Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa
File: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (raw, json)
Hash identifier: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=
Subject key identifier: 7C:83:FD:0D:5D:F1:C0:FE:AA:AB:D8:81:9B:12:7B:AD:DE:B2:B7:09
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 0194228DF892EF579DEA4063D56D84983ACF
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204194
IP address blocks: 185.3.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:92:ef:57:9d:ea:40:63:d5:6d:84:98:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c83fd0d5df1c0feaaabd8819b127baddeb2b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:47:2c:c9:36:09:2e:ab:a3:81:08:03:75:
c3:0b:12:ae:b9:fe:1d:d8:b4:ef:ca:ca:39:d0:35:
3f:ab:2a:24:4c:cc:a3:86:cf:f0:d2:6c:eb:85:4f:
43:a3:af:1e:42:b3:70:c7:c5:c3:ea:a8:d0:ae:79:
7b:cf:92:37:ae:b1:cc:06:cf:9a:1b:37:0a:17:03:
88:35:cf:f3:c6:37:3f:ce:88:6e:46:60:82:8c:82:
be:f8:26:63:e4:a9:c0:57:ea:43:6c:1a:fc:9e:28:
f7:a0:ab:22:1a:d0:6c:72:ba:59:46:b1:cb:45:59:
d1:87:63:91:30:f5:b9:75:fd:d2:1c:6e:5a:67:04:
bd:de:f3:e2:cd:b3:a2:bb:88:70:e5:93:a9:4f:e8:
7b:ae:e8:58:eb:b4:9f:ec:4a:30:cb:46:b8:a5:c3:
8e:a3:9d:08:82:0a:44:07:9f:16:c9:fa:04:a9:e9:
3a:cc:f1:63:11:d2:c4:a3:e1:58:2e:87:0e:4f:30:
3f:2a:59:9f:55:cd:ee:c3:dc:41:67:80:06:cc:81:
ea:25:95:bd:58:bd:28:12:d7:f6:f3:15:4e:d1:8f:
c8:e5:3f:54:da:37:b0:1a:48:a1:a1:59:c7:2d:c6:
9b:70:4b:f8:11:ca:cb:5d:a5:49:93:b5:8e:1d:3c:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:FD:0D:5D:F1:C0:FE:AA:AB:D8:81:9B:12:7B:AD:DE:B2:B7:09
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.191.0/24
Signature Algorithm: sha256WithRSAEncryption
62:11:43:79:3c:d3:6f:f7:fb:db:63:66:50:f1:40:f9:aa:f2:
a4:e5:21:8b:53:2e:2a:bf:0a:51:45:60:cd:67:4f:fb:6a:88:
af:e3:69:cb:0a:66:66:06:e8:ae:34:8e:22:e0:a0:f3:79:1d:
03:e5:01:43:63:fe:f3:9f:92:8c:0e:a2:10:2c:d5:5b:d9:00:
e1:ca:99:f9:1d:36:5f:46:6e:81:58:7c:97:d4:54:3d:41:d6:
f2:6c:23:00:eb:a5:34:83:56:05:ea:40:a2:1a:39:05:14:01:
0b:ad:95:30:67:94:2b:0c:5d:25:6d:e3:1f:62:fd:fe:61:1b:
c7:ea:1c:91:9c:21:e6:01:c2:9d:dd:2c:5e:f2:b9:b6:c3:83:
26:9c:b4:22:6d:5e:14:ff:ae:74:81:ed:b9:60:9f:03:0f:f2:
f1:87:ab:9a:67:64:17:1a:b0:f5:6a:49:44:dd:59:ba:bc:da:
e2:07:32:4e:6f:05:db:22:70:70:16:cc:d7:f2:64:76:19:76:
5f:93:39:13:ff:e6:59:a1:7b:cc:59:91:f6:4e:fa:39:48:dd:
8b:27:b3:29:c9:1c:e7:11:30:ae:91:ee:e8:ba:53:71:5d:29:
4e:f9:f5:d6:8b:00:f5:be:03:f5:47:17:3e:74:b4:e0:bd:28:
e0:e6:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:31:26 2025 by rpki-client