Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xzu7MUojkfbh1rh1xvAd4aN19XM.roa
File: xzu7MUojkfbh1rh1xvAd4aN19XM.roa (raw, json)
Hash identifier: PIiEUop69o+jPPGkGqP2Qy9p9ZveRVP5LGXfbuc0uAY=
Subject key identifier: C7:3B:BB:31:4A:23:91:F6:E1:D6:B8:75:C6:F0:1D:E1:A3:75:F5:73
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0FA82C0FC891C5BC96CF2798F338
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xzu7MUojkfbh1rh1xvAd4aN19XM.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400810
IP address blocks: 185.240.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0f:a8:2c:0f:c8:91:c5:bc:96:cf:27:98:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c73bbb314a2391f6e1d6b875c6f01de1a375f573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:3e:5e:fb:15:8a:0b:b3:aa:40:8f:10:00:
90:52:fb:ac:6a:b8:bb:58:01:9e:3e:44:9c:42:13:
c4:34:91:1c:ba:a0:f1:de:96:92:f6:c0:0e:6e:e5:
85:ec:a8:c7:6e:3c:17:bb:17:24:36:91:e7:8b:4a:
de:a8:05:48:04:a2:7b:3f:76:d9:5b:93:10:c8:ef:
f5:a3:6d:37:5d:57:ea:65:97:7b:32:3e:d6:bd:7e:
e4:cb:00:1b:84:e3:2e:54:9b:44:b0:31:de:01:d9:
9c:31:4f:e9:13:18:52:8c:0e:04:ea:7a:12:0f:7a:
d8:ef:cf:41:06:98:93:a1:af:d2:03:63:a7:e4:fb:
06:4e:63:56:74:85:c7:96:6f:28:4d:21:75:73:39:
a3:c9:22:18:c6:1d:6f:f5:31:11:8b:1c:ad:b4:d4:
a5:6e:49:d6:9e:e6:da:45:6f:d1:a1:53:32:58:e7:
8b:70:91:0c:79:cc:58:68:2c:f0:9a:2a:eb:ce:3c:
39:37:d6:27:f1:22:17:01:d8:b8:af:eb:36:d3:ca:
9e:ce:19:7e:0e:35:e0:2f:51:1e:04:d6:b3:a7:9d:
a5:44:ba:ae:1e:2d:48:4b:cb:94:e8:03:65:89:b2:
bc:e7:21:15:d0:1e:ae:8d:f5:03:73:7f:cd:5b:3d:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:BB:31:4A:23:91:F6:E1:D6:B8:75:C6:F0:1D:E1:A3:75:F5:73
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/xzu7MUojkfbh1rh1xvAd4aN19XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.134.0/23
Signature Algorithm: sha256WithRSAEncryption
34:db:e0:3e:da:49:da:cb:c3:bc:30:ac:79:51:85:ee:d8:2f:
df:31:eb:eb:d1:c1:2e:58:38:53:27:c4:66:bc:93:09:db:c8:
6d:bd:2b:54:49:99:8b:ea:81:a1:a7:22:f4:75:83:6e:7f:c5:
f7:e7:1e:fc:8c:99:25:fe:6c:52:82:58:63:c4:4b:2c:45:24:
db:a6:d3:19:20:30:94:3d:7f:97:fe:12:1b:f2:c5:02:27:72:
51:9e:fa:bc:67:f8:14:18:25:0a:a0:47:cb:49:28:a0:d0:5b:
98:72:eb:49:8b:a2:39:3b:23:a4:9d:d0:70:6e:17:ee:0e:0f:
09:95:a2:5d:5e:78:9b:14:7f:bf:d3:19:84:5d:60:fd:21:63:
31:b8:08:c0:27:db:ec:e5:00:d0:96:dd:d9:d2:24:42:6e:24:
7d:b0:8b:26:f3:45:87:41:01:71:6d:a3:f9:0a:5f:aa:36:e6:
f8:97:69:49:f4:4e:57:4a:72:2d:a8:f2:91:9e:6c:77:b4:c2:
fe:8f:cc:ca:c3:03:57:dc:f7:d8:63:94:c1:00:79:7d:eb:d5:
11:71:99:64:cc:67:01:55:84:69:db:e4:fc:b5:de:09:d9:08:
5f:4d:c4:a7:ae:bc:51:50:28:83:4c:a2:4c:fc:2a:d5:d5:70:
86:fa:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:40:21 2025 by rpki-client