Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fcBtkXfjS9kQlveEGfiEVLIB7J0.roa
File: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (raw, json)
Hash identifier: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=
Subject key identifier: 7D:C0:6D:91:77:E3:4B:D9:10:96:F7:84:19:F8:84:54:B2:01:EC:9D
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D725CF9574E4B0A131775CCED7A95F
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fcBtkXfjS9kQlveEGfiEVLIB7J0.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200260
IP address blocks: 45.92.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:25:cf:95:74:e4:b0:a1:31:77:5c:ce:d7:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc06d9177e34bd91096f78419f88454b201ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:ca:a5:ba:8b:b1:2b:f7:a3:c6:a7:8b:80:
a7:09:a5:16:ee:94:35:0a:15:e3:40:e9:8a:a6:e9:
58:d5:a5:f5:4a:c8:63:87:2a:67:6c:27:a4:b2:38:
3f:39:54:8c:87:1d:6d:f4:10:ce:d0:8f:38:e3:85:
55:cf:06:42:6d:56:f6:c2:a5:71:1f:f0:44:b4:f2:
9a:0a:94:1d:7b:02:2f:93:ed:87:4c:59:3d:78:5b:
27:80:d1:66:f2:f5:62:0b:58:4d:5b:eb:e7:db:2f:
e6:ca:d4:af:ac:8a:d3:ee:29:74:f0:92:dd:e7:fb:
78:29:69:c9:10:41:d6:ab:85:f9:be:e7:3d:1c:9f:
52:37:2e:93:f1:82:54:77:66:64:3b:88:06:36:d6:
f0:ce:32:7c:ee:73:77:a7:60:4a:bf:ed:b3:03:73:
42:bd:a7:9e:81:2a:6b:b2:3f:97:3b:2f:6e:98:2c:
d5:5b:1b:73:4a:dc:f4:c3:c7:80:ce:1f:17:bb:0c:
bb:6e:3e:ee:ad:1f:4f:f3:89:05:eb:8f:84:f5:d0:
98:62:32:82:28:b7:22:50:f1:d2:4c:ef:4b:45:70:
bd:82:6b:1c:b6:05:08:e3:40:30:ad:66:03:04:b4:
fc:c9:8f:7f:83:f1:fc:bd:8a:56:81:b2:74:1d:75:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:6D:91:77:E3:4B:D9:10:96:F7:84:19:F8:84:54:B2:01:EC:9D
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/fcBtkXfjS9kQlveEGfiEVLIB7J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0c:62:7f:1b:02:54:0a:e1:b4:ab:4a:6b:68:b6:a0:b6:11:
e2:4e:d9:3c:76:2a:4f:84:bb:b7:4b:ec:f6:16:8a:a7:66:6e:
a3:a0:74:b6:d5:2d:63:0b:0b:7e:6a:c2:46:e2:5f:82:57:54:
a2:c3:ed:d4:3b:24:eb:42:1e:49:7f:18:71:38:32:cb:3d:70:
7f:d1:fb:2f:fe:48:31:4a:62:77:ae:0e:75:90:15:6f:cb:64:
98:07:65:53:ad:9a:fa:94:eb:fb:52:31:35:65:94:19:4b:9e:
dc:f7:04:e4:b9:e2:bc:34:bf:06:ec:1e:23:e0:63:75:b4:9b:
b2:56:ea:c8:3a:28:7d:02:a6:ad:c2:28:48:1d:f1:49:bc:0d:
e3:94:f1:39:de:40:bf:6f:b9:81:e8:78:44:db:0c:0d:71:ff:
68:15:69:12:6e:33:4f:0d:c8:ce:2d:b5:b6:5c:86:e6:3a:8c:
02:e1:b9:d8:71:b3:0d:c2:63:d9:5f:00:25:03:b8:bd:cb:42:
ed:30:65:99:26:65:64:64:68:4d:86:bb:c6:46:ff:ea:b5:88:
e6:ab:67:81:a0:a7:84:e5:23:e4:1b:da:aa:68:19:ec:29:f6:
f3:2d:86:51:6d:bb:24:6e:b3:ad:bb:72:05:83:c5:66:e8:21:
08:74:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:28 2025 by rpki-client