Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/FAKXs32RTJhJGvnWYSpaYh74Joo.roa
File: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (raw, json)
Hash identifier: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=
Subject key identifier: 14:02:97:B3:7D:91:4C:98:49:1A:F9:D6:61:2A:5A:62:1E:F8:26:8A
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 019425FD0917BB5D4029036499A9CBC2469D
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/FAKXs32RTJhJGvnWYSpaYh74Joo.roa
Signing time: Thu 02 Jan 2025 07:48:47 +0000
ROA not before: Thu 02 Jan 2025 07:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43656
IP address blocks: 91.198.83.0/24 maxlen: 24
194.28.4.0/23 maxlen: 23
194.28.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:09:17:bb:5d:40:29:03:64:99:a9:cb:c2:46:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Jan 2 07:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140297b37d914c98491af9d6612a5a621ef8268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:75:2b:c0:94:9b:f8:d2:a1:61:ce:e2:23:
3c:e0:44:d2:5c:60:36:ef:a6:3a:9e:c0:96:9c:65:
73:c1:0e:08:9d:06:08:de:e4:3a:df:0e:00:98:53:
32:c2:7c:fd:1c:a6:bd:b6:62:3d:85:26:eb:a0:86:
2d:06:ce:3d:57:a0:f4:a0:dd:56:cc:5d:44:44:a8:
32:34:a9:8c:cf:62:75:00:2b:90:f3:7a:f2:40:29:
9d:73:63:41:98:c9:98:ac:05:f5:9e:97:60:70:2f:
95:ab:5c:6a:60:fd:66:b8:28:7e:8c:10:11:03:ad:
fa:b2:1f:45:67:19:3b:dd:c3:d3:95:1d:02:16:39:
0d:f2:27:5b:33:24:60:3a:f4:5a:4d:fc:cb:f7:74:
7e:23:dc:4e:a7:de:b0:3c:7e:ff:3f:a9:4b:a7:50:
a2:29:3f:36:9b:2d:15:08:37:ae:fa:01:35:f7:df:
00:5a:47:6e:ca:c7:fb:66:54:89:20:8a:3b:cd:00:
bd:2f:a4:ea:a0:7f:9e:d1:84:35:67:a4:f7:ef:2f:
a6:e4:c8:62:63:d4:1e:12:d1:60:cf:da:8d:ac:55:
0a:f0:4e:95:64:ef:c6:d7:fd:e4:ca:64:6d:08:a9:
87:58:82:ed:64:e2:9f:60:7e:43:32:b1:2d:3a:03:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:97:B3:7D:91:4C:98:49:1A:F9:D6:61:2A:5A:62:1E:F8:26:8A
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/FAKXs32RTJhJGvnWYSpaYh74Joo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.83.0/24
194.28.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1b:71:fa:da:e0:e5:78:26:8c:b6:ea:45:d0:c2:1f:f7:80:
21:ba:e2:19:c8:26:a2:b4:74:92:bb:d1:f9:2c:ac:2c:a7:86:
f5:da:c7:e2:fc:44:81:b2:22:e0:83:cc:2a:9b:cd:c5:7c:b6:
cc:f1:ba:5b:b0:d0:60:93:12:6d:96:cf:5f:d6:11:c0:32:4f:
67:6f:70:26:e8:96:0c:f3:5f:c7:0c:fb:ff:b4:17:9f:07:31:
40:e3:66:e6:c7:37:5c:d4:61:76:ad:1c:6c:ca:55:92:17:3a:
63:65:d6:c8:c0:0c:ba:2f:ff:0a:bb:2f:76:30:32:44:08:d0:
69:a0:83:b7:e7:aa:0d:a2:39:6c:00:4b:65:d4:a3:00:e6:a4:
59:4f:38:af:8d:73:cb:2c:46:5c:8a:b8:fa:61:c2:fd:2f:db:
e8:26:d9:1e:1f:ac:98:ab:cf:ef:77:79:f6:3d:3b:03:54:52:
89:8d:67:0e:e4:fb:be:02:b2:35:0f:c6:83:bc:1d:63:c2:b9:
14:c2:6e:96:18:ab:c5:fa:02:40:52:14:60:d9:b1:e3:d5:d6:
7a:4f:14:14:a5:de:a9:af:d7:ce:f3:bc:65:ac:54:47:49:91:
51:9e:e7:e8:b6:da:67:d6:64:7c:0e:8c:77:1a:6e:e3:b3:ba:
0c:78:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:18 2025 by rpki-client