Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/8-FKPJHE6vcPzqBfhidoWPOxdAI.roa
File: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (raw, json)
Hash identifier: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=
Subject key identifier: F3:E1:4A:3C:91:C4:EA:F7:0F:CE:A0:5F:86:27:68:58:F3:B1:74:02
Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial: 0194228E055B3A05771404848E91DAE6160E
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/8-FKPJHE6vcPzqBfhidoWPOxdAI.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 194.246.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:05:5b:3a:05:77:14:04:84:8e:91:da:e6:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e14a3c91c4eaf70fcea05f86276858f3b17402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:f7:fa:71:55:80:7f:b0:05:59:af:1f:9f:
be:92:eb:25:8a:c5:ca:dc:ef:3d:4b:65:de:d0:dc:
3d:e0:08:4a:da:11:9d:b0:2e:a3:ca:60:dd:4a:0f:
fe:74:bc:f6:c2:09:6b:eb:73:d9:b5:36:1f:ea:03:
d8:58:76:a2:a4:41:b2:3a:03:7e:ec:03:bd:78:0f:
c4:14:89:1f:db:81:99:58:d3:5e:c4:ca:dd:bc:0e:
1f:d0:35:91:7d:f5:8e:14:a9:61:bd:de:89:ee:ec:
58:63:bf:1c:2c:0f:e8:f1:3d:92:c4:fa:22:4e:bb:
27:3b:63:fe:48:f4:c7:75:36:cb:14:d8:13:7b:7b:
84:59:bd:c0:12:0b:88:eb:bb:d6:a3:4e:a5:5a:d7:
c5:f7:99:48:2f:47:fe:0b:78:cc:88:a4:dd:ae:5a:
f3:8e:55:79:63:51:f3:78:64:29:7d:67:08:02:45:
65:d6:f4:45:bb:39:35:34:1f:05:45:60:08:54:74:
08:3a:8f:7f:ac:7a:37:18:d4:74:7a:5c:3f:8f:1e:
d4:a3:a7:00:99:63:10:a8:37:9e:21:a3:0f:0a:fd:
4b:d2:f7:8e:85:b4:92:8b:e9:b2:de:c7:a3:cc:19:
c6:9a:36:7a:a9:ba:24:27:f4:de:c9:1b:df:c5:c1:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:4A:3C:91:C4:EA:F7:0F:CE:A0:5F:86:27:68:58:F3:B1:74:02
X509v3 Authority Key Identifier:
keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/8-FKPJHE6vcPzqBfhidoWPOxdAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:66:9c:7d:c4:bb:8d:25:7b:38:a0:9f:ea:a2:8f:50:89:84:
c0:4d:13:be:83:29:9e:5f:c3:21:ae:1c:f9:6f:2a:01:27:93:
9f:49:db:d7:9b:3c:f6:1c:c1:3e:36:60:97:b3:e8:50:08:2c:
6e:42:fd:99:7b:45:b1:16:59:a9:46:7f:9b:12:95:c3:97:a7:
cc:9e:aa:56:7c:26:1a:b8:81:1c:33:e6:cf:a3:c2:e9:01:7e:
77:58:60:3f:8c:a1:5e:ff:3d:a2:6a:16:8f:25:c6:68:55:8f:
c6:fd:11:53:56:53:29:68:06:02:b2:ed:57:2d:72:dd:5d:48:
77:3d:b8:64:81:3b:fb:78:c3:d9:51:da:be:54:a2:5b:d2:70:
18:5d:52:64:ca:c9:0d:5b:59:4f:83:ef:a0:e9:22:94:14:85:
5c:93:50:0d:79:29:b7:ce:05:c6:88:75:6e:ca:f5:86:8c:76:
97:d5:08:c8:73:6d:21:db:c6:d9:7b:61:d9:7c:cd:93:6b:94:
6f:49:85:62:68:7b:49:cf:8c:00:9b:19:7e:f8:2d:2a:81:1d:
41:fa:a3:b5:2c:7b:b8:55:5a:d6:ec:10:73:21:92:a2:c5:a5:
68:8d:cb:0e:0a:1a:ce:c9:8d:2c:15:64:d5:2d:d6:56:78:ec:
61:ab:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:53:18 2025 by rpki-client