Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa
File: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (raw, json)
Hash identifier: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=
Subject key identifier: 14:1B:6F:D3:34:0A:82:94:89:19:5C:26:3A:25:AB:26:07:59:5D:34
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0195383612B55962BCA4F42A59284CC4272A
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa
Signing time: Mon 24 Feb 2025 13:47:02 +0000
ROA not before: Mon 24 Feb 2025 13:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:36:12:b5:59:62:bc:a4:f4:2a:59:28:4c:c4:27:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Feb 24 13:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=141b6fd3340a829489195c263a25ab2607595d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:6c:31:fe:e7:f5:58:85:6f:a9:a9:6a:2c:
35:99:a1:bb:94:1c:65:b2:69:ae:4e:5a:44:b8:ff:
60:03:8a:10:08:ef:ed:42:58:5b:72:68:0d:a5:ea:
5a:a5:1d:6b:c3:55:75:ab:47:4a:b6:b5:e5:be:0e:
f8:ac:d2:44:0f:38:b3:20:5e:b8:e8:ab:ca:d8:05:
5f:68:50:bc:d5:44:03:46:1f:5a:65:6c:02:5c:8d:
8c:f6:ae:99:00:c9:9a:8c:e0:95:2b:24:f1:53:fc:
f2:7e:e1:05:fd:ec:1e:48:3c:bd:b8:4c:5c:b7:19:
b9:28:6f:06:8a:d1:34:7d:47:57:e6:67:02:89:ba:
56:3d:cd:34:ff:fc:64:00:eb:e1:23:0a:94:82:5c:
ac:20:4f:86:c4:b5:86:38:0f:5d:07:09:fe:8c:38:
b1:a2:1b:2c:c7:f1:10:d8:ef:fa:6c:be:f0:6d:49:
a8:a2:44:3b:65:e8:7a:b8:be:4a:f5:67:5a:56:01:
1b:42:52:6b:b5:c7:9a:77:26:57:8e:c6:ff:9f:a6:
ce:c3:0f:25:1c:0c:fc:e2:b9:06:97:b1:f0:13:6d:
d3:47:f9:a8:5d:33:6b:f9:aa:b9:53:79:41:91:09:
f2:4c:8b:b7:7d:e5:9f:61:9b:8c:fd:1d:09:46:71:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:6F:D3:34:0A:82:94:89:19:5C:26:3A:25:AB:26:07:59:5D:34
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3d:4a:9d:81:b2:23:44:a4:17:df:93:a3:af:b7:51:cb:b4:
96:1d:30:7c:92:45:33:ed:e6:ec:16:ff:fd:97:50:9c:4e:40:
21:d0:4c:59:a9:5b:d8:56:ee:a3:2d:bb:c8:38:4a:e6:35:3e:
1b:ca:8e:d0:fd:7e:5b:62:70:32:fc:ab:3a:59:52:c8:0b:fa:
01:bf:bb:4c:02:7a:fa:0a:a3:94:89:a4:0a:e8:c8:26:8b:81:
7f:f2:1e:db:eb:ec:01:3d:9c:db:e7:f0:6e:c1:d4:e0:20:42:
42:9e:ba:a1:da:0c:25:26:ae:4b:4c:12:65:05:64:c5:b4:c0:
05:d7:63:a6:f7:fc:b6:d7:ed:fd:1d:c6:72:b0:ff:38:e4:46:
07:7f:87:2f:8f:55:f8:f9:08:60:29:18:f5:8e:11:82:97:a2:
2b:af:63:1d:2f:ed:85:cf:76:bb:87:93:55:72:a5:7d:13:db:
55:c1:30:f5:e2:c3:a1:fd:69:f0:85:f1:51:e7:27:a0:87:db:
c3:0c:c4:67:e0:de:30:87:9a:e4:0d:b5:91:6a:6d:dd:de:3a:
98:3e:57:33:c9:db:d1:ea:d4:3a:13:9d:ef:76:60:04:64:1e:
f3:ed:ae:fa:aa:d2:e6:89:74:77:ba:fa:41:af:78:17:4a:7d:
3b:f8:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:37 2025 by rpki-client