Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa
File: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (raw, json)
Hash identifier: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=
Subject key identifier: 7C:17:D4:47:A7:11:AF:FB:B8:0D:85:96:66:64:BF:85:89:D0:67:94
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F91E87E52707B1614FEA9DCF0E29A
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204281
IP address blocks: 194.12.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:e8:7e:52:70:7b:16:14:fe:a9:dc:f0:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c17d447a711affbb80d85966664bf8589d06794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:8d:e2:5d:b4:3d:d8:33:23:6c:0d:59:50:
9a:4a:90:fa:da:29:85:cd:32:31:f4:cf:0e:06:dc:
9f:22:d7:24:59:a4:5c:0b:55:82:11:37:96:d4:33:
06:2a:cd:2b:bb:ae:d3:30:36:83:0a:6c:b4:99:06:
99:97:eb:2f:db:e9:aa:1c:16:6c:2a:29:9d:ce:14:
9f:68:54:c0:fc:41:8a:e6:d7:5f:b7:51:e3:14:87:
02:b5:43:5c:6b:a7:d9:5f:d4:1c:8f:37:d3:77:66:
66:8e:64:43:4e:a9:d9:ce:85:2b:2f:44:2d:77:13:
f2:7e:a7:b5:9d:a5:14:87:4d:79:56:1f:f3:8c:dc:
5f:c9:f9:f3:3a:1e:c4:d6:92:be:83:40:88:2e:e4:
73:50:41:6d:2d:a2:a4:7f:ee:2e:8b:a3:f1:19:e4:
5f:b4:c2:22:95:fd:44:44:d9:70:40:1e:5d:dc:50:
6b:ec:da:fd:1d:7f:03:a0:43:7e:aa:e1:a5:a1:ab:
8a:44:eb:c6:9c:6a:db:33:2c:39:93:50:38:6a:28:
7e:40:f8:8a:68:82:e5:ed:51:b7:d8:86:d0:2b:c6:
ea:c0:f5:27:14:d2:75:9f:a8:07:0d:c5:4d:0a:04:
53:bd:80:44:56:0a:c1:45:44:cf:9e:a5:80:c1:0b:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:D4:47:A7:11:AF:FB:B8:0D:85:96:66:64:BF:85:89:D0:67:94
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8a:3c:ba:cc:b9:ec:49:7c:a8:14:0c:0f:2f:43:15:fa:e8:
48:ee:a4:19:09:ae:f0:3b:d4:5f:02:7a:5a:07:d8:ca:1d:29:
e3:42:72:aa:4a:38:b8:3f:a8:a9:a0:cf:ae:64:09:46:8c:4a:
d6:11:1d:f1:b4:13:d0:d3:69:82:b9:e6:68:1e:d2:36:df:17:
bd:cf:03:ea:be:3c:2a:26:9a:1b:5a:9d:55:a8:ea:19:aa:96:
a8:21:51:16:da:cd:5d:1a:8a:e7:87:47:62:eb:7a:fa:82:2b:
9b:ca:9f:0b:c4:02:6e:f0:f5:60:ff:45:2f:23:8e:a8:a7:1a:
04:d3:fb:11:eb:8f:81:d7:d7:6a:25:05:7a:72:94:6c:3c:cd:
e6:49:d1:ca:e8:f0:83:65:2d:bb:78:6b:1d:cf:35:b2:f4:68:
6e:15:58:d7:25:4a:3d:60:00:60:04:59:3d:f2:75:3a:d4:dc:
d1:96:ed:c5:9d:e9:1f:d9:ba:40:4e:3f:9c:db:27:84:95:2b:
ff:f2:46:bf:54:d3:8d:9f:c3:62:e2:77:fc:60:92:d4:41:c6:
6e:c2:4b:c1:95:ae:20:5f:f4:e7:38:6b:4c:46:c8:22:ab:c9:
06:ba:46:49:7a:6c:61:a5:28:71:65:8f:ea:01:38:27:51:0f:
b4:9b:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:01 2025 by rpki-client