Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa
File: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (raw, json)
Hash identifier: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=
Subject key identifier: 3F:85:68:41:21:7B:94:29:EC:AB:9B:EB:DC:4D:9B:FC:9F:88:B6:68
Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial: 0194228DE382A50D011F433876A136A50CA5
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35724
IP address blocks: 194.50.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e3:82:a5:0d:01:1f:43:38:76:a1:36:a5:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f856841217b9429ecab9bebdc4d9bfc9f88b668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:5c:96:d8:df:a3:1d:c4:f3:3e:e5:3b:9d:
b6:d6:c7:d8:69:75:15:56:46:7a:c6:ae:29:c2:65:
ad:56:24:d3:14:43:96:8f:04:ad:d5:4c:f4:76:c8:
6c:a9:17:37:d4:30:42:73:6b:56:4a:8a:e4:eb:8a:
b8:79:c3:c3:6a:35:b9:c7:4d:1e:3f:16:d8:ff:f8:
56:27:ea:bb:d0:bb:2c:4d:c0:a0:22:80:d1:88:3e:
eb:a0:c1:51:96:7d:bb:9b:11:ce:85:94:9e:df:0b:
99:e5:33:ae:ce:d9:66:f4:29:a6:0b:f5:2c:74:4d:
a2:68:95:08:96:8e:6c:38:71:df:21:4a:b2:f4:eb:
1f:3d:71:92:11:c9:01:73:df:94:09:62:e6:a0:61:
1f:b6:6d:2c:3c:af:68:c1:c1:54:9f:b2:ff:36:e7:
6a:ff:99:1b:78:84:1c:05:7c:3e:31:b8:bf:3b:54:
d6:de:63:84:36:72:e0:63:b1:37:8b:a8:81:f2:7e:
cd:38:03:bf:ae:7b:6e:36:1c:d7:d0:40:e4:20:2a:
46:ad:92:5c:4a:cd:49:c5:d0:32:9a:00:24:77:c1:
b7:1e:aa:dc:8f:54:40:eb:3a:07:30:1d:0b:e6:49:
20:e0:ca:80:b4:ab:c4:f3:67:6c:6e:9c:76:93:3f:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:68:41:21:7B:94:29:EC:AB:9B:EB:DC:4D:9B:FC:9F:88:B6:68
X509v3 Authority Key Identifier:
keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:83:7e:51:4e:4a:dd:e4:6c:28:29:9a:d4:15:46:e0:70:13:
a5:9c:10:02:76:b4:ea:b2:c0:7b:37:e3:51:cc:77:1e:92:25:
5c:36:6d:f9:e0:9e:c0:e8:a3:76:cd:71:77:69:76:e2:30:34:
ec:21:fd:e8:d9:79:70:5a:c8:e9:16:1c:c4:61:11:24:83:0e:
a1:63:0e:f9:a2:4d:20:97:d8:ba:f3:2a:b5:e7:81:20:c8:97:
d1:1e:ca:93:1b:ae:58:2c:a9:cb:ef:f1:ff:d7:1d:ed:f5:54:
75:05:44:35:38:d3:7b:4d:62:db:0e:a3:17:34:8e:41:32:6a:
aa:97:54:10:37:1f:03:49:41:cc:ae:dc:c2:92:e4:cf:84:8c:
55:9e:9e:b8:7d:0c:55:4a:4c:53:76:a7:c6:e6:23:06:7a:4e:
0d:96:5e:e3:38:f8:2b:c5:a0:09:7b:81:0b:a5:b8:47:8f:26:
cb:57:a1:02:4d:12:17:dd:6a:6d:e6:d2:5d:73:5d:ab:2d:2e:
15:13:46:7f:3d:de:b4:66:d9:cc:f2:3f:54:f4:dc:57:d4:53:
29:4b:01:f7:95:4e:5e:86:6e:a1:2d:0a:c2:a6:49:bd:38:5f:
a9:97:bf:4a:21:32:5b:2d:39:06:ce:60:25:c9:75:b9:6e:9d:
9d:37:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:09 2025 by rpki-client