Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FXRgISRr4r0qJMxDJtaKy7jfxLk.roa
File: FXRgISRr4r0qJMxDJtaKy7jfxLk.roa (raw, json)
Hash identifier: CNBr6epDj6lk+oP3uUMBIFKdBGZjq4jTdlf6g/B5kss=
Subject key identifier: 15:74:60:21:24:6B:E2:BD:2A:24:CC:43:26:D6:8A:CB:B8:DF:C4:B9
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 019425219820227C50F4805AA3C146943329
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FXRgISRr4r0qJMxDJtaKy7jfxLk.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3219
IP address blocks: 193.6.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:98:20:22:7c:50:f4:80:5a:a3:c1:46:94:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15746021246be2bd2a24cc4326d68acbb8dfc4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:ff:51:d8:86:0d:31:02:34:f4:e7:7f:39:
14:e3:7b:63:47:b7:73:b4:18:c4:9a:4f:f7:88:93:
91:33:89:75:7a:95:cf:27:24:58:1e:95:91:8c:00:
cf:1d:e9:d0:2c:53:cf:a6:e4:9a:3c:76:cc:c5:0e:
29:db:c6:46:b4:04:ef:4a:f0:cc:2c:be:10:7b:79:
12:af:6d:37:3f:73:04:a9:85:26:b6:ff:92:24:84:
e1:f5:35:86:c7:6f:e8:da:28:e0:aa:9e:6c:f9:28:
b8:ef:ae:4c:b8:e6:83:f7:e9:ce:82:54:82:15:2d:
a9:d8:b1:85:5d:67:ed:f2:90:fa:57:e3:23:ce:31:
4d:04:64:c5:7b:37:3a:fd:96:dd:56:23:1f:e9:7e:
7c:25:fc:ca:73:44:8f:fe:e9:1a:8e:31:ff:85:f0:
cd:32:84:8f:e8:0f:08:8d:aa:86:26:03:de:8b:93:
30:ec:4f:07:f6:3a:00:23:41:50:71:8e:bf:8b:b4:
6b:06:f5:5e:68:43:ad:e7:47:33:00:8f:c9:96:de:
85:61:3f:b7:0b:a6:6c:60:f7:32:56:88:a6:2b:ce:
d0:03:e1:c2:4a:0a:73:f3:cf:96:f4:12:5d:a6:5c:
b6:27:9b:48:2e:22:cf:2f:a8:a0:4f:64:a4:28:c6:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:74:60:21:24:6B:E2:BD:2A:24:CC:43:26:D6:8A:CB:B8:DF:C4:B9
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FXRgISRr4r0qJMxDJtaKy7jfxLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.6.238.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:5a:a4:fb:71:2e:c6:af:bf:5f:5b:3c:51:77:3d:98:fa:
92:d6:5d:c4:61:35:44:a5:4a:7e:0a:c1:6f:58:82:d3:72:74:
2a:8c:3c:1e:f6:c4:8b:9a:ea:74:5a:9a:a1:64:6c:f0:30:12:
48:7d:34:84:d0:f6:ed:b1:87:f0:1f:7b:40:93:37:04:31:61:
66:93:38:cb:ce:5f:f1:d4:f1:59:76:bd:3c:df:f5:55:ba:0c:
7c:54:cf:e7:ab:b9:fb:96:5a:06:f8:36:0f:70:5e:f0:31:d8:
ef:f6:0e:08:b6:ef:1e:79:cf:30:60:6d:70:5b:ae:9c:d9:7a:
63:ef:79:dd:71:8f:96:ee:68:5f:c6:1b:9e:e0:ba:84:52:82:
2a:4c:6c:5c:75:41:bb:de:0a:f1:6f:e2:e3:2a:3e:dc:67:6e:
d9:bb:0f:54:dd:a5:eb:60:e4:6b:e6:7c:64:34:6b:be:9c:b1:
0e:f6:f8:43:49:aa:77:02:10:0c:b5:cb:ee:80:b6:06:9d:00:
38:fc:fc:7b:fe:04:41:07:30:8b:7c:a8:1d:40:cc:af:6c:b2:
f2:05:b7:e3:3e:20:57:9f:b5:ec:a5:a6:8d:b0:f6:53:77:76:
82:5f:57:8a:18:b2:9d:84:79:bc:d3:37:f9:16:c2:d9:2e:04:
1e:e7:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:22:53 2025 by rpki-client