Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fn4bCHhE2mgenCV3saUyJ3wIf3o.roa
File: fn4bCHhE2mgenCV3saUyJ3wIf3o.roa (raw, json)
Hash identifier: tdqt9E/lrwh/MC0nm4wVLMAcxfLDHd+LSNFWE6Z4Bls=
Subject key identifier: 7E:7E:1B:08:78:44:DA:68:1E:9C:25:77:B1:A5:32:27:7C:08:7F:7A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A4935B014B2E78DE36A41E2346589
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fn4bCHhE2mgenCV3saUyJ3wIf3o.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133480
IP address blocks: 185.190.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:49:35:b0:14:b2:e7:8d:e3:6a:41:e2:34:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7e1b087844da681e9c2577b1a532277c087f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:e0:3e:96:18:fb:52:67:59:10:db:88:95:
87:28:49:c5:27:1b:9f:63:de:de:ab:4c:c0:c4:76:
82:c5:39:df:cb:6a:9c:50:bd:ab:96:92:9a:89:c0:
3f:38:ea:cd:01:df:78:4f:37:c6:10:a7:00:6f:9d:
3d:40:59:23:cf:5b:2f:1e:2c:2a:08:9b:05:bb:5a:
e7:d6:d4:f5:08:7d:97:90:4e:a9:4b:3c:20:74:79:
a7:37:ff:53:ff:ea:e9:13:a3:18:03:c2:d7:58:a1:
cb:94:e1:c9:1e:72:8d:11:18:e8:3c:89:4a:38:14:
58:52:25:21:b1:77:cc:07:e9:d0:05:79:62:7d:72:
da:70:c2:ea:a4:0c:aa:3e:02:71:b6:86:b4:ae:26:
6f:a0:f5:63:1d:a8:36:f1:44:8d:d7:fb:cc:2b:d5:
ab:8a:86:1a:e4:34:0a:23:44:9b:c3:be:0f:fa:cf:
55:89:6b:4c:30:d9:54:a7:09:7c:ea:63:93:1c:8b:
08:d0:9c:c6:c2:93:2f:55:47:52:ab:3d:d0:53:ba:
a6:5d:a7:77:d4:25:b2:27:fe:7f:a2:dc:49:65:1e:
ca:5a:43:eb:50:6b:f9:6d:7a:d4:91:9a:b6:cc:fd:
e0:db:ff:93:b2:f2:ba:ba:2e:aa:b9:a1:37:a1:cd:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7E:1B:08:78:44:DA:68:1E:9C:25:77:B1:A5:32:27:7C:08:7F:7A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fn4bCHhE2mgenCV3saUyJ3wIf3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.83.0/24
Signature Algorithm: sha256WithRSAEncryption
43:32:c3:2d:48:d4:1e:01:e6:d5:19:26:3d:88:14:17:8f:75:
45:56:db:9d:ce:1d:24:71:00:5f:ee:4e:91:54:70:ca:ba:07:
25:3e:1a:c2:bd:4a:ae:9b:e8:af:6e:88:71:b7:2c:d3:82:b5:
59:cb:13:84:71:82:6b:a5:8a:63:48:eb:c2:19:45:b2:68:ef:
13:27:da:01:e8:66:d1:c0:ed:40:ba:9c:b0:b5:48:62:f0:e5:
58:f8:ab:cb:45:0c:78:6e:5c:a8:4d:8e:18:83:86:86:e7:9a:
8f:90:36:de:63:b2:a9:bb:fa:13:10:e1:35:de:52:d3:50:6f:
78:98:fd:0b:c5:c3:95:22:6e:a2:68:b9:50:3b:f0:c2:9f:f0:
ea:11:5e:45:ba:3b:e3:24:e2:08:d5:f5:e2:cd:7e:ab:ed:5d:
6c:22:25:e0:88:55:1b:ce:c7:87:dc:ab:19:24:fe:64:7c:ec:
cc:3d:a7:69:fa:b8:e4:e5:e9:27:63:78:cf:0e:bb:da:e3:ed:
10:72:48:a2:59:37:13:0b:4a:a6:63:f8:29:a2:68:d1:9c:17:
66:2f:56:24:50:4c:7d:6e:13:0a:b9:f7:b1:3f:d9:b2:5c:ce:
af:05:75:62:1d:0f:c1:ee:d7:fb:7f:67:16:2c:6c:57:0d:2f:
9f:52:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:48:12 2025 by rpki-client