Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/fn4qBfRUR0OB50vceznCHU7Je0c.roa
File: fn4qBfRUR0OB50vceznCHU7Je0c.roa (raw, json)
Hash identifier: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=
Subject key identifier: 7E:7E:2A:05:F4:54:47:43:81:E7:4B:DC:7B:39:C2:1D:4E:C9:7B:47
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 0194266BBD1B3940F34FAE9E20760A5B1A98
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/fn4qBfRUR0OB50vceznCHU7Je0c.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 378
IP address blocks: 147.233.0.0/16 maxlen: 16
147.233.0.0/17 maxlen: 17
147.233.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bd:1b:39:40:f3:4f:ae:9e:20:76:0a:5b:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7e2a05f454474381e74bdc7b39c21d4ec97b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:ad:fb:fa:50:66:eb:c9:85:32:97:eb:0e:
8f:14:a6:ec:6b:12:a9:e4:cb:38:a1:c1:2c:d2:a8:
5b:3a:55:26:79:f1:00:40:bb:f6:c8:ff:a1:0e:10:
d9:6e:e5:bd:fd:d0:f6:b9:f8:9f:56:37:f4:51:12:
ff:78:68:4f:50:08:59:8f:93:92:18:1b:6c:e4:29:
ba:95:ef:a0:23:a8:b6:e0:fe:a8:ed:c8:a4:3f:32:
06:0b:3e:d1:4e:b9:16:15:ce:1a:f7:1e:94:55:9b:
86:50:59:bc:69:c6:ce:86:88:c4:ed:b9:94:3c:dc:
df:03:59:82:3b:52:71:95:5b:1a:48:0c:ef:50:61:
4d:a6:19:89:bb:e3:70:5d:4b:bb:0a:e8:3e:7c:da:
b7:89:41:8d:97:ce:a7:5b:ef:16:e4:7b:15:81:5f:
84:90:70:5e:2a:d5:20:10:f9:b8:ac:2a:93:63:ee:
8e:7b:e2:09:9a:68:ab:12:de:d6:33:05:aa:40:12:
b8:5f:9b:ff:61:e7:9c:ee:a5:27:d2:25:c1:a8:f3:
28:4d:ee:6c:1a:49:98:e6:99:e5:fe:c7:31:55:a2:
10:71:e6:9c:9b:b3:e1:5c:04:eb:00:42:3c:c8:fa:
a1:90:5b:17:1d:ca:df:0c:3a:dd:4b:9d:47:5a:7b:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7E:2A:05:F4:54:47:43:81:E7:4B:DC:7B:39:C2:1D:4E:C9:7B:47
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/fn4qBfRUR0OB50vceznCHU7Je0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:17:ad:f5:b0:f4:0c:83:16:0e:f8:52:37:ec:55:8c:d6:4d:
1e:1b:13:1f:33:21:08:70:5b:f7:8e:83:7b:4e:d2:1b:58:f4:
5f:0a:2a:24:c5:c2:75:00:d4:79:39:b5:b7:1b:37:84:ae:1f:
9b:48:4d:9b:28:e1:90:60:cd:95:68:bb:54:ec:c2:99:a0:b9:
14:4d:ea:a5:39:dc:42:ea:a9:fe:b5:ea:df:3a:36:e6:c1:f2:
2d:a5:ef:ee:9b:64:3f:11:5b:6b:51:6e:12:ff:ca:2e:07:63:
b8:39:03:32:a6:eb:c9:f9:17:e9:1d:02:0a:90:31:22:34:2d:
e9:ab:52:db:61:78:fd:07:da:20:82:bd:d9:6e:ee:71:ed:53:
db:93:88:52:09:67:7d:33:33:1b:ad:75:08:71:6a:47:f2:30:
82:39:3a:ab:e6:00:95:10:32:e2:a0:dc:f4:81:ae:ab:20:a4:
5e:68:a8:94:60:c5:b3:10:49:55:18:0e:f4:9f:65:8c:39:b4:
ed:24:ec:eb:d8:bb:1a:91:50:66:7f:87:54:f9:aa:4c:e7:b3:
90:cd:ae:a6:4d:be:d1:6a:9f:ef:79:ea:7c:fb:e9:44:6c:3b:
6b:21:d2:2c:8b:f5:07:f9:ea:dd:6d:3e:0d:37:7a:48:bf:8e:
09:7d:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:17:00 2025 by rpki-client