Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/aXlhDDc0DWfVl7Q_xgzOBRiNhts.roa
File: aXlhDDc0DWfVl7Q_xgzOBRiNhts.roa (raw, json)
Hash identifier: jwpQriAejSgg8fZe+dMdWBplCQ12L/z5CRcEVMLQdas=
Subject key identifier: 69:79:61:0C:37:34:0D:67:D5:97:B4:3F:C6:0C:CE:05:18:8D:86:DB
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 0194214401AE33FDEAC0CD04344C0D69FD00
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/aXlhDDc0DWfVl7Q_xgzOBRiNhts.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60894
IP address blocks: 203.34.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:01:ae:33:fd:ea:c0:cd:04:34:4c:0d:69:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6979610c37340d67d597b43fc60cce05188d86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5e:d9:1a:7e:9d:cd:19:92:63:f8:78:6a:d4:
80:cb:02:55:62:74:e9:29:ab:1d:e4:b4:93:69:b1:
2c:b8:da:ed:b1:ed:5e:34:2d:7f:18:6c:25:9c:46:
ce:9d:0f:fb:2c:04:fd:a8:40:fd:0a:6f:40:27:4d:
00:b9:47:30:98:bb:bc:12:4a:e4:5c:d5:48:63:98:
cd:18:6d:65:0f:ee:62:4b:d1:d3:46:c4:23:72:44:
80:ca:2b:bf:f1:2c:fe:6c:cd:e9:bd:9f:17:af:72:
0b:3c:5a:d9:c9:be:03:8e:42:c4:1a:5e:71:49:cc:
2d:39:ee:28:50:10:46:57:70:7a:c0:bc:4e:fd:db:
e1:47:fe:c3:7a:c4:6a:61:da:c6:8b:9d:62:9e:a4:
24:b1:db:27:35:47:04:c7:a5:a9:5e:03:ac:b5:0a:
ad:1b:90:16:e0:15:e9:a5:8e:70:57:31:78:c5:2b:
06:20:d6:82:26:06:2f:a9:0d:08:cf:ac:3b:dd:f2:
70:11:2f:4b:6f:f5:ee:6b:47:f1:e7:f1:33:ca:52:
03:9b:81:0b:22:27:3e:54:96:b4:fb:b1:60:03:d4:
d1:4f:6b:ac:9c:c0:cc:92:eb:d6:3f:c7:ec:51:77:
db:3c:09:85:68:90:cb:f5:e0:e8:5f:e4:b2:0d:63:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:79:61:0C:37:34:0D:67:D5:97:B4:3F:C6:0C:CE:05:18:8D:86:DB
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/aXlhDDc0DWfVl7Q_xgzOBRiNhts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.34.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:54:13:78:c0:6e:89:b8:d1:c0:73:19:e6:87:63:43:1d:82:
70:34:d4:a0:62:d4:07:02:19:6c:28:13:b1:58:bb:e7:c5:eb:
72:7f:27:e9:74:ba:be:9a:bb:76:56:02:00:0e:2c:07:56:be:
02:39:26:7b:05:fe:2c:03:e7:be:45:4d:b1:85:5c:e3:03:a1:
73:bf:64:52:3c:7e:95:cb:9b:5e:b6:7d:42:91:62:44:31:52:
ed:ae:69:5e:8d:f9:eb:6d:01:bd:ed:9d:9a:5c:07:09:ea:e2:
98:89:10:b2:91:bd:35:ab:04:79:98:90:03:f9:be:28:2d:04:
34:1b:2a:15:bd:91:d0:e3:bb:d8:c0:4a:ba:8a:b2:02:96:be:
40:d1:8b:61:b3:45:ea:ec:c6:35:8e:b2:82:93:20:f5:ff:05:
26:b4:a4:e4:2f:e9:48:0d:ab:4f:41:96:1e:21:ef:31:b6:d7:
0e:15:49:e3:51:ba:d4:8d:bd:f2:08:63:48:a9:80:0c:af:9e:
1f:fb:60:43:e0:ef:ea:a8:72:f3:4f:7e:84:fd:f5:75:c5:12:
81:11:45:e6:b6:2a:18:e3:95:07:2e:eb:5a:5f:a3:13:c1:ce:
e9:75:91:d7:a7:a9:c8:e6:b0:9e:48:f1:d3:51:ad:fc:62:ee:
2c:7f:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:42 2025 by rpki-client