Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bboBBp1tKqS0RC4vsgwoBCmEwqY.roa
File: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (raw, json)
Hash identifier: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=
Subject key identifier: 6D:BA:01:06:9D:6D:2A:A4:B4:44:2E:2F:B2:0C:28:04:29:84:C2:A6
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479FD254A35CE06365EB176867376F
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bboBBp1tKqS0RC4vsgwoBCmEwqY.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202286
IP address blocks: 195.20.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9f:d2:54:a3:5c:e0:63:65:eb:17:68:67:37:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dba01069d6d2aa4b4442e2fb20c28042984c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:52:1d:ba:cc:62:e8:a3:2d:17:05:b2:77:
ff:1e:22:4a:9b:13:1d:ea:53:5b:26:4c:03:6e:dd:
4e:09:f3:fc:17:17:0f:ca:a1:bf:6b:74:8d:9b:84:
24:7d:80:77:03:b2:99:23:f0:d5:87:eb:13:29:45:
73:ae:28:eb:e6:9a:12:9c:f5:dc:8d:ed:b3:8a:95:
f2:c4:95:4f:5c:8c:0a:fd:fe:4b:07:82:c5:49:94:
3b:bc:cf:b1:c4:dc:05:da:f4:90:30:68:7b:f2:bf:
13:a6:24:c3:bc:ea:0f:f9:6a:db:1a:59:b3:bc:2c:
83:85:86:bc:fa:16:da:ae:cd:27:2e:c7:6a:50:2e:
b0:66:bd:2a:74:fa:32:a1:8b:81:84:b9:3e:ee:8d:
ea:6c:cb:42:ae:cb:ed:be:86:aa:bd:20:56:89:f1:
99:c8:1e:a8:43:98:c4:75:04:c1:ea:8a:70:e7:3f:
9f:24:67:c9:bf:d8:62:02:87:85:29:ac:f6:ed:1e:
47:28:f1:fe:10:13:43:56:f9:4b:3c:6f:af:9e:2b:
e7:5e:9f:28:dc:03:b6:4e:1e:dd:81:54:e4:9b:4f:
b7:2d:14:0f:c8:a6:90:72:24:b6:1b:20:83:80:2e:
1c:fb:95:e9:c3:00:ca:38:69:27:ae:32:a2:e5:01:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BA:01:06:9D:6D:2A:A4:B4:44:2E:2F:B2:0C:28:04:29:84:C2:A6
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/bboBBp1tKqS0RC4vsgwoBCmEwqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8a:9c:22:58:22:01:d4:56:ab:c8:3b:09:fa:bd:c7:e2:06:
ae:78:25:41:81:a8:4b:8b:85:53:d0:5c:f5:fb:a2:2e:13:ee:
a6:80:04:53:e2:6d:85:bb:1c:56:23:ec:77:28:8e:dd:42:f1:
46:a2:fc:90:63:f2:fb:8c:e4:73:1d:1e:65:3f:f9:b2:04:99:
e2:f1:48:e8:5f:2c:cb:7e:31:63:a9:e5:6c:c9:62:7e:2a:a2:
5f:83:2d:c0:2a:ae:70:a7:cd:8c:02:99:15:60:da:3d:a8:e4:
00:32:8a:ac:61:6f:2b:98:4f:e5:60:97:6d:f1:49:3d:f8:e7:
e8:5e:fc:53:8d:16:fc:ba:66:64:74:1c:68:65:f3:7d:7f:98:
27:85:5d:2d:2d:f5:60:c5:61:cd:74:ea:0d:80:05:e1:83:52:
a7:37:de:02:f5:30:87:d8:28:f3:ea:98:1e:9e:f2:bd:c7:8d:
cf:a3:36:bb:09:cb:9a:54:3e:49:37:f3:89:f9:3d:8d:e6:3d:
aa:ba:8b:c8:2c:46:55:c3:44:82:6f:47:f5:25:cd:16:d3:d3:
93:2c:5c:eb:8f:36:06:e1:cc:04:66:3d:ac:da:8c:93:10:8d:
6a:ea:86:3f:49:2e:46:6d:29:4d:ff:49:b2:7f:2e:13:4c:82:
93:21:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:13 2025 by rpki-client