Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_DueDxWhxvTOSeCU53BfsymqLaw.roa
File: _DueDxWhxvTOSeCU53BfsymqLaw.roa (raw, json)
Hash identifier: JTMSUW4Duhbid7r5U8T0Uv/+HzVzRixoXLoc2jqX5zQ=
Subject key identifier: FC:3B:9E:0F:15:A1:C6:F4:CE:49:E0:94:E7:70:5F:B3:29:AA:2D:AC
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 04B8B372
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_DueDxWhxvTOSeCU53BfsymqLaw.roa
Signing time: Sat 09 Apr 2022 11:02:14 +0000
ROA not before: Sat 09 Apr 2022 11:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.150.204.0/23 maxlen: 24
194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79213426 (0x4b8b372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Apr 9 11:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc3b9e0f15a1c6f4ce49e094e7705fb329aa2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:14:c3:28:da:6d:e4:3d:d7:7e:b2:46:e5:
3c:f7:12:1b:2b:d3:d9:a4:79:98:b2:34:3e:e1:0c:
bf:08:4e:af:5a:31:ee:f7:34:0c:de:79:ba:a7:95:
da:c9:0b:67:1c:28:51:02:5b:32:64:df:98:5d:c6:
d9:4c:af:b0:2a:be:1f:b4:f5:40:db:58:f5:72:a9:
f4:0f:8e:af:9b:e4:83:fe:64:0c:1d:20:c2:c1:ba:
32:35:d5:11:a9:b3:0d:cd:a9:79:5f:35:13:55:7e:
64:6d:af:d6:ca:1b:30:2c:f7:2d:41:57:ac:74:01:
ed:34:ed:dd:93:e2:32:cf:e4:fb:f6:09:38:83:a4:
b6:e4:ec:3d:63:01:19:94:aa:a6:65:87:7b:66:36:
fa:35:a2:67:7d:34:b3:b7:e4:29:19:21:1e:b8:0d:
ca:a0:fd:8b:fe:57:88:d5:44:64:ce:b4:0e:09:a0:
35:78:8e:32:1d:61:d3:4e:eb:e3:22:6d:64:ed:49:
4d:4d:cb:1b:b2:fc:87:38:21:e4:b1:a3:25:95:6a:
35:62:f2:8e:f8:7b:fe:37:5b:d3:d0:00:74:57:09:
bf:ae:76:b7:df:34:6e:87:f9:c1:63:39:26:d3:14:
6a:45:43:2c:a1:ad:c7:bb:8c:5f:e0:7e:a3:aa:d9:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:9E:0F:15:A1:C6:F4:CE:49:E0:94:E7:70:5F:B3:29:AA:2D:AC
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/_DueDxWhxvTOSeCU53BfsymqLaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.204.0/23
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
58:08:46:0a:13:24:cc:b9:46:5e:bf:ed:59:3f:bf:fc:f4:a4:
3d:b1:ef:d9:5c:51:a5:95:ef:58:15:31:7a:bb:d8:a7:be:1b:
00:cd:ed:70:5f:2a:b6:e7:74:8e:13:0d:cf:9d:7b:e5:3a:ed:
3d:2e:09:03:46:82:e1:eb:cd:4e:3a:65:d5:25:14:49:60:07:
3a:56:af:76:16:6a:17:4a:57:f8:7c:2f:97:7d:c4:85:1d:3e:
ed:7f:6c:64:f4:d9:88:7c:78:0a:84:f6:37:d3:56:88:68:fa:
9c:e8:af:0b:26:46:a2:10:ac:5b:87:88:87:a7:22:2e:f8:aa:
fa:5d:65:0b:5f:9e:ea:7e:cd:a1:2f:51:e4:ca:18:be:a3:ae:
9f:e9:68:7b:1a:a0:14:8f:02:28:3e:e2:7f:db:45:5b:e7:60:
12:08:e5:7d:d9:cb:1d:df:04:32:ea:f1:5b:13:d0:a5:ad:c4:
bd:52:c0:51:14:a9:43:ff:a9:8e:0b:98:cd:f7:bc:5a:6b:ab:
2f:19:3a:98:87:70:81:fc:f6:2d:b7:11:d0:35:e6:74:c9:0f:
f2:cb:c9:16:e5:cf:ed:51:7b:45:84:31:4d:09:6a:1f:e7:7a:
09:70:69:6a:36:10:f6:fa:fa:78:94:c9:b0:1d:84:32:24:ed:
b6:09:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:31 2025 by rpki-client