Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rIf0kB8Rc3IRATRBayI1xPvP3QA.roa
File: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (raw, json)
Hash identifier: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=
Subject key identifier: AC:87:F4:90:1F:11:73:72:11:01:34:41:6B:22:35:C4:FB:CF:DD:00
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266AB927E84F339F16872868075BCF7C
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rIf0kB8Rc3IRATRBayI1xPvP3QA.roa
Signing time: Thu 02 Jan 2025 09:48:35 +0000
ROA not before: Thu 02 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35372
IP address blocks: 185.49.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b9:27:e8:4f:33:9f:16:87:28:68:07:5b:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac87f4901f117372110134416b2235c4fbcfdd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:73:68:23:74:ae:41:aa:cb:53:7b:a8:53:
12:82:c0:1c:0a:2c:fc:e7:54:4a:b3:d2:23:78:ac:
2f:d7:be:80:94:ba:0a:7d:42:67:fa:1c:4b:76:a7:
92:21:88:9b:64:f6:fb:55:cd:c8:ec:79:2e:a1:3e:
e0:08:bc:32:7d:c8:08:52:4e:bb:d0:45:cd:2a:14:
ca:a7:a9:10:1b:34:53:6f:e6:e9:6f:c4:09:15:13:
47:60:01:4c:7e:95:fd:e1:9e:b1:84:27:2e:eb:d9:
18:ff:f1:9b:2d:83:0e:67:48:a6:ab:25:d6:76:fd:
76:83:80:bb:b4:ab:82:7c:ab:1b:7b:9f:1e:14:83:
fa:b5:11:d0:f2:43:35:1f:d5:4a:81:0f:f7:65:fc:
6b:32:98:16:6b:a2:49:2b:44:60:0f:ba:73:c8:a0:
6f:e2:58:08:72:0f:57:46:ff:23:c9:a4:fb:da:83:
ac:ef:b0:34:4d:46:55:66:74:0e:6b:90:11:74:6a:
2c:85:88:9b:4b:ea:c7:4c:28:57:d1:cf:f6:04:e8:
cc:2f:a0:08:71:9b:76:0c:99:6b:ff:39:2f:58:b9:
98:67:7b:b1:e9:79:b7:0f:7c:9d:e2:c0:ef:1d:91:
43:b3:07:df:09:6b:5d:f7:b7:82:4d:c4:92:d7:01:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:F4:90:1F:11:73:72:11:01:34:41:6B:22:35:C4:FB:CF:DD:00
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/rIf0kB8Rc3IRATRBayI1xPvP3QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.104.0/24
Signature Algorithm: sha256WithRSAEncryption
07:10:4d:06:36:44:d6:c8:4f:3a:fd:40:f5:e6:cc:03:24:0f:
cc:65:fe:66:4a:dc:0a:4e:2f:b2:ab:48:c6:55:be:19:81:c2:
3a:fd:cc:79:6c:6e:1a:ed:56:eb:d6:06:4b:28:43:8a:d2:96:
6c:e6:c0:8e:29:aa:35:10:7c:be:ac:36:d0:37:72:09:12:24:
a9:b0:91:bf:92:da:7b:79:30:8d:60:59:89:32:e8:c3:79:e7:
4c:69:69:ec:7a:ce:e4:eb:52:c8:2d:55:3c:94:d7:21:26:5f:
85:84:48:0d:70:04:7b:fa:c9:89:dc:2c:cc:3e:ce:1c:59:02:
f6:d4:e0:19:9d:e4:d4:2a:ce:1b:c1:7a:21:09:31:30:62:cc:
41:82:ac:76:61:75:ec:a6:96:56:90:4c:c2:73:b0:2d:f2:ec:
95:d2:ae:3f:95:c5:4f:42:d3:83:eb:c7:bb:8d:f5:01:d5:cc:
9f:3b:11:33:01:2d:51:66:2d:5c:59:92:0d:21:14:a3:50:60:
1e:31:6b:2f:9e:e2:22:11:7a:86:8a:6f:cc:c0:dc:c1:ac:f9:
95:87:53:aa:f9:79:cf:96:b9:b6:af:9a:a6:06:11:04:74:56:
51:60:06:fd:63:73:d3:d8:2d:b7:e9:d6:01:b8:0e:b1:69:c4:
fb:bb:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:45:25 2025 by rpki-client