Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/fYrpElZs1NsSNrkwEfo6WNxBdRU.roa
File: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (raw, json)
Hash identifier: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=
Subject key identifier: 7D:8A:E9:12:56:6C:D4:DB:12:36:B9:30:11:FA:3A:58:DC:41:75:15
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 0194228DE0B5CB64E33DDBCA30BB3F2C6842
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/fYrpElZs1NsSNrkwEfo6WNxBdRU.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198441
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e0:b5:cb:64:e3:3d:db:ca:30:bb:3f:2c:68:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8ae912566cd4db1236b93011fa3a58dc417515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:29:85:f0:45:71:52:8b:1f:40:7a:3e:52:
63:a7:3c:32:5a:47:20:f8:12:c5:d5:ad:48:06:91:
44:47:38:93:e9:a1:91:3b:ca:bf:cc:29:64:e8:ad:
85:aa:50:40:cc:7e:d5:a6:22:e0:ad:27:eb:40:c7:
c2:80:be:bf:28:bd:f0:9a:63:7b:59:df:1b:59:78:
5c:81:14:9c:23:94:52:e5:eb:4b:f0:2f:7e:f2:e6:
44:b4:a0:05:8f:7c:96:69:75:da:f1:45:f8:55:b7:
46:02:19:06:d6:f3:6e:b0:cc:29:ce:95:cb:00:0c:
f8:c7:33:2f:75:b8:62:dc:fa:90:47:e1:c4:51:00:
70:dc:6a:0e:23:40:bc:47:15:7f:a2:15:31:65:a0:
fc:bd:bb:e9:73:87:69:20:eb:a8:c6:bf:e9:2e:f5:
0d:15:33:19:e4:66:4b:23:2a:ff:23:7e:de:ee:ef:
0a:11:40:14:82:13:f2:81:6c:94:30:6b:f6:e9:66:
04:aa:67:ff:5a:ae:fc:6e:47:c5:9d:f3:b0:04:e4:
0c:f6:8c:0b:8d:84:10:cd:33:ca:4a:b2:46:e4:fd:
da:e5:f9:9e:3b:20:68:cd:f9:75:ee:2f:6c:1d:a4:
d7:90:91:e1:27:da:16:1b:c8:67:02:b8:15:4e:34:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:E9:12:56:6C:D4:DB:12:36:B9:30:11:FA:3A:58:DC:41:75:15
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/fYrpElZs1NsSNrkwEfo6WNxBdRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:35:f2:fe:18:23:69:da:96:c8:7e:1c:2c:a1:17:93:cd:1a:
08:ba:f1:68:61:de:d0:77:ef:48:47:95:61:88:79:8e:7e:a9:
0d:7f:0e:21:a7:b0:cd:c8:f0:c7:96:a0:e1:ea:10:95:d4:8e:
d0:85:8d:e6:c5:71:93:75:28:1f:25:e8:00:aa:a0:16:6e:09:
d0:02:e3:39:db:da:73:4d:1f:8d:db:55:20:d8:6e:aa:ee:83:
14:e6:65:9b:89:3b:8b:89:2d:fd:14:66:30:37:c1:b7:8a:7a:
f3:c0:9f:63:53:e3:4d:b8:eb:9d:6a:f2:4b:bd:63:ff:42:64:
f7:11:d3:0f:93:80:48:94:97:de:3e:0d:fa:9d:d5:22:a3:c4:
3d:d2:b6:46:4d:84:a9:26:a0:28:0b:f9:a3:79:46:aa:38:31:
a5:90:12:a7:c6:8d:c1:9a:8c:f7:2c:57:70:48:36:51:e2:d4:
7b:b3:18:61:a4:f1:c0:03:51:05:ab:07:6e:7c:4c:8d:55:70:
c4:51:3f:b9:09:3c:8d:72:7a:d6:68:6d:c7:ac:d7:0a:e4:8b:
0b:25:7e:23:50:fa:2a:49:b6:c2:81:d5:e0:27:38:cc:3b:84:
0a:64:39:25:8f:00:dd:59:42:ca:e0:fe:e5:ab:3c:68:ff:12:
13:77:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:15 2025 by rpki-client