Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa
File: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (raw, json)
Hash identifier: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=
Subject key identifier: D2:AD:C9:F9:CD:DD:30:27:1B:D1:F1:22:E2:44:F8:FC:E1:4A:68:3A
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 0194244553D7D1A332193ED43E0ED507EE77
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205078
IP address blocks: 194.48.205.0/24 maxlen: 24
2001:678:864::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:53:d7:d1:a3:32:19:3e:d4:3e:0e:d5:07:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2adc9f9cddd30271bd1f122e244f8fce14a683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:dd:1f:1f:49:31:86:a2:2e:5f:b2:3c:a5:
55:e6:f9:24:ce:ad:2a:5a:f1:06:3b:33:a7:fd:a6:
30:99:7a:88:2a:b3:7d:47:9c:5a:df:01:a7:8a:5d:
e4:2e:c4:97:10:17:2e:73:d7:a9:cd:04:1a:7c:a0:
5b:6b:70:b0:9e:ef:7c:f3:f0:56:f8:fb:d7:b5:5d:
e1:15:34:97:9f:8a:0d:53:b6:4b:fa:a6:d0:b8:a6:
f7:be:47:df:17:88:9c:1b:1b:2e:50:59:c4:34:da:
84:fb:3a:2a:c6:ef:4d:20:ed:2c:b2:69:ed:02:4c:
38:14:60:1a:b2:b8:f8:0f:e6:01:0d:ff:6b:77:70:
5f:6e:ec:3c:1c:1d:b4:1c:09:08:e5:56:aa:13:12:
22:bc:09:cd:68:00:27:ae:5b:3e:9c:71:71:f4:5c:
09:1b:cb:5a:9e:2c:e9:bb:ea:5b:2c:51:ee:d0:2c:
c8:29:65:8b:eb:8f:cf:f0:39:f6:25:e4:4c:b2:16:
a7:95:8e:9e:f4:d4:47:f0:a6:b8:d1:d4:b1:b9:cc:
c8:87:3a:14:fe:a2:ba:6b:de:b0:ce:22:62:a3:0b:
b5:46:e8:1c:15:0c:5d:d4:51:a9:e4:4d:cb:99:ae:
53:37:a3:07:91:14:8b:6d:04:90:2f:14:ed:aa:59:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:C9:F9:CD:DD:30:27:1B:D1:F1:22:E2:44:F8:FC:E1:4A:68:3A
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.205.0/24
IPv6:
2001:678:864::/48
Signature Algorithm: sha256WithRSAEncryption
a2:8c:86:93:a8:ef:56:c9:9f:5d:db:a9:d3:37:f5:a0:0a:a4:
6f:8a:57:11:0c:00:ee:14:92:34:09:38:97:32:77:78:a0:1f:
fa:a1:e3:c9:06:6c:00:4d:8a:26:f4:8c:4e:f8:9a:2b:c3:c4:
75:f2:f5:76:93:98:27:85:7a:ed:1f:da:d9:99:e9:62:7b:61:
15:e7:0a:f2:82:e0:cc:f8:5a:da:63:9d:de:2a:7d:b9:a0:7e:
04:fd:7a:e0:d6:53:1a:e2:bc:5a:d6:23:4c:f3:cd:bc:b9:e6:
0d:57:f5:19:2f:60:ff:0b:fd:43:7c:e1:86:ec:24:9c:e5:9b:
3f:5b:07:81:76:ce:d4:94:e7:19:df:7e:15:55:be:ab:10:2e:
42:98:c9:55:7c:03:10:05:c7:2b:2f:14:0f:08:49:68:ca:20:
77:bb:70:f4:34:c5:d5:00:29:fb:b3:d6:9e:70:70:bd:4f:b8:
06:2f:1b:1d:22:5c:d1:77:e0:95:30:65:04:05:72:08:48:94:
b5:a6:19:95:74:39:14:1b:15:db:70:0b:2d:a3:6f:45:14:78:
78:8d:fa:f5:c7:21:bf:d3:d8:aa:c0:76:9e:35:ab:e4:99:82:
e5:6b:67:db:48:75:fe:30:c9:64:b3:88:8f:85:93:f9:b2:ac:
38:70:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:15 2025 by rpki-client