Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F_Vpqfvbjxx20g95CeLrBsXvf_k.roa
File: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (raw, json)
Hash identifier: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=
Subject key identifier: 17:F5:69:A9:FB:DB:8F:1C:76:D2:0F:79:09:E2:EB:06:C5:EF:7F:F9
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0194252204B64A30F0532DFE55DD117EEE0D
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F_Vpqfvbjxx20g95CeLrBsXvf_k.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3271
IP address blocks: 194.39.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:04:b6:4a:30:f0:53:2d:fe:55:dd:11:7e:ee:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17f569a9fbdb8f1c76d20f7909e2eb06c5ef7ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:ca:09:af:b6:5c:85:4f:3e:e1:5e:29:6a:
6e:37:21:7c:f2:5f:77:4d:ce:7b:e2:40:48:57:22:
c5:ce:2a:3b:71:7d:69:eb:cf:54:47:aa:07:1e:9a:
05:3a:5e:e1:96:c1:b3:69:dd:83:c3:e1:52:1e:03:
3c:cf:1d:b2:3d:ea:f9:0c:b5:1f:03:fa:18:8e:5c:
b1:77:e1:0a:24:a0:26:57:3f:7d:42:a8:e6:d0:c6:
2a:e0:87:4d:04:83:eb:1b:f9:5b:2a:8f:27:c2:ed:
2f:c3:60:c1:53:d0:33:31:ed:bf:52:f8:c5:2f:e3:
29:74:53:c6:19:f9:65:1b:3d:96:5b:4e:6d:97:82:
5e:5c:e8:94:d4:90:9d:ea:f4:6f:2f:f3:85:f3:78:
f2:62:6f:96:fb:52:e1:89:1d:b9:61:43:9f:bd:b2:
03:f3:ce:33:bb:90:1d:16:41:b1:b7:59:07:9a:e8:
9b:83:97:e7:f5:02:9c:e8:1d:f0:e5:f9:5e:fb:90:
db:36:b2:9c:02:45:40:a5:d3:4e:a6:49:26:85:1f:
30:48:7a:53:77:f7:b4:6d:c5:76:2b:03:f4:f1:65:
56:0d:77:3c:9e:e7:13:34:8d:99:c7:19:7d:df:3a:
47:c6:dc:17:2a:e0:23:f9:6e:f4:ff:0a:2f:7a:f5:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:69:A9:FB:DB:8F:1C:76:D2:0F:79:09:E2:EB:06:C5:EF:7F:F9
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/F_Vpqfvbjxx20g95CeLrBsXvf_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:12:fa:90:ed:f0:36:0f:ec:e2:61:29:47:4a:e5:4f:af:5a:
47:9c:c9:dc:0d:01:65:d7:cc:0a:0f:7d:ac:e0:e6:47:38:fa:
d9:82:6a:54:87:e8:f1:59:b7:51:af:44:c9:ff:a2:d3:a2:1e:
0c:f4:27:63:49:e5:84:6b:84:21:e8:79:1b:23:c2:5b:d6:a6:
1a:76:0c:36:19:74:d6:b1:df:46:b7:67:7e:9f:2b:1a:b7:f1:
cb:fe:e2:b3:5b:01:dc:1d:76:21:5e:98:de:49:9e:ed:2f:51:
ca:2e:19:30:ff:10:db:39:d5:4b:fe:7f:f9:68:e5:c6:42:d0:
d6:ce:18:d3:7a:e2:c8:8b:62:8b:db:40:79:96:23:3f:45:44:
8d:e6:94:50:c2:53:5e:a9:ad:17:11:f1:04:2f:b6:f3:f2:f7:
3e:e2:af:a8:26:46:7d:43:af:85:3b:34:95:3f:10:34:4b:82:
2b:d6:ab:24:23:88:87:d8:c9:6a:86:fb:e1:0b:eb:76:c9:a6:
6a:df:31:0f:e5:e6:08:55:17:7b:1e:e3:ca:6d:78:f9:31:08:
2e:81:13:79:cd:9c:e4:5b:25:e2:14:fd:69:12:1f:3b:9d:c7:
44:85:32:eb:9b:dc:34:24:55:49:d8:1d:94:e9:a5:fe:0f:17:
59:c4:42:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:17 2025 by rpki-client