Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/T6mhvGgjsjqSjSFXAxAChHn88ic.roa
File: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (raw, json)
Hash identifier: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=
Subject key identifier: 4F:A9:A1:BC:68:23:B2:3A:92:8D:21:57:03:10:02:84:79:FC:F2:27
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019424B3E3401FD61BE8DFA59785E8B435C8
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/T6mhvGgjsjqSjSFXAxAChHn88ic.roa
Signing time: Thu 02 Jan 2025 01:49:16 +0000
ROA not before: Thu 02 Jan 2025 01:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8937
IP address blocks: 192.109.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e3:40:1f:d6:1b:e8:df:a5:97:85:e8:b4:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Jan 2 01:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa9a1bc6823b23a928d21570310028479fcf227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:2b:42:3b:76:1d:ee:cd:dd:c4:56:45:7e:
64:2b:38:cc:26:55:8b:b1:94:73:97:60:0f:78:4d:
85:6b:84:c9:39:52:67:b3:10:5b:d1:25:df:f7:0f:
5a:97:e5:ea:f3:f3:85:33:aa:a5:8c:03:73:ab:d0:
52:a8:5a:75:a1:08:d2:61:e5:1a:5b:19:62:4a:74:
a2:97:36:93:1e:ba:94:46:96:0b:e4:2a:43:a7:43:
44:35:2c:5a:e9:32:99:3b:21:2d:94:f6:d5:57:19:
1f:40:81:fb:c8:ea:63:5f:5f:90:eb:58:3c:64:7a:
7e:27:17:9a:19:26:61:f8:25:ad:86:77:ef:de:7d:
f5:0c:2b:2b:ca:66:ea:5f:5f:1b:05:a2:34:14:87:
2c:fd:3b:c0:e2:ce:93:0b:89:85:e0:b3:49:f8:ab:
46:cc:6f:a8:a5:ed:ca:35:e3:28:cb:8a:2f:9b:89:
ae:ed:96:e6:03:da:23:9b:96:be:b1:90:70:51:43:
17:7f:10:00:b3:3e:31:16:14:26:b7:2d:60:64:5c:
10:0a:dd:21:d7:6e:a2:d5:05:b4:9c:43:58:23:f8:
02:a7:92:ad:2e:78:0d:14:cc:2a:46:a5:1d:ef:2e:
95:5b:46:70:a6:4a:0a:91:0b:48:f6:36:4d:6b:e9:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:A1:BC:68:23:B2:3A:92:8D:21:57:03:10:02:84:79:FC:F2:27
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/T6mhvGgjsjqSjSFXAxAChHn88ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9b:e6:25:05:2a:22:73:7e:a6:65:7a:43:28:6d:25:62:19:
3f:2a:46:4e:0b:73:e4:6e:a3:ee:92:47:c6:c4:05:56:75:72:
9b:db:41:5e:74:9d:ac:a2:50:7f:ed:dc:8f:b0:62:ad:77:a0:
b1:2a:2a:1f:ab:f5:1c:92:ff:01:6c:96:65:e7:ab:88:fc:df:
2a:df:d2:b9:34:1b:bd:4b:1d:48:ee:32:89:47:67:d1:b6:5c:
01:cc:23:44:c5:66:b5:0e:95:eb:34:69:d7:38:33:5b:ce:1a:
a1:e1:f9:36:a9:a1:70:80:d1:dc:46:fa:96:b2:57:7a:7c:e4:
f4:a1:f6:05:48:ab:d3:e3:87:1c:11:1c:65:17:57:e1:6b:10:
ee:80:cc:5f:b8:5f:e3:6e:95:af:eb:a2:82:4f:ad:bf:b9:ec:
7b:f0:f2:64:21:41:8c:97:42:d9:a9:83:d8:39:0a:06:8d:53:
80:04:27:c5:62:6a:fe:4f:f3:d3:3b:d9:4c:37:79:2e:67:d5:
c4:d8:1f:ee:1f:6a:5b:91:00:7b:0e:94:ed:43:e1:fb:49:8d:
af:f5:d6:d9:ec:c2:5d:dc:51:7e:1b:dc:55:a0:ca:2b:64:39:
fd:ee:e6:35:48:fa:49:a8:38:d6:ae:83:af:3c:2a:a2:a9:4f:
d3:47:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:46:48 2025 by rpki-client