Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa
File: 1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa (raw, json)
Hash identifier: l+CJQac/GH3qcNGwSYOMkKACx6s8h1Uwqg0edh7Y8jc=
Subject key identifier: FB:B4:4F:08:E5:C1:7C:82:96:D3:BC:36:FE:07:D7:FA:5E:71:8F:05
Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial: 019427B5E596DF34A2F3EA02148037A8AE70
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa
Signing time: Thu 02 Jan 2025 15:50:19 +0000
ROA not before: Thu 02 Jan 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208864
IP address blocks: 185.192.144.0/24 maxlen: 24
185.192.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e5:96:df:34:a2:f3:ea:02:14:80:37:a8:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Validity
Not Before: Jan 2 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb44f08e5c17c8296d3bc36fe07d7fa5e718f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:67:ce:6e:ca:b0:ce:66:6b:39:ad:c7:fb:
cf:c3:d4:52:54:8a:a0:32:de:d0:c4:80:bc:01:fb:
df:ad:d0:b0:b8:3b:bc:b8:d8:e2:35:45:3f:dc:4a:
c7:93:e0:45:8c:37:df:91:11:64:5d:38:8b:5f:6b:
ec:40:a0:04:05:5c:c0:ef:67:c4:8b:89:ae:30:de:
fc:83:15:ae:6a:47:58:af:e3:7d:08:8d:c2:ef:21:
5d:5d:94:63:3c:2f:de:95:e6:e7:48:5d:37:e2:61:
1b:e5:d5:ca:43:c1:af:96:59:d4:e5:98:4c:2e:c6:
73:59:5f:b3:5a:65:97:77:8d:13:83:d6:58:75:ef:
a5:35:90:13:da:df:49:f9:06:19:02:ef:a3:4f:55:
7e:4b:88:bd:8a:1e:f9:9b:79:04:91:53:ff:6c:65:
6d:0a:9b:35:91:68:a1:ea:78:b5:50:70:79:4e:71:
56:57:e9:5a:d4:eb:8e:23:c6:29:58:d4:4f:b8:da:
66:31:22:2a:61:79:24:34:66:38:37:68:d8:df:ba:
a6:73:82:06:f6:8d:4b:f6:f2:25:fb:ed:6c:2a:65:
e5:4a:8c:3a:30:04:36:a5:9c:92:61:50:26:32:e8:
c2:4f:df:9a:e8:b2:cb:27:1c:de:cd:c4:3a:b0:1e:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B4:4F:08:E5:C1:7C:82:96:D3:BC:36:FE:07:D7:FA:5E:71:8F:05
X509v3 Authority Key Identifier:
keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.144.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:39:e2:0b:e9:84:10:07:33:46:c4:88:97:c1:73:9d:46:87:
84:13:75:e5:da:dd:21:81:c5:c0:33:7e:67:9c:bb:71:68:6c:
84:0e:cf:19:97:84:39:0c:59:d4:a8:0a:d8:e0:46:8b:76:65:
e2:e8:af:4e:7b:4c:31:a6:c4:b2:c1:49:f8:e8:14:bc:84:dc:
e9:28:e8:1b:ea:00:31:2b:8b:75:6c:57:0f:17:cf:e2:48:77:
cc:96:55:b2:03:82:de:51:67:75:79:79:70:c4:b8:e4:d8:18:
67:a3:95:79:9b:c3:14:ee:f5:13:4d:6d:11:fb:b9:4a:34:c4:
4a:d9:da:d7:9d:8a:17:b8:22:e0:f6:4d:81:ce:96:d7:df:eb:
2a:c1:a9:ff:b0:74:41:35:fe:55:1e:68:61:15:98:31:ca:66:
ed:0c:19:89:0b:6f:ee:11:ae:43:a4:5e:6d:d0:1c:da:6d:5a:
c9:57:a4:1e:62:3d:e5:b2:39:33:25:3d:0d:fe:52:10:91:a6:
b0:d9:90:b1:db:d4:af:b0:42:bd:d4:9a:25:30:4a:c1:7b:e5:
52:f4:7a:69:f1:fa:99:52:27:13:89:2e:36:b4:f0:15:28:54:
de:84:99:44:5f:32:7b:b7:bc:1f:6a:58:60:51:c0:47:8d:1b:
89:ee:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:38:50 2025 by rpki-client