Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/fLPcJ1RIjba-u72cjm954X9WUC8.roa
File: fLPcJ1RIjba-u72cjm954X9WUC8.roa (raw, json)
Hash identifier: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=
Subject key identifier: 7C:B3:DC:27:54:48:8D:B6:BE:BB:BD:9C:8E:6F:79:E1:7F:56:50:2F
Certificate issuer: /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial: 019422FB8EAEDBE5ABB1440D0E169DA14373
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/fLPcJ1RIjba-u72cjm954X9WUC8.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12658
IP address blocks: 195.60.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8e:ae:db:e5:ab:b1:44:0d:0e:16:9d:a1:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb3dc2754488db6bebbbd9c8e6f79e17f56502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:9b:ea:ef:4b:db:11:aa:fe:a1:49:b9:c9:
cb:7d:f8:59:80:21:ee:59:9e:53:b6:b7:0a:8c:bd:
fd:35:b0:2b:f2:af:7e:12:78:ae:f3:f7:74:c6:f3:
87:93:0d:07:c2:92:60:c8:16:cc:87:79:b9:88:c8:
9f:5a:b9:d2:af:1b:03:47:7f:3e:25:f7:8c:8c:ed:
09:e3:0c:4b:49:60:3a:69:c8:41:7b:92:51:b9:3d:
e4:10:50:73:b9:2c:1a:04:db:72:6e:83:d9:62:17:
7b:07:a9:55:af:a8:dc:24:ba:af:06:3d:01:af:6d:
2b:21:d8:7d:ea:5f:81:a3:7e:dc:01:49:c8:df:a2:
d1:e9:f2:b6:d9:68:a3:b5:49:13:7c:90:1b:06:06:
11:75:d7:97:5e:9d:38:8c:bf:8b:02:2a:0e:58:ae:
17:87:84:4b:d7:aa:40:d8:a5:ab:eb:02:87:72:df:
b2:da:be:d9:75:ad:13:39:cd:5c:41:cc:fc:fa:66:
e5:a3:d5:98:45:f7:fd:0b:51:12:88:51:3b:9a:03:
a7:3b:6b:64:9b:dd:25:54:9f:da:5d:33:61:97:2f:
61:12:95:23:84:f5:52:87:86:e7:5e:60:55:f4:32:
a3:5e:3f:d4:5b:c9:81:5f:a7:9a:a5:67:c6:40:41:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:DC:27:54:48:8D:B6:BE:BB:BD:9C:8E:6F:79:E1:7F:56:50:2F
X509v3 Authority Key Identifier:
keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/fLPcJ1RIjba-u72cjm954X9WUC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ac:dd:e4:12:31:03:d4:a3:ba:e4:49:be:e7:23:84:b7:9d:
46:04:4e:31:70:8d:f5:a6:9a:a8:4f:53:3e:56:ab:88:97:5c:
45:91:b2:ef:05:0c:e5:e2:7d:1c:77:0c:4e:00:aa:b4:6e:52:
45:1b:5e:fa:ee:c6:f4:0d:1a:01:26:4b:bd:70:f0:15:65:96:
00:b5:68:f8:31:cb:34:02:a8:84:79:b5:36:49:39:2e:03:9a:
3d:66:cc:3c:0b:a5:6a:e8:e3:5f:0a:6a:52:08:10:6e:c5:b3:
85:ce:de:60:09:f0:c6:16:6f:27:a3:57:5d:ce:ae:3d:c3:19:
6c:92:3c:f5:32:b7:b7:ac:da:88:92:44:bb:89:72:de:c0:2c:
6e:be:60:69:3d:ae:96:d8:b0:68:b2:bc:34:23:3a:79:76:fe:
91:f7:6d:ca:08:26:71:13:33:ea:ac:16:3d:87:7f:56:ce:4e:
46:bd:20:b3:3c:fa:16:cf:c4:ec:33:6a:d1:82:3c:2d:e2:eb:
1d:64:9a:4c:ba:f5:47:1e:a4:a9:6d:8f:74:60:fc:2b:80:6f:
14:a8:31:ce:fc:fe:a7:3e:40:6c:57:24:8f:56:d8:7d:dd:f2:
aa:f8:e1:d4:9f:f6:96:61:1a:e4:56:2b:64:c0:20:c1:81:3a:
9b:80:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:38 2025 by rpki-client