Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fFv4rQw5G5kKcUCDwbphSGqQdBI.roa
File: fFv4rQw5G5kKcUCDwbphSGqQdBI.roa (raw, json)
Hash identifier: kWmnAiQ6We6G/EVL9lZBce7MYnkF7KwWivG0OVLi9TM=
Subject key identifier: 7C:5B:F8:AD:0C:39:1B:99:0A:71:40:83:C1:BA:61:48:6A:90:74:12
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5A43D543EC64B81277039CB654DDF
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fFv4rQw5G5kKcUCDwbphSGqQdBI.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15436
IP address blocks: 193.251.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:3d:54:3e:c6:4b:81:27:70:39:cb:65:4d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5bf8ad0c391b990a714083c1ba61486a907412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:5a:81:c7:1a:78:5d:cb:97:c1:85:bc:b0:
fd:cb:d5:d9:fa:88:4e:39:b2:51:fd:fe:47:62:02:
1c:d6:39:ba:a3:c1:a9:fe:8d:1f:3b:37:2d:5a:d6:
5f:c8:68:03:6f:b6:25:8f:de:dc:c8:d3:4c:50:05:
54:46:99:33:aa:ff:36:a1:99:1b:9c:10:e6:b8:bc:
6a:e5:39:4e:d6:35:96:98:7a:b5:c6:d7:e4:72:73:
ab:e0:9e:fd:ec:f9:33:34:bb:df:c4:7c:8f:01:48:
53:db:dd:9c:ec:5e:ca:74:df:b4:64:b7:d0:ae:3c:
00:9b:f1:0b:a8:8c:69:dd:8a:78:67:9f:d5:af:b4:
b3:41:35:e2:0d:8c:7f:24:bc:83:0d:cc:88:08:30:
39:50:00:c8:d9:00:a6:a4:40:5f:39:28:a3:84:0e:
60:9e:a0:ce:28:fe:63:fa:66:47:19:ba:cc:f3:cc:
0c:f9:09:ad:d9:f5:0d:65:de:64:60:75:ba:5b:7f:
4c:49:2f:96:26:3d:d6:c8:4a:91:36:fc:89:28:1e:
07:0b:1e:b5:a0:d7:3b:5a:c5:72:f6:50:98:0d:eb:
ff:75:2f:d2:32:97:b5:27:ba:6e:bb:4e:ed:e5:ff:
49:94:75:c0:76:53:e9:1b:e6:fe:22:24:81:29:ac:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:F8:AD:0C:39:1B:99:0A:71:40:83:C1:BA:61:48:6A:90:74:12
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/fFv4rQw5G5kKcUCDwbphSGqQdBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4e:19:4c:c4:20:ed:e3:7b:2b:9b:2d:82:c1:e3:50:7a:65:
81:be:6d:99:c3:ac:07:23:13:b4:41:53:72:9c:4f:8d:bf:3a:
48:ac:bd:8a:3a:9a:83:f1:ee:b9:0b:49:70:08:62:e7:37:44:
9f:42:dd:52:d7:cd:e9:02:b5:3f:0d:52:60:dd:31:eb:ef:7b:
f9:04:d0:3d:1f:6c:7d:61:7c:5b:14:2c:6f:92:6c:a6:f9:cb:
61:1f:40:24:67:44:d9:d9:d8:36:14:89:a5:06:c0:77:bd:eb:
a5:f4:48:02:f8:dc:f2:42:41:11:95:f2:13:1a:09:82:78:32:
32:d9:08:cc:aa:7a:e9:b8:6e:10:fb:93:3e:8d:01:98:6b:e9:
29:7e:89:8c:fa:0a:2d:04:c5:b2:2e:9c:0a:60:87:26:fa:fd:
5b:af:6e:a9:93:e1:23:c6:2b:f7:cd:21:52:78:37:f6:b1:99:
ee:13:31:02:ab:4f:51:fb:f5:4c:12:dd:7d:2a:e9:6a:bf:eb:
55:53:99:0c:43:a3:bd:96:35:f1:da:07:da:46:41:63:90:e7:
ec:9e:cf:a4:9c:70:eb:60:dd:8d:56:da:2e:d6:b6:3d:90:40:
81:f2:e8:35:e5:94:0d:2d:49:85:1a:73:f0:f1:73:e4:8d:37:
0c:aa:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:18 2025 by rpki-client