Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa
File: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (raw, json)
Hash identifier: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=
Subject key identifier: 15:BC:A7:8F:80:BA:CD:D4:60:BB:A8:08:AB:6F:96:C4:7E:93:FC:B0
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 01942444DA96AE23D1B711A787E5453827DC
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.188.240.0/24 maxlen: 24
193.188.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:da:96:ae:23:d1:b7:11:a7:87:e5:45:38:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15bca78f80bacdd460bba808ab6f96c47e93fcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:18:36:43:0f:5c:27:7b:14:9f:e4:a0:51:
d0:27:cc:9b:4f:5d:a3:20:37:39:a0:23:43:1b:35:
ac:5f:1e:ea:a0:7f:03:04:42:29:a7:78:0d:61:05:
55:c2:98:40:61:f5:57:75:ac:84:92:ef:64:bf:1f:
28:a0:f8:56:01:3e:3a:0e:69:31:23:45:78:34:99:
fa:7a:13:56:6a:3e:c8:be:18:6c:a2:fb:c6:44:9b:
41:d4:95:e2:f1:f0:1e:2e:a6:c4:e4:31:e9:3c:0d:
15:08:86:c8:0c:6c:f4:83:41:53:c3:04:5f:59:a4:
fe:20:d7:fd:0d:9b:d6:74:4b:eb:a8:32:3d:55:ea:
8d:a4:45:e9:73:64:0c:53:b8:78:92:7f:25:28:59:
81:c2:8e:88:4f:b6:96:30:c5:19:f6:bc:fa:0c:8b:
02:92:af:ac:c0:c8:c7:2c:02:76:24:2f:da:44:e5:
71:34:38:fa:d1:3e:13:cd:cc:6a:94:64:74:0c:8b:
bc:15:3b:17:04:26:bd:89:84:1e:20:33:3f:6f:49:
00:fe:84:f5:1e:b1:b2:e1:9c:9d:72:da:a0:59:69:
d0:a6:66:3a:b4:6b:40:77:b9:1e:b9:9b:6b:84:e1:
f1:db:06:91:dd:78:d6:3f:b2:b8:4f:da:b1:6f:7d:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:A7:8F:80:BA:CD:D4:60:BB:A8:08:AB:6F:96:C4:7E:93:FC:B0
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.240.0/24
193.188.245.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3c:d2:0a:4a:ed:27:0a:62:fd:e2:28:65:fa:5e:b7:84:34:
57:f7:48:ad:7f:89:c5:2b:3f:9c:86:0e:95:6d:0d:8b:68:89:
f3:ea:39:1d:49:cf:44:2c:ae:96:ca:fd:46:eb:34:78:29:55:
93:15:0e:98:34:67:81:0a:0f:38:11:f6:1b:83:25:1e:7a:5b:
27:73:45:41:b9:48:41:d8:db:8c:cc:fb:44:27:0c:91:d6:9e:
9b:8b:fd:9a:f3:9b:16:33:81:29:d1:a8:37:a4:42:e7:69:62:
b2:a3:f9:60:54:8f:b1:37:7c:a9:5a:f8:a1:02:62:92:ac:d6:
2b:44:a2:a5:83:4e:2e:97:f9:c5:c8:08:3b:d9:5b:08:fc:13:
fc:12:be:85:24:18:65:89:f7:bf:29:24:6d:20:e6:81:cd:66:
ba:33:93:aa:e4:38:e4:6a:61:93:e8:24:1b:66:94:32:ff:56:
9c:94:3a:3f:00:5b:71:1b:0b:8a:27:61:44:2f:d0:7d:3a:0e:
ba:30:1d:c2:cd:c8:1c:df:9d:94:c1:04:ba:99:4a:31:1f:6d:
f0:0f:23:fc:00:fe:ab:79:40:46:e6:8e:31:61:f4:6f:33:bf:
1e:0c:2d:a1:e2:99:9c:2b:ef:01:02:13:68:27:b0:d9:10:72:
bf:7d:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:50:49 2025 by rpki-client