Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/fjcBIwD0UXboDtm9hQQuC4nZKFg.roa
File: fjcBIwD0UXboDtm9hQQuC4nZKFg.roa (raw, json)
Hash identifier: a7+yo1MMdqmC3Rdod1c+o5dbpKenkQKnUI7GqCwwDY0=
Subject key identifier: 7E:37:01:23:00:F4:51:76:E8:0E:D9:BD:85:04:2E:0B:89:D9:28:58
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 019425217AE6EF126F43D048DA3CC8B9AAA0
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/fjcBIwD0UXboDtm9hQQuC4nZKFg.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206221
IP address blocks: 185.1.240.0/24 maxlen: 24
2001:7f8:12a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:e6:ef:12:6f:43:d0:48:da:3c:c8:b9:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e37012300f45176e80ed9bd85042e0b89d92858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:d1:0e:30:88:82:c9:c6:44:d8:26:9c:f6:
47:71:83:31:b8:91:f6:83:d1:dc:1d:db:11:dc:fa:
55:b6:d1:10:ec:6e:0b:f3:68:bf:04:d3:4f:33:36:
8f:d9:23:e2:91:7c:0b:7c:5c:42:12:1b:3e:bd:2f:
3e:df:2f:3f:0a:08:f3:0e:d1:39:1c:84:df:55:54:
27:af:36:be:30:81:b6:8b:0e:ab:bb:ad:de:9e:8b:
4f:c6:f6:32:4d:1c:ee:e2:10:86:95:f5:7d:1d:b2:
3c:19:cd:0d:97:ec:cb:14:06:65:ce:9c:e0:99:5a:
c6:8f:a9:6c:b1:49:69:b6:f6:6b:8d:f1:38:93:53:
6b:c1:d1:0f:6d:ed:ad:20:8b:07:3c:29:59:50:78:
6c:83:60:0b:99:f1:81:c1:95:ba:90:a6:74:1e:e6:
b9:46:b8:36:d7:67:50:58:e2:4f:50:60:6b:69:94:
c5:c6:36:51:99:57:4f:74:f5:96:41:98:8d:6e:e8:
ad:07:d6:ba:8b:cf:34:50:af:00:1f:71:9d:de:89:
bf:d4:6f:76:c5:91:3f:64:ff:0a:c0:64:23:5f:3a:
75:24:c7:a2:b7:24:13:d0:f5:ac:0d:a3:fb:92:a0:
50:00:00:b5:67:dc:b6:16:b5:4a:f3:e1:ac:76:85:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:01:23:00:F4:51:76:E8:0E:D9:BD:85:04:2E:0B:89:D9:28:58
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/fjcBIwD0UXboDtm9hQQuC4nZKFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.240.0/24
IPv6:
2001:7f8:12a::/48
Signature Algorithm: sha256WithRSAEncryption
7f:ef:c9:1c:4e:0a:62:f3:75:15:d8:3c:d0:cb:90:c5:ad:35:
28:db:de:52:33:ce:4a:c6:fb:1f:a5:2f:67:25:c4:17:03:f2:
1a:a3:18:1a:e5:91:a5:1d:fb:a1:a3:4b:d6:79:d6:d1:45:77:
16:16:02:89:1b:1b:a9:e1:09:7a:ee:19:cc:d2:6d:29:8d:8e:
14:cd:48:06:58:de:5c:fc:e6:64:4b:11:1c:fc:40:a3:d3:7b:
77:c0:17:f4:e2:35:1a:ee:9d:f3:f1:27:5d:a5:d1:33:96:22:
53:f0:76:af:25:b0:f0:96:a7:fd:fc:82:9b:7f:93:e6:30:13:
7b:6e:3c:42:17:bc:82:e9:3c:77:3a:ef:21:f5:44:00:b5:c4:
c5:cb:9c:4e:58:31:7e:3a:e8:f7:ee:19:08:32:5a:dc:1f:0e:
2e:6a:02:de:1e:81:c3:00:1a:9c:a5:d5:f6:99:44:17:26:dc:
44:6e:85:1a:3e:62:c8:a6:e5:04:d2:34:ed:f6:a2:73:d5:d5:
7f:99:68:a8:dd:76:11:4c:39:dd:77:8f:c9:a0:64:11:ca:25:
97:b3:3a:87:30:92:98:89:c2:ce:c6:89:82:f0:58:f8:5c:6f:
34:d6:8d:41:ba:4e:6a:a9:35:81:4b:33:aa:3b:52:34:c4:3f:
34:f9:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:19 2025 by rpki-client