Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fBRuN0_qkDT6xM2AdIJ6SaXPtdM.roa
File: fBRuN0_qkDT6xM2AdIJ6SaXPtdM.roa (raw, json)
Hash identifier: c/2NRIJUFJMyOF9XhPg1K1vCaxWkoRXoyJc4iNITJUM=
Subject key identifier: 7C:14:6E:37:4F:EA:90:34:FA:C4:CD:80:74:82:7A:49:A5:CF:B5:D3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A45309ADD0475C08ECA1469554D95
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fBRuN0_qkDT6xM2AdIJ6SaXPtdM.roa
Signing time: Wed 01 Jan 2025 19:49:14 +0000
ROA not before: Wed 01 Jan 2025 19:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59723
IP address blocks: 185.122.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:45:30:9a:dd:04:75:c0:8e:ca:14:69:55:4d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c146e374fea9034fac4cd8074827a49a5cfb5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:09:9b:e8:d6:69:29:a6:86:1b:37:be:1b:61:
eb:41:92:69:27:15:f5:ea:22:a8:57:a0:24:75:4b:
a0:2b:6a:e3:68:56:25:b4:26:d9:ed:aa:bd:b6:bf:
7b:df:f3:29:9f:d1:96:48:72:5d:55:12:88:61:4e:
a2:c1:96:b8:66:ff:ce:ed:70:2f:9e:d1:8c:f0:80:
a2:09:c0:f0:0c:06:c9:cf:03:f6:f3:21:86:38:9c:
fe:9a:09:ff:26:44:6e:72:94:5b:0e:62:dc:ae:ca:
be:59:1f:54:a3:8b:fc:20:de:2c:12:e2:9b:57:af:
41:44:d8:12:7c:83:b3:56:8f:c8:8b:38:9b:10:34:
1c:aa:5d:f4:4e:35:82:28:45:68:9e:e5:22:38:ab:
3c:1e:a3:4b:75:12:b6:e0:68:ff:b4:d9:72:96:dc:
32:92:18:e2:f1:95:fb:1b:58:73:fa:54:05:8e:4b:
e7:ed:36:49:53:c6:2b:6c:7e:0e:68:90:98:ca:73:
e8:2b:23:16:11:b1:0a:65:87:63:3d:a1:e2:db:b8:
e2:4d:d2:09:b2:fd:b0:4f:84:5b:92:d9:f9:f7:3d:
cc:24:4d:be:bc:8f:c0:41:03:96:29:32:dc:b0:a9:
7d:7b:8c:a6:1a:49:ca:58:13:a1:c7:13:4e:63:62:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:6E:37:4F:EA:90:34:FA:C4:CD:80:74:82:7A:49:A5:CF:B5:D3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fBRuN0_qkDT6xM2AdIJ6SaXPtdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1b:aa:27:80:5e:87:34:4c:be:8a:09:68:e7:58:db:56:ec:
5a:7b:1d:99:50:3c:33:e3:86:de:28:10:4d:d9:1b:db:e0:67:
97:eb:36:ac:c0:fe:b1:8d:c7:06:79:54:fd:f4:e7:8f:fd:61:
80:ec:25:49:f2:aa:18:19:45:51:8b:4b:a7:52:d3:9d:b1:ae:
09:80:2d:91:1d:5a:5a:bf:67:b1:ee:dd:9f:5c:ab:7d:37:56:
87:b4:19:e7:3e:59:82:eb:d2:ee:a1:2a:9f:7a:0b:6e:5f:02:
1a:a2:c7:ab:1c:e5:a8:51:48:72:fd:12:c3:5d:a9:f1:8d:ea:
d6:49:0b:d8:9c:ea:dd:cd:7f:82:60:7e:bd:2d:fd:6c:ca:4c:
59:28:2d:d1:e8:30:8f:32:e2:e0:a4:fe:a6:c4:7c:38:39:87:
55:b3:82:6e:bf:b3:71:fb:04:f6:ea:65:04:1e:cb:ef:29:c9:
21:fd:9e:3c:b0:38:2d:27:ce:e7:25:a8:c5:5a:98:24:d1:53:
e8:e6:01:98:81:06:2e:69:b7:b6:d0:ad:ac:4a:14:90:04:8a:
13:da:14:6f:c0:30:29:14:c9:09:13:e7:3c:06:02:b8:78:1c:
d5:82:7e:1e:12:59:18:fc:0d:09:ba:a2:be:a8:14:91:f2:19:
bf:30:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:17:45 2025 by rpki-client