Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/rfewBBlrs58wJgdGtzFYKvwGFI8.roa
File: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (raw, json)
Hash identifier: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=
Subject key identifier: AD:F7:B0:04:19:6B:B3:9F:30:26:07:46:B7:31:58:2A:FC:06:14:8F
Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial: 0194258E51C32B57B2C869358EAB2C2AE22A
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/rfewBBlrs58wJgdGtzFYKvwGFI8.roa
Signing time: Thu 02 Jan 2025 05:47:51 +0000
ROA not before: Thu 02 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41151
IP address blocks: 194.140.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:51:c3:2b:57:b2:c8:69:35:8e:ab:2c:2a:e2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Validity
Not Before: Jan 2 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adf7b004196bb39f30260746b731582afc06148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:3d:2f:cb:7d:89:11:a9:3a:52:7b:fd:48:
08:27:4e:d4:42:41:85:00:8c:f8:8f:59:b7:b6:eb:
4e:2c:42:bd:02:87:1e:ca:95:d3:af:88:2c:f6:ed:
59:80:1b:23:b8:63:fb:6b:5d:fa:fa:8b:fa:12:94:
40:05:55:e1:6d:d8:d2:a5:22:57:89:42:fe:4b:0e:
8d:f5:57:6f:94:ec:e4:e2:c3:b6:5f:90:5f:0d:91:
6c:16:8a:8d:01:45:45:f2:00:7c:4e:d3:c2:b4:ec:
df:d0:75:53:b5:2b:47:39:ec:90:1a:78:4b:b4:45:
55:33:4c:ab:e2:a7:e2:d9:10:39:d2:42:2f:9a:db:
f8:3e:46:b2:78:bd:59:a1:b9:a4:d4:9c:c8:12:d7:
a7:20:49:c5:6d:15:1d:73:87:9b:10:b5:21:40:0e:
fd:1c:12:28:81:5d:9b:e0:99:1a:92:a5:d4:f3:c6:
b3:a6:4e:5f:d7:d2:a5:d8:5e:d5:8e:bf:14:8f:6d:
04:db:0f:6c:e4:63:59:f7:97:c6:8b:5f:38:20:aa:
19:36:7a:e0:e3:48:f5:77:24:4b:1d:aa:67:f6:98:
82:55:8a:72:f6:27:17:10:fd:f1:83:65:b4:7a:8c:
89:ef:68:a9:73:b1:8c:70:ee:07:2f:8c:9f:6d:31:
c7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:B0:04:19:6B:B3:9F:30:26:07:46:B7:31:58:2A:FC:06:14:8F
X509v3 Authority Key Identifier:
keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/rfewBBlrs58wJgdGtzFYKvwGFI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:92:72:84:5c:9e:2b:9b:83:a3:83:bb:9f:37:b8:65:3b:db:
99:e2:6d:df:18:1c:2b:90:0f:05:fc:86:3d:b2:b8:4f:a3:61:
04:a0:a3:38:4d:5c:dd:fd:12:1b:ab:02:c6:2d:40:53:3a:62:
6e:db:ed:95:24:b4:9f:6b:00:07:80:41:56:53:02:d5:f2:ad:
0e:5e:85:d9:43:e7:e9:aa:23:24:0d:b8:1a:f7:45:38:d5:bd:
a3:26:79:8b:f1:32:6a:ba:98:30:7f:a5:11:b7:42:77:2b:b2:
98:02:c6:1e:c8:3e:d7:ab:e0:a8:3f:4c:40:cd:34:26:fa:fe:
b4:38:6c:c7:20:63:19:08:45:cf:a2:10:f9:5a:ab:2f:55:79:
79:84:19:a3:bf:69:65:89:2a:b2:74:9e:1c:b1:e0:c7:06:e7:
66:0f:d0:88:2f:8d:36:50:0f:72:4c:33:f9:ab:7a:b3:6e:3b:
44:d9:92:e0:c9:2e:40:00:f4:c2:66:e9:2c:b9:89:49:9b:2e:
68:c2:1c:c4:1c:44:2b:d5:39:f3:b3:a6:19:e8:39:e2:5e:09:
ce:e7:8a:8f:f6:2f:54:ab:b0:70:f1:7a:bf:84:ce:37:5c:ba:
3d:93:ab:3e:e4:c4:25:42:46:97:d3:14:64:2d:e3:91:95:1a:
96:01:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:28 2025 by rpki-client