Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/_LlSExGn1iTjnlPvOhK0MWa3LXE.roa
File: _LlSExGn1iTjnlPvOhK0MWa3LXE.roa (raw, json)
Hash identifier: s0abbYbzMBy/iY5HfG7va6iUEKpuymTGhD+IHyUyGQA=
Subject key identifier: FC:B9:52:13:11:A7:D6:24:E3:9E:53:EF:3A:12:B4:31:66:B7:2D:71
Certificate issuer: /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial: 01BAF60A
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/_LlSExGn1iTjnlPvOhK0MWa3LXE.roa
Signing time: Tue 12 Apr 2022 14:22:11 +0000
ROA not before: Tue 12 Apr 2022 14:22:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29029898 (0x1baf60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Validity
Not Before: Apr 12 14:22:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcb9521311a7d624e39e53ef3a12b43166b72d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:08:bf:e7:db:cf:75:00:70:80:ff:64:aa:
92:31:0b:16:0d:db:89:d9:c6:18:de:ce:3f:74:c8:
a7:69:5e:0c:54:d9:e7:ec:b9:97:fa:a2:28:0e:47:
19:05:09:03:13:38:a2:34:9f:66:eb:36:50:fd:b4:
cd:67:5e:10:0e:47:2b:ed:7f:f8:28:bd:4b:11:67:
4e:07:0e:1f:8d:73:16:f8:6b:f3:4c:04:50:f7:aa:
83:15:70:1b:95:00:63:47:80:ff:19:b6:4f:b4:27:
21:fb:75:83:30:90:89:43:7c:2f:bc:50:18:d8:07:
9d:62:db:20:a1:37:84:81:36:d9:93:a0:94:d8:17:
32:68:a1:6d:7b:48:be:c7:f5:57:67:e3:e0:55:f6:
5f:44:bb:2b:21:c2:7e:c3:17:3a:b1:df:08:b4:26:
12:e6:95:a6:8c:5a:e0:bb:67:38:c6:9a:d5:bd:a1:
f9:e0:a6:b0:01:9d:ed:2a:f6:d5:a9:a1:21:e3:43:
ec:b8:34:be:fe:17:be:ee:b6:ee:98:fc:22:2e:79:
40:53:39:51:11:6d:00:51:c2:8a:89:b0:4c:37:11:
00:d5:c2:2f:76:83:cd:b8:2f:d2:3f:ee:ab:71:d7:
ed:6a:8d:b5:d5:09:af:2b:44:c4:d4:10:64:d4:d7:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:52:13:11:A7:D6:24:E3:9E:53:EF:3A:12:B4:31:66:B7:2D:71
X509v3 Authority Key Identifier:
keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/_LlSExGn1iTjnlPvOhK0MWa3LXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a8:61:d2:9f:3e:dc:72:d8:f4:d0:ad:69:c8:be:23:e0:b6:
b5:47:8f:b5:e7:4d:be:1b:89:35:f9:4c:c7:3a:5f:6d:a1:02:
90:35:f7:7a:c5:d6:33:ac:a3:de:dd:92:4a:16:99:01:e3:18:
fb:6b:12:d6:33:79:f4:8e:18:2c:70:aa:4f:4c:7c:26:e4:65:
e5:e5:e8:9c:56:3d:c8:b8:5e:f7:71:22:c0:1a:e1:30:99:f8:
07:46:47:4c:97:97:77:bf:fe:53:a4:e8:3c:a5:65:3e:14:9f:
fc:fe:a7:ba:00:e4:8c:cd:c7:96:db:5d:63:a9:61:54:d8:94:
9c:07:77:a7:19:3c:29:96:bf:7d:9d:e4:60:ad:aa:31:20:5f:
af:11:4b:2c:68:bc:b0:d2:c8:fb:2f:ca:64:33:0e:cc:86:55:
03:d6:41:a0:c8:bb:fa:b8:15:b0:c0:fc:18:1c:4e:cf:84:49:
4e:64:c7:94:57:24:84:3a:6e:e4:4e:b5:3f:41:c5:76:71:cf:
3c:1c:bf:00:e2:79:cc:40:b0:5f:d8:e6:e7:2e:f1:db:0b:e4:
f4:7a:4c:98:fb:eb:6d:3d:6e:80:41:01:54:57:74:c2:63:95:
7b:5f:bf:5d:06:cb:99:5e:dd:30:82:0b:c3:66:74:06:18:d1:
c6:e8:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:22:23 2025 by rpki-client