Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa
File: sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa (raw, json)
Hash identifier: yKfJfqMuiWBIftmEax6OGMuhlaUME2Z3bSqwXVLFaTk=
Subject key identifier: B0:5D:5C:A1:A2:F0:A6:32:7D:11:16:D7:D0:AE:8D:37:DB:06:B1:F6
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019423D746A6C786FC4ED72187E6D37EB765
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63593
IP address blocks: 192.169.104.0/22 maxlen: 24
192.169.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:46:a6:c7:86:fc:4e:d7:21:87:e6:d3:7e:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b05d5ca1a2f0a6327d1116d7d0ae8d37db06b1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fc:f9:c3:05:5c:0b:d3:29:01:0a:ef:d7:02:
68:3a:6b:6e:71:ce:b2:5a:45:c7:83:a9:7f:09:b2:
37:05:5b:f9:ec:46:9f:18:f7:1d:0f:82:42:33:79:
33:47:24:e0:ff:ed:13:bb:af:cd:02:a4:32:95:f2:
ce:1f:b7:d8:27:09:1d:f4:26:66:5e:28:65:9b:b3:
3c:93:8c:91:88:84:1c:97:58:33:44:b1:1f:de:1c:
82:c2:a3:6e:ce:33:d0:62:bc:89:b8:1b:25:8b:47:
c2:b4:73:15:99:3a:b0:0b:d4:00:f8:ce:2d:d4:cf:
59:b9:c5:46:6f:89:81:9a:d8:96:b5:75:4f:6c:ef:
65:14:56:15:9f:6f:c5:92:12:4b:d7:81:90:89:d9:
30:6a:7a:64:17:49:01:18:ca:de:fa:65:2f:6c:fe:
bd:22:dd:a9:63:c7:81:63:af:f0:c6:b5:a5:4e:8a:
56:62:c2:d0:f5:36:14:96:fa:3d:cd:e3:ba:de:cb:
c0:c1:0a:ce:6e:35:3e:e2:b3:08:c5:c8:51:79:86:
47:0f:26:f8:77:c2:5c:5d:c5:cc:c7:65:a5:38:3d:
d1:e3:fa:e5:9d:0c:62:53:49:b5:95:4c:bd:35:7f:
d7:7e:07:c5:1e:3a:26:f0:0f:0a:8b:1c:6a:c2:ca:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:5C:A1:A2:F0:A6:32:7D:11:16:D7:D0:AE:8D:37:DB:06:B1:F6
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/sF1coaLwpjJ9ERbX0K6NN9sGsfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.169.104.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4b:fa:b1:4c:cc:4e:e7:7a:c5:9f:f7:ff:99:08:bd:c9:5c:
10:22:47:f6:ea:7d:fc:39:93:3b:a2:1f:bf:95:87:ae:2c:cb:
67:4a:9f:06:6f:16:37:2b:48:5e:82:58:70:43:2c:12:2e:fd:
e9:44:ee:b1:73:90:7e:7b:c6:4f:bb:43:b2:1d:1d:b6:7f:93:
5f:e1:54:2e:fe:b7:87:c1:3e:6d:da:9c:33:b4:7a:f3:b6:e6:
49:d9:81:c0:a7:f4:a6:dc:58:b8:d2:67:61:51:27:8b:1b:b0:
33:77:56:4f:c6:47:ac:d2:dd:6e:73:48:f0:4d:b4:38:ae:97:
70:56:3b:89:5e:a2:85:04:25:51:f1:d4:3f:21:e2:dc:58:35:
3c:03:78:19:ab:51:af:97:56:cc:7d:1c:b0:1d:a6:74:3d:dc:
ed:8c:ba:f9:d9:99:e0:92:11:02:80:3a:be:3b:34:e3:a3:77:
47:04:e5:fc:74:a6:53:c2:b4:c7:20:d9:64:4b:52:76:2c:ac:
df:21:e6:47:4b:1c:62:f9:56:f2:69:e3:df:85:f2:8d:ba:73:
9a:5b:c6:40:fc:bb:e6:c5:84:33:2f:17:96:c6:81:2f:ab:08:
70:d3:0d:1d:06:1f:1e:18:17:10:e4:d7:44:b9:8d:7b:f2:46:
6d:4f:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:49:44 2025 by rpki-client