Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa
File: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (raw, json)
Hash identifier: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=
Subject key identifier: 14:83:B6:07:A0:D2:8F:E5:4D:9E:A2:01:73:F9:F3:F4:C8:3E:97:FD
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019427B58DFC1AA14CC6B61EC51047259F6A
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa
Signing time: Thu 02 Jan 2025 15:49:57 +0000
ROA not before: Thu 02 Jan 2025 15:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61997
IP address blocks: 185.126.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8d:fc:1a:a1:4c:c6:b6:1e:c5:10:47:25:9f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jan 2 15:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1483b607a0d28fe54d9ea20173f9f3f4c83e97fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:b3:a9:0d:f0:79:97:ca:51:6b:22:ae:3e:
3d:b0:1f:da:29:8d:b1:65:31:9c:84:ea:0f:ef:81:
46:ba:cc:ae:79:f1:10:77:75:c0:f0:74:fc:8b:d5:
7c:aa:4d:1f:da:89:89:5e:28:ed:ea:8c:82:d2:44:
a9:c4:97:d9:61:8c:ff:8f:ee:68:1e:48:e4:60:79:
87:a4:55:fb:f7:00:1f:84:a2:e2:16:d4:e4:1c:79:
83:7e:ab:18:8a:04:a5:93:7a:13:74:de:32:f6:02:
6c:36:a0:75:09:e3:fc:0a:95:05:10:e6:1d:04:b4:
f9:83:81:a8:67:cf:35:20:81:c3:61:9b:cc:bc:51:
87:ce:23:35:f5:ad:6b:29:ce:9f:66:f8:40:22:73:
f5:a7:15:29:92:ae:cb:16:ea:fa:5f:e0:a6:8d:33:
23:7c:c5:86:ad:23:88:b2:86:1a:76:c6:c3:3e:00:
ad:56:56:9e:5a:ae:f9:99:a6:0c:4e:02:a3:be:3e:
9f:2d:97:ba:68:31:05:94:6d:52:bc:08:c9:57:40:
ae:03:2a:38:8d:76:75:bc:a6:2c:38:e6:ff:2f:de:
01:dc:ce:35:0a:93:89:f6:c2:4e:ea:73:34:b0:9c:
b4:de:dd:a7:95:25:72:c1:08:8c:c1:10:9c:84:a5:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:83:B6:07:A0:D2:8F:E5:4D:9E:A2:01:73:F9:F3:F4:C8:3E:97:FD
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.254.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a6:9c:1f:5e:1b:7f:71:d6:71:f5:a7:d1:cd:55:03:23:3a:
12:da:64:fd:e3:c4:4e:ed:ea:99:0a:5c:41:a5:e6:f3:05:99:
eb:1c:55:c7:bf:91:92:78:fb:5b:80:f4:be:cc:5a:c5:bb:46:
59:04:f8:6c:a0:5b:9b:91:15:78:bc:5e:3b:00:a9:81:6a:6f:
3d:c7:fd:1d:4d:0e:b5:c5:32:e2:c6:13:7e:e0:44:c5:cc:45:
01:69:0c:f8:d4:42:0b:0f:8b:2a:32:91:60:ff:b2:98:49:1c:
35:5d:47:e6:d0:55:dd:74:e2:9c:64:96:a6:43:66:4d:3f:ce:
54:11:7d:95:79:6a:4d:b3:33:73:cd:c2:dc:89:01:5a:bb:75:
0a:8c:16:fb:eb:3d:0b:f4:bf:c1:c5:4f:05:24:54:c2:0f:cf:
80:51:5e:25:66:0b:0e:54:17:2f:47:3c:39:5e:9b:cb:89:72:
ab:d3:3b:d7:79:b8:63:b5:71:cd:45:73:54:9d:1d:4d:95:5c:
51:fe:ea:84:0c:21:32:bd:d7:51:d9:92:cd:d0:d0:dc:fc:0d:
34:92:f2:65:54:4d:36:69:ee:eb:80:fa:9f:16:5d:8d:f9:2f:
b6:38:ec:4d:13:40:4a:f0:ac:d6:43:8d:fe:ae:28:e6:10:6f:
aa:67:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:59 2025 by rpki-client