Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Fex3ntehhk9YD9UIIrzJwNM9wrw.roa
File: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (raw, json)
Hash identifier: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=
Subject key identifier: 15:EC:77:9E:D7:A1:86:4F:58:0F:D5:08:22:BC:C9:C0:D3:3D:C2:BC
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019425207E44B5EDFF61E08E88846082B93A
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Fex3ntehhk9YD9UIIrzJwNM9wrw.roa
Signing time: Thu 02 Jan 2025 03:47:53 +0000
ROA not before: Thu 02 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200778
IP address blocks: 84.47.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:7e:44:b5:ed:ff:61:e0:8e:88:84:60:82:b9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ec779ed7a1864f580fd50822bcc9c0d33dc2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:b2:f2:9a:e0:51:ae:10:71:4d:04:3b:5d:
f7:ff:7a:1a:59:45:0c:17:d2:5d:7e:b3:e4:81:37:
02:cd:d0:b1:70:9e:4e:fa:d6:63:6d:71:15:5b:6a:
e0:8f:30:7d:e1:cc:90:08:e9:80:bf:1e:28:62:15:
50:a9:b0:6a:8e:e2:bb:e7:d4:cf:1f:a0:be:ca:75:
3a:43:32:f3:68:53:31:71:9c:51:f8:f5:96:e4:4d:
c8:09:83:47:5e:8e:48:e9:ce:23:0d:6b:b8:88:c2:
b2:7d:c0:d4:fa:cf:b4:b3:4d:91:bd:f3:9a:98:84:
7d:cd:ff:2a:85:b5:2b:da:c2:85:99:69:6c:5f:be:
78:27:cc:33:b2:dd:69:ac:40:61:fa:ff:75:64:80:
fb:9f:bd:b1:37:4e:59:eb:9c:a7:4f:dc:f3:f9:32:
d2:d3:ce:19:f8:22:62:2f:0a:64:19:dc:81:b0:21:
94:12:ec:59:02:f0:bf:af:e8:f2:3b:dd:f2:ca:ce:
eb:a5:f9:38:3c:f1:b8:76:6c:5a:38:42:c0:5f:8e:
1e:04:b3:51:9c:fb:b9:e8:51:e9:81:91:5d:77:68:
be:0c:f6:61:87:e4:78:d5:c0:35:a1:85:f0:0a:7c:
99:34:63:91:93:26:b7:d8:9c:7f:55:7b:7f:54:f8:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EC:77:9E:D7:A1:86:4F:58:0F:D5:08:22:BC:C9:C0:D3:3D:C2:BC
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/Fex3ntehhk9YD9UIIrzJwNM9wrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.130.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0b:cf:62:3d:77:e5:04:fd:29:4e:98:ec:3c:3e:8f:ae:dc:
f5:5a:da:ea:f4:49:55:82:1c:2c:a8:ab:81:11:24:d1:ea:fe:
87:0f:3c:b8:a7:20:91:98:5b:f1:31:a2:ad:8e:ff:62:e3:48:
29:f9:08:4b:0d:39:64:2f:9a:50:95:be:98:09:22:38:a1:c3:
75:5b:4b:53:55:0c:48:eb:36:c7:49:1c:77:54:26:18:25:07:
b1:3d:e8:45:8c:70:8e:a5:c5:db:e8:dd:e9:02:40:75:62:cb:
f5:d2:39:a6:ba:ee:16:a6:25:78:a0:4e:5f:f5:cb:55:bc:5d:
72:c9:fb:d6:70:43:82:72:01:c7:c9:74:1a:5d:ae:81:87:8c:
48:31:79:d6:70:e0:33:00:ba:1f:2e:95:0f:79:fb:12:ab:f4:
40:46:44:ce:1c:49:a2:bb:c8:41:62:39:d6:cc:ee:81:08:c3:
fc:7d:da:61:29:d9:a9:bc:98:b9:07:19:94:97:a3:24:46:f7:
75:41:83:61:8d:9f:86:53:38:25:b6:22:7b:53:80:c2:6c:46:
1b:f5:58:84:a9:3f:5a:a2:ca:14:6e:c3:c6:3b:81:4b:f4:ce:
8b:75:70:94:83:68:db:9d:e9:86:d2:4b:8b:17:26:e6:cf:53:
38:b5:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:32 2025 by rpki-client