f0:6c:ea:6d:19:e8:de:ad:fa:3e:13:
ee:36:3e:7d:b9:ee:fe:1e:0c:2b:06:f8:29:90:71:d3:06:b5:
db:af:e7:d4:47:39:c9:8b:22:50:1d:e6:c8:da:7c:47:9f:70:
60:c5:ef:3a:b1:7b:9e:35:09:c6:4f:e2:8f:23:2f:f4:06:db:
ff:8d:df:78:77:75:b3:a7:96:03:f5:aa:c3:3e:bf:c8:2c:87:
5f:1a:32:26:78:58:b7:2f:8b:02:fb:b7:cc:40:49:ff:50:62:
ea:4d:9b:43:12:46:36:5d:11:c5:e2:f8:d9:63:48:44:f6:02:
48:3b:a3:f1:a4:24:78:7a:d9:5c:48:6d:f8:6e:54:a6:49:93:
dc:36:ec:ce:b4:bd:40:72:ac:9e:b1:28:b8:1e:fe:5c:75:48:
f1:a1:ff:47:e0:25:74:6c:68:75:f1:83:6d:68:43:8c:29:1c:
95:b6:e8:49:64:00:9c:5a:3f:46:24:6b:19:52:fc:4f:92:11:
9a:2b:51:0f:91:12:4d:4c:29:14:6f:32:21:be:71:70:55:ee:
73:03:0d:1a:28:37:38:6f:58:d2:7f:af:89:e3:90:4c:d3:61:
97:33:7c:32:f1:91:ef:2a:b4:0f:f2:99:25:7a:4e:9c:7e:a8:
7f:cd:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:32 2025 by rpki-client