Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa
File: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (raw, json)
Hash identifier: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=
Subject key identifier: 7C:5D:97:20:94:CF:0A:B4:6B:B5:6D:84:77:B7:F7:5C:8E:58:04:61
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019427B56D83CD1A6415F731C27094BD40BD
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29229
IP address blocks: 193.93.164.0/22 maxlen: 22
2001:67c:2cd4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6d:83:cd:1a:64:15:f7:31:c2:70:94:bd:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5d972094cf0ab46bb56d8477b7f75c8e580461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:2b:fa:fb:45:f4:b1:7e:dd:ed:c7:d3:c5:
e5:c8:da:48:09:f6:dd:73:88:05:73:61:cd:d1:62:
5a:eb:a9:32:f7:07:49:ff:a5:b7:d2:98:c2:45:d8:
eb:3a:0f:68:ce:29:4c:eb:a8:fd:cc:3a:13:ea:fa:
54:28:0b:55:90:6b:28:3f:ba:2c:c7:58:e8:26:19:
99:7e:ef:3c:73:de:3c:2b:7a:ef:cd:1d:d4:9a:1c:
3a:33:7d:b8:9d:c8:09:1b:4b:6f:91:fa:3c:2b:c9:
b2:ba:41:dc:cd:4f:69:28:05:9b:8e:90:db:86:48:
f8:9b:43:40:8e:b8:e4:c8:95:f7:87:23:8d:8c:62:
8d:32:b2:8c:9e:b7:8d:e4:e4:e7:c1:f1:9c:c9:54:
83:a4:31:2b:bb:f2:a0:5a:de:7a:ab:39:18:a8:20:
f2:89:64:13:15:67:60:38:d3:b6:8e:73:7d:d3:82:
64:f6:55:9d:8b:f4:e4:3f:c6:b4:52:28:76:6f:ab:
78:c6:02:03:d2:83:bd:f1:32:9b:d8:3b:cd:52:7e:
04:ad:02:80:35:a5:cb:7a:dc:7f:66:49:e6:88:d2:
82:b5:2c:51:4e:a2:51:78:e9:3c:2c:95:7a:6c:99:
67:15:f7:9e:e7:81:01:9b:73:ec:ed:99:67:e4:60:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:97:20:94:CF:0A:B4:6B:B5:6D:84:77:B7:F7:5C:8E:58:04:61
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.164.0/22
IPv6:
2001:67c:2cd4::/48
Signature Algorithm: sha256WithRSAEncryption
70:11:b6:6b:ce:bf:5c:86:5c:2b:84:7a:c8:ff:6f:30:72:e3:
82:60:0d:b4:91:1d:d2:ad:5a:df:5b:24:71:ca:bc:68:bc:91:
bb:89:0a:71:eb:c4:80:86:00:4c:ff:b1:f9:c9:4c:24:c5:72:
77:84:ca:82:72:c0:13:ff:dd:3e:e3:2f:15:cc:6f:cf:e6:47:
59:5f:69:83:56:be:7f:84:ae:56:c2:b3:a1:d8:bd:66:7f:44:
93:b2:f6:f0:2b:8a:64:2b:b3:e6:05:9d:a7:9f:b8:3d:4a:98:
fe:34:99:ab:5f:4e:d3:e3:2d:77:b8:8d:90:8e:0b:7e:5d:2f:
d8:cf:58:09:c9:ac:b6:6b:b0:26:1a:05:62:15:4e:b3:5f:7e:
e9:c7:b6:eb:10:79:23:9f:97:14:a3:9a:cc:9a:16:c6:35:15:
8f:9a:bc:46:e2:0b:c5:ae:35:81:e6:cc:88:05:7a:a3:2e:c3:
f9:87:26:3a:42:ac:a6:c0:16:0e:30:73:21:77:88:8a:7e:39:
30:c8:7a:70:55:7c:5c:7b:93:98:76:d2:b1:4c:2f:36:01:28:
9f:60:a3:94:04:4f:63:42:3f:33:ec:8b:19:62:a5:ac:25:3c:
8b:fe:c6:d1:02:f6:1d:9f:c7:06:bc:2f:b6:b8:65:7c:da:92:
11:74:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:49 2025 by rpki-client