Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa
File: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (raw, json)
Hash identifier: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=
Subject key identifier: 7C:47:AA:F8:4D:6C:C4:73:85:41:42:56:8A:AC:06:F1:5A:C1:EE:62
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 01951ACCC6B43DF812275C148BCFDD8597AB
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa
Signing time: Tue 18 Feb 2025 20:43:02 +0000
ROA not before: Tue 18 Feb 2025 20:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 212.4.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:cc:c6:b4:3d:f8:12:27:5c:14:8b:cf:dd:85:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Feb 18 20:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c47aaf84d6cc473854142568aac06f15ac1ee62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:a0:e0:84:cc:ec:78:61:4f:f4:ac:83:cb:
4d:12:6e:53:d1:ab:50:ba:f6:b1:a4:08:d9:b0:e5:
ac:1e:04:e5:5d:7f:5f:d3:6e:a3:38:14:c2:20:c1:
d2:45:f7:bc:54:69:9f:b0:c4:33:35:32:3f:64:01:
48:63:e8:40:c6:1b:31:92:8f:7d:9c:2a:03:40:7a:
48:fb:c0:5d:3c:a3:c6:0c:06:ae:56:f8:4b:2d:a9:
99:7b:69:de:8c:df:e3:bd:28:8a:af:c5:46:02:d8:
30:80:d6:4d:6e:5a:c4:50:c9:b6:fd:d2:71:a6:1f:
34:48:af:05:73:27:7f:28:32:7f:ff:ca:73:7d:ed:
19:d6:dd:79:7d:2c:73:a8:b9:76:e2:0f:16:cb:bc:
af:e8:64:a1:f9:be:f3:88:ba:7a:97:9b:51:39:d2:
a0:35:5f:aa:23:92:65:a9:80:ec:08:7c:a2:72:61:
09:36:d2:e0:55:2b:d0:28:b0:6d:74:b9:61:b4:a3:
8d:cf:6c:bc:1d:04:a0:3f:4e:fd:f4:59:23:fa:d3:
fc:7a:c4:52:dd:c5:e5:31:45:43:69:14:71:9e:aa:
22:38:b5:55:56:07:26:c6:24:f1:92:fe:27:5f:f1:
4b:69:94:29:49:c7:38:ba:fb:26:3b:01:34:ad:f9:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:AA:F8:4D:6C:C4:73:85:41:42:56:8A:AC:06:F1:5A:C1:EE:62
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.4.27.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c0:bd:d2:7c:d7:ae:a3:83:33:51:a3:de:d9:4f:ef:12:de:
df:36:43:28:b1:1e:ab:73:75:18:b3:36:f6:50:36:77:a3:4f:
b6:d4:5e:fa:38:5b:22:23:ca:1b:8f:2f:c4:32:be:72:dc:6c:
c9:3f:a2:26:30:3d:6d:19:be:33:28:68:58:92:71:4c:bf:98:
86:7d:f8:ba:4d:fe:f4:9c:5d:e2:82:af:ea:57:67:78:fc:17:
be:ad:7c:4e:50:0f:94:e9:9d:77:c1:b6:c0:51:18:a5:4b:3f:
29:11:8c:52:63:fc:5e:30:be:0f:9e:83:41:3a:71:a6:73:82:
8a:7a:2b:5e:49:c9:88:eb:2b:38:18:1e:f5:d4:34:6f:3d:5a:
f4:3a:84:3d:83:84:da:e5:9d:c3:cb:3e:bc:6d:b7:64:0e:1a:
b7:45:7b:ec:85:d9:0b:1f:e7:d2:3f:35:eb:94:11:24:40:d1:
c4:9a:39:d1:2d:e7:9d:74:44:7d:77:e6:96:02:74:90:c5:e2:
c5:63:68:8f:58:f2:aa:3a:ea:92:fd:d5:d3:1e:24:7b:dc:64:
cf:ae:73:76:7a:1c:cc:6f:17:b8:98:95:c9:7c:bf:00:8d:5c:
08:b3:8c:0a:5b:e1:c3:dd:95:7b:3f:7f:17:01:f8:71:0e:3a:
75:2e:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:11 2025 by rpki-client