Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/fvo32ZlXLNUWfNKLhRu-uClyC2U.roa
File: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (raw, json)
Hash identifier: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=
Subject key identifier: 7E:FA:37:D9:99:57:2C:D5:16:7C:D2:8B:85:1B:BE:B8:29:72:0B:65
Certificate issuer: /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial: 019421B23EA8CE3729402648410F1D229E5A
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/fvo32ZlXLNUWfNKLhRu-uClyC2U.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48345
IP address blocks: 194.0.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3e:a8:ce:37:29:40:26:48:41:0f:1d:22:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efa37d999572cd5167cd28b851bbeb829720b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:9d:22:21:d9:27:c4:ee:f0:ec:c3:bf:ff:
a2:6a:41:8b:0a:fd:8b:69:bd:27:29:5a:c0:32:d7:
e7:bf:9d:d7:d6:b3:31:a3:e5:8b:b5:65:4b:af:c6:
07:f5:b8:f9:69:ec:97:42:99:c8:53:fd:2f:06:37:
07:5b:63:4b:8b:13:c7:55:46:54:0d:24:64:fa:1b:
ca:89:0a:49:cc:18:cf:7f:d0:3d:e3:c7:5a:b8:c5:
af:52:ad:5a:d2:d6:ee:9a:09:c8:46:ff:6c:ef:2d:
48:b7:98:58:cc:09:54:15:ee:fe:74:19:33:ad:01:
e7:bc:8c:eb:c7:f7:df:08:fc:e4:7e:b0:01:57:38:
56:a4:8a:01:b5:3e:f4:2a:32:6d:2f:3b:a4:a9:10:
1f:c4:e9:80:a2:8a:15:b6:6b:51:8a:74:85:59:94:
ed:b0:51:5b:b1:5a:dd:a5:d1:f7:30:38:58:0d:30:
d2:79:79:fa:83:b6:ad:ee:35:43:0f:cb:8e:e3:6f:
39:35:c7:4b:cd:9a:05:32:15:cb:11:4a:b4:63:96:
cf:57:39:f9:87:51:39:94:d1:36:cd:e5:b2:92:7e:
3b:3c:33:75:54:cc:f1:ab:7a:77:3a:b1:10:f8:09:
71:cb:64:27:95:42:89:b3:16:e3:e9:f8:99:fa:78:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FA:37:D9:99:57:2C:D5:16:7C:D2:8B:85:1B:BE:B8:29:72:0B:65
X509v3 Authority Key Identifier:
keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/fvo32ZlXLNUWfNKLhRu-uClyC2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.215.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f9:9a:f8:98:08:d4:73:84:07:ac:a2:2e:dd:f3:e8:7f:69:
17:24:b4:14:12:0d:85:bc:cb:48:71:67:b4:6f:d7:37:29:aa:
3e:83:1a:7c:60:c7:b0:44:14:26:27:d7:1a:81:65:6c:3d:ab:
97:01:5c:1b:37:4e:e7:35:ba:d8:d1:8d:bd:50:fa:1c:54:05:
e7:eb:2e:69:db:11:5e:0c:c0:1f:2c:c2:74:a1:92:62:af:c5:
70:68:0c:d6:5b:94:1f:fb:29:4e:a4:20:d1:6c:f6:d0:26:6b:
38:c4:74:2e:83:c7:ec:2b:38:9f:e3:75:46:aa:fb:89:79:64:
da:37:5d:e4:4d:b8:b3:7f:67:ae:dd:0d:6c:1d:ce:33:8a:41:
19:d2:51:3b:a5:f6:e4:12:fe:b6:18:6c:41:d1:83:3e:19:75:
9c:74:72:ef:53:13:21:ac:7f:66:c5:7d:a7:d2:1b:1d:9b:82:
68:7e:fe:04:fa:20:3d:59:7f:2e:16:ef:29:92:4f:5a:8c:76:
d3:fc:44:c3:41:49:3f:96:fd:84:bd:3d:f8:39:05:b9:a1:5b:
9a:35:af:8f:8e:82:ab:d0:72:d3:30:4e:e3:3f:61:cb:35:1d:
16:17:0a:fc:c1:ef:90:9a:db:9b:43:f4:f9:43:5b:f8:85:6d:
63:3a:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:16 2025 by rpki-client