Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/_8UTREX8Q0a63ua_dGhbhojBdUA.roa
File: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (raw, json)
Hash identifier: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=
Subject key identifier: FF:C5:13:44:45:FC:43:46:BA:DE:E6:BF:74:68:5B:86:88:C1:75:40
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 0194221FB26A04A672E140601C00E2613D96
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/_8UTREX8Q0a63ua_dGhbhojBdUA.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14288
IP address blocks: 157.23.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:6a:04:a6:72:e1:40:60:1c:00:e2:61:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc5134445fc4346badee6bf74685b8688c17540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:15:ee:33:69:2b:6d:c4:9c:e3:ae:8f:42:
0e:ac:7e:ef:54:a2:51:12:71:29:75:a3:78:0e:53:
35:81:6d:a5:6f:0d:ce:b9:41:c9:90:96:ab:59:d7:
b7:96:e4:75:b9:ec:cb:15:a2:48:50:a7:df:73:ad:
bc:89:07:bb:34:7a:da:ec:f8:96:eb:74:a3:bf:b2:
50:5d:d8:23:51:55:07:54:a3:e2:03:2b:4e:0c:06:
42:d0:e8:9f:a5:51:9e:89:83:9f:51:d7:f3:b3:8c:
12:ca:a1:22:ec:a1:dd:18:61:b7:c9:5a:1d:2a:f6:
7c:7d:da:c9:b5:88:f6:f7:f3:7a:8d:2e:af:37:35:
16:52:2d:3a:a5:93:62:56:c8:90:af:f8:51:b2:20:
8a:6d:fa:1d:ce:25:8f:83:0f:9e:ac:0f:c6:9f:af:
9f:7c:40:b4:16:65:bc:87:ac:4c:10:ac:07:c1:4e:
9f:0d:af:b4:f7:32:3a:ed:ca:16:41:07:be:92:ef:
ec:15:31:a1:58:a0:a1:c4:bf:08:e7:4c:52:d0:d6:
2d:a9:35:a0:63:77:6a:44:47:49:32:e9:55:e2:ff:
10:fa:44:b2:29:97:a9:fe:a6:9b:da:23:c2:18:56:
fa:e2:27:74:06:6b:f0:6f:63:5b:35:3d:c1:f1:b9:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:13:44:45:FC:43:46:BA:DE:E6:BF:74:68:5B:86:88:C1:75:40
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/_8UTREX8Q0a63ua_dGhbhojBdUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.249.0/24
Signature Algorithm: sha256WithRSAEncryption
30:02:b2:29:d3:61:57:a2:2b:47:87:9f:0e:27:42:a8:7d:f4:
b9:83:b6:a9:4a:6c:2e:cb:25:15:3a:7f:1c:ab:09:c5:3e:7c:
da:3c:96:ac:59:da:65:45:22:76:82:78:41:55:01:34:33:97:
a9:70:c3:f3:15:8a:8b:70:95:5d:37:f7:f5:a3:df:ba:4f:0f:
ed:61:06:4c:bd:82:da:05:cb:86:6d:30:04:a2:d7:e8:54:fa:
68:25:63:3f:19:9c:d6:c4:6a:36:23:54:24:71:ea:d7:35:e9:
31:2d:52:b2:87:39:e5:c3:ed:88:0d:97:c4:fa:bc:dc:25:6e:
bc:6e:3c:d8:e7:44:25:93:6b:70:c4:e7:ae:63:65:14:eb:3b:
be:2a:56:e6:6d:72:6e:af:19:34:80:2a:94:01:b1:1e:35:2c:
52:05:97:8a:ff:17:16:57:af:2b:f5:85:c8:a6:77:88:71:06:
aa:4f:8c:54:54:ad:6c:de:02:a8:9c:80:86:68:c7:71:70:e5:
8d:e3:7c:fc:7a:ee:31:2b:4f:15:fc:b7:1a:b3:d6:8f:9f:5b:
c6:bf:25:b6:99:49:07:50:76:fb:52:80:e3:69:2e:89:7c:a5:
be:54:f4:60:98:e7:ef:49:d5:d7:53:a1:60:96:38:99:26:bd:
69:33:8f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:38 2025 by rpki-client