Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/_INaZ6DycFqZuVm42lkSOfz9oRs.roa
File: _INaZ6DycFqZuVm42lkSOfz9oRs.roa (raw, json)
Hash identifier: N1fFaEC6dFW7nNDOY6nEbXrF6dJ7s2tSPU9xB9zA38k=
Subject key identifier: FC:83:5A:67:A0:F2:70:5A:99:B9:59:B8:DA:59:12:39:FC:FD:A1:1B
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 0194274799866BB0C1DA1CEA19885D7FACD7
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/_INaZ6DycFqZuVm42lkSOfz9oRs.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204928
IP address blocks: 194.153.216.0/24 maxlen: 24
2a12:e540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:86:6b:b0:c1:da:1c:ea:19:88:5d:7f:ac:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc835a67a0f2705a99b959b8da591239fcfda11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:f4:63:7c:c5:21:e2:13:77:f1:3d:c1:3a:
9b:d9:7f:42:79:44:e8:59:ec:3a:39:f4:25:5f:92:
7d:6d:47:8c:27:57:21:ed:c1:ce:e2:f6:3b:29:6b:
18:6c:d4:7b:ba:86:14:9e:33:c8:31:e4:5c:2c:90:
0b:6d:b3:b2:67:d9:10:6a:06:26:88:fd:9f:66:f7:
72:9c:b0:46:d9:ec:6e:53:a5:23:12:c7:0d:e1:05:
47:1b:8b:e2:df:d1:51:f3:f7:db:d8:fb:96:23:96:
99:0b:7c:8f:72:aa:fd:ba:5a:51:21:6f:a3:e5:ec:
06:6a:54:3e:52:a4:c0:04:97:86:35:87:15:e2:d8:
cb:e9:ad:e1:0d:6d:67:cd:d2:d0:15:cf:ad:71:c0:
d6:11:cb:44:f5:9b:fc:05:92:01:49:89:cc:0d:fc:
98:2d:d9:4b:e5:34:89:91:06:8a:d2:f6:44:ec:e8:
e1:86:f1:6f:cc:bb:24:8c:ff:03:ba:40:0f:67:91:
6d:1e:ed:c5:03:8a:22:bb:2c:2e:b1:f3:b2:a3:ac:
94:f7:4b:40:22:01:52:ac:30:cf:35:07:a1:ab:88:
a5:62:ed:e8:77:31:1c:d3:e9:2e:cf:93:57:0e:40:
f8:8f:70:e8:b2:2d:31:30:15:24:63:df:45:f4:51:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:5A:67:A0:F2:70:5A:99:B9:59:B8:DA:59:12:39:FC:FD:A1:1B
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/_INaZ6DycFqZuVm42lkSOfz9oRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.216.0/24
IPv6:
2a12:e540::/32
Signature Algorithm: sha256WithRSAEncryption
a4:de:dd:07:bc:73:c3:8d:fa:94:5b:ec:83:84:0f:53:c9:14:
4d:a2:7b:c8:f3:d3:9b:59:60:a1:7c:93:16:0a:cb:ef:b2:15:
0a:a6:fb:0a:f3:4c:7c:f4:81:8e:e0:26:8e:80:2e:a8:35:66:
fe:ac:a2:d2:ab:ec:7d:be:60:30:d6:3f:b3:b9:b3:39:8d:4f:
20:fb:ed:f7:03:15:e4:a4:2e:41:f6:a0:01:c9:e8:af:a8:fe:
08:27:67:56:42:bf:e9:b9:d5:ef:45:f5:d6:85:6f:92:e9:17:
18:dd:07:d9:a8:27:ff:b1:07:8f:3e:86:06:cd:60:f8:26:82:
83:46:7f:8d:f3:ce:05:25:a9:71:2f:ac:24:1a:fd:fe:6e:3d:
72:4e:b7:cf:bb:d0:44:6d:04:c3:6b:43:bf:ce:46:5d:f2:35:
c4:a5:f5:79:87:38:c5:56:22:43:bc:40:12:43:5c:ff:1a:89:
4d:75:e8:ff:1d:8b:d0:43:fa:95:4a:4b:80:d0:79:2d:42:b9:
6a:ae:72:22:6f:ca:16:b9:81:e4:45:cb:d2:b3:62:db:06:45:
23:39:a5:fe:98:73:1a:00:5c:a0:d6:9b:7e:2b:8e:87:d5:6f:
70:9c:e3:7e:ac:c7:b5:83:91:92:be:2b:68:3c:e5:45:83:6f:
e4:7c:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:05:26 2025 by rpki-client