Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fbwE92U5dctp5VbDv0fVeduK-Ik.roa
File: fbwE92U5dctp5VbDv0fVeduK-Ik.roa (raw, json)
Hash identifier: +2qiVnpGDjUFgPsGPgwz4zr899DTubApK71wJmZ4iwY=
Subject key identifier: 7D:BC:04:F7:65:39:75:CB:69:E5:56:C3:BF:47:D5:79:DB:8A:F8:89
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E37AF9076207CEE163ABD0DD86BF1
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fbwE92U5dctp5VbDv0fVeduK-Ik.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:37:af:90:76:20:7c:ee:16:3a:bd:0d:d8:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dbc04f7653975cb69e556c3bf47d579db8af889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:64:2f:86:b1:4f:18:c5:51:a3:3d:f5:21:
73:2c:9e:a9:19:07:2e:89:a3:da:0b:c6:e2:96:d3:
27:15:c4:ea:ea:ca:07:87:08:b1:a6:46:54:0d:a9:
8a:7e:c0:a4:a8:34:e0:c4:b2:a9:84:f5:c3:c2:1e:
0c:8b:7b:a6:bb:76:98:8c:c0:99:cf:b7:98:39:99:
af:76:da:4f:a3:e5:67:94:24:22:3f:ae:28:bf:3d:
af:af:4e:35:39:5c:1d:b9:77:f1:b9:1f:18:6e:48:
85:5e:1b:a2:86:5f:59:fa:de:8d:0b:a6:64:7f:bf:
f5:28:f6:72:59:fd:71:02:72:7c:3e:9a:41:89:f8:
6e:44:7d:c9:e6:91:5d:7d:fa:b3:cf:59:a3:aa:ae:
57:57:6f:6c:e9:8f:9b:fa:c5:4e:5e:93:78:8a:5a:
13:ea:14:24:3b:ad:c1:2b:77:6f:5a:41:0d:79:fc:
3c:63:f4:b4:f2:cb:6b:33:fb:96:e9:d5:c0:6c:68:
76:62:2c:7e:08:ef:a1:6b:40:31:d9:c2:4c:c3:6c:
b9:d8:69:0c:4a:38:cf:3c:89:81:49:b8:3a:4d:5f:
3c:ab:8c:cb:cc:55:6a:23:fd:ff:da:ed:80:8a:64:
3f:4a:58:28:fd:c6:9c:ef:f1:0c:00:7d:a9:e3:09:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:04:F7:65:39:75:CB:69:E5:56:C3:BF:47:D5:79:DB:8A:F8:89
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/fbwE92U5dctp5VbDv0fVeduK-Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6f:aa:de:88:7f:f0:aa:f2:5e:43:cc:53:33:5a:a2:b0:c3:
1f:6e:3b:13:be:20:57:7c:1f:cb:11:72:23:a2:98:23:cc:58:
b2:21:a8:e8:1d:0f:fb:e7:db:f5:b8:68:c9:99:6b:9b:31:8e:
d6:6e:d9:49:40:ad:2d:ad:d3:eb:bb:bf:5a:92:f7:78:83:59:
a5:2d:69:80:14:6f:dc:f8:6a:19:f0:b8:9c:1f:14:5d:37:29:
35:b7:e1:aa:43:c7:68:b3:3f:d5:c1:c3:9e:1e:8d:ab:6f:b0:
30:a0:cb:93:7c:e4:89:eb:f4:38:6f:55:f4:16:dc:b4:4d:be:
81:b3:d8:be:d0:8b:12:36:2c:eb:29:cc:ec:df:f7:50:78:15:
84:ab:9f:c2:43:27:3b:52:3a:e6:8d:31:81:db:c0:ff:20:ab:
18:97:db:f8:1d:f3:78:21:8b:f6:82:5e:b2:c2:5b:5d:ca:11:
76:94:df:b0:54:f1:d9:1b:b9:68:c8:61:88:ad:14:ae:da:f1:
5e:fa:4b:37:3c:6c:04:4f:9b:01:7f:04:35:31:8c:69:af:cd:
59:29:c4:c6:3d:9d:4b:e2:a8:04:31:08:a7:78:7d:35:ce:ec:
1f:e4:6d:b6:67:8e:c3:f0:30:60:8f:05:8d:98:a2:b8:da:62:
8d:b4:ab:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:16 2025 by rpki-client