Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa
File: 4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa (raw, json)
Hash identifier: +SG76G9IyTI0k0seOJpd2UmxDLN7P9YRF6si6eLLNeA=
Subject key identifier: E2:8A:09:34:76:C2:80:91:DF:55:26:83:46:4B:94:D2:DF:0E:FD:5A
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B408D08758F9ECB5355B71CB9866B2
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa
Signing time: Thu 02 Jan 2025 01:49:26 +0000
ROA not before: Thu 02 Jan 2025 01:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64249
IP address blocks: 147.189.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:08:d0:87:58:f9:ec:b5:35:5b:71:cb:98:66:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28a093476c28091df552683464b94d2df0efd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:f9:bf:ee:f1:0c:5f:f9:fe:ea:0e:62:a4:
d9:d7:9d:97:38:49:61:f7:07:07:aa:2e:6d:f7:9b:
14:f3:1a:93:3d:83:d4:04:e7:de:9d:3b:a0:35:9a:
3f:dd:1d:69:06:f2:fb:a0:3b:06:00:e9:7b:88:4c:
0b:e2:63:88:7d:2c:fc:f7:d5:de:3f:45:b1:b3:43:
5b:d7:3c:f1:68:3e:68:5c:80:92:86:b0:ce:6e:f7:
ae:0b:db:2b:85:a2:21:8f:9b:89:8d:8c:4d:fe:b7:
a3:8b:2c:d0:0d:44:72:bf:9f:2c:fc:89:1e:d8:ea:
c4:ff:f6:72:35:f0:3f:5e:f8:d0:6e:5a:02:f0:3c:
f2:ab:1d:39:a6:87:87:a6:eb:61:cb:e0:90:0f:9c:
d6:a1:8e:08:f0:b3:0f:ed:60:99:b1:77:67:cc:48:
02:9b:2e:bd:c8:ec:0e:95:0c:9f:f6:2e:8c:5b:31:
51:78:77:ef:b4:44:3b:07:a7:8d:e2:4d:6f:1c:5b:
7a:85:2c:80:07:4c:3d:8a:3a:2e:36:68:c6:42:d7:
a4:31:96:c2:53:dc:2e:95:ed:29:4d:d0:dd:f7:79:
45:55:11:ef:ac:1e:c4:8e:94:a2:32:68:b9:65:0e:
a3:12:81:ba:7a:0d:4b:2c:37:56:92:2c:94:6d:c4:
bb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:09:34:76:C2:80:91:DF:55:26:83:46:4B:94:D2:DF:0E:FD:5A
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4ooJNHbCgJHfVSaDRkuU0t8O_Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a0:6f:3e:10:4e:6c:73:8a:ec:41:a2:ae:97:9f:1f:3f:8c:
59:6a:32:04:bb:f5:90:03:d5:88:2a:bd:a5:78:eb:d4:68:2a:
8a:d1:33:a1:ad:98:0c:a1:8f:9e:d0:18:f6:11:a1:bf:5b:c8:
3b:0c:3d:47:13:b7:79:da:af:93:fc:f2:de:14:60:1c:64:67:
90:2a:12:e5:61:fe:53:6e:d9:d1:5d:6d:d3:69:2e:aa:60:47:
16:13:4f:75:1f:6b:75:df:a4:b5:36:4e:fd:1f:ff:87:df:9f:
93:93:ce:54:d3:9f:72:9d:af:e1:5a:26:55:f7:66:8f:70:68:
59:e1:e6:33:b6:1e:88:a9:c8:f8:56:57:4e:9d:c6:52:24:a2:
be:8b:b2:7c:07:ae:99:35:8e:d2:ba:94:ab:2d:ce:20:f5:f9:
3a:8c:eb:e3:9d:e4:72:38:8d:08:91:e4:dc:be:57:25:34:4e:
d7:2b:50:20:21:3a:b3:fe:79:bb:86:a2:06:db:3b:4d:9d:8b:
9a:73:0e:49:0f:10:d6:82:a9:8b:c0:4a:83:64:c2:ee:a5:56:
f1:2c:ae:47:96:7b:70:67:d2:fc:00:4b:2b:20:9d:05:f6:e6:
54:55:3f:61:25:79:3d:32:03:eb:c1:7e:a7:e1:dc:fd:69:f2:
1f:c4:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:15:37 2025 by rpki-client