Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/fudzAOYoQEbBVmwmOdYtJovy1uI.roa
File: fudzAOYoQEbBVmwmOdYtJovy1uI.roa (raw, json)
Hash identifier: QG+JwJM3okPXrIbfWoNTAizNGt25NFUxghJxGtiJeCo=
Subject key identifier: 7E:E7:73:00:E6:28:40:46:C1:56:6C:26:39:D6:2D:26:8B:F2:D6:E2
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 01941F8C3C78266FCB303223AF8840B16EDF
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/fudzAOYoQEbBVmwmOdYtJovy1uI.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57915
IP address blocks: 194.1.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:78:26:6f:cb:30:32:23:af:88:40:b1:6e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee77300e6284046c1566c2639d62d268bf2d6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:a4:54:91:68:99:4b:cc:58:a9:48:cc:10:
92:3c:1b:81:ad:46:ec:07:11:5c:b0:cc:eb:6a:92:
d5:99:c9:be:ae:58:11:b8:34:44:9d:f8:94:4e:a7:
99:bb:80:dc:15:37:af:ff:42:9f:0b:b3:e0:34:71:
de:9a:76:f1:e6:af:60:ea:ff:10:d6:a4:99:a1:75:
25:54:c1:29:50:a5:e3:54:02:0d:05:f0:50:0d:59:
a1:1b:92:c8:f3:ab:fb:7c:22:a0:70:89:7e:85:40:
04:56:a5:57:09:b0:b2:e9:a1:7c:2a:14:e2:b4:02:
4f:50:50:60:77:e4:79:46:21:79:ad:60:1f:28:95:
95:d2:c6:c4:7b:fd:88:69:11:86:c7:76:c7:7e:99:
87:1d:02:a9:8e:64:e4:d7:52:18:82:69:0b:fe:9d:
b0:6a:a7:cb:90:a0:94:52:09:eb:84:ed:c8:e1:80:
31:37:63:92:a2:c9:74:30:e4:9d:68:0c:84:fe:87:
c6:36:b1:5a:19:5e:a9:95:e8:40:0f:7e:88:b1:98:
68:f1:4c:75:40:24:8f:20:28:cd:a3:ae:f9:7d:7d:
3b:b2:0d:01:a8:1f:7a:e1:ed:3f:fa:73:4e:9c:2e:
44:e2:ff:3c:f3:fb:da:91:1c:55:35:63:25:aa:f0:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:73:00:E6:28:40:46:C1:56:6C:26:39:D6:2D:26:8B:F2:D6:E2
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/fudzAOYoQEbBVmwmOdYtJovy1uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:05:fc:8b:b7:ed:5d:0f:e8:84:40:86:42:ec:78:bd:85:99:
24:65:e1:de:f5:30:a2:f2:c6:38:71:35:eb:48:2f:3b:ae:70:
6b:34:54:60:ff:97:b2:e1:f5:c9:ba:b4:48:a7:d6:5b:8f:d7:
46:83:a9:30:80:16:96:ae:6b:8b:42:c3:fe:73:5e:97:36:e8:
a4:04:9d:fb:e0:6e:70:de:d5:75:30:59:eb:61:2d:db:bc:b5:
65:34:74:f7:f9:81:79:17:2e:91:28:ac:c2:c6:71:e5:1d:e7:
33:e5:eb:f7:5d:e4:7c:ce:00:1d:14:3e:53:fe:a3:28:1f:6e:
f5:14:27:1c:a0:56:19:a5:f6:61:b5:26:93:6f:2b:d5:30:e1:
38:dd:4a:a7:ce:36:6b:0a:c3:de:aa:df:e1:01:f8:3c:40:e2:
21:97:6f:b9:44:34:fe:63:59:f5:04:ee:a0:01:20:0e:7b:6e:
e0:07:5d:3b:c2:96:a4:d5:3d:a7:6a:fa:0b:c3:b0:87:bd:8d:
10:9d:b3:19:45:41:6b:95:78:c9:f8:62:a1:02:63:99:ac:1a:
6c:31:de:41:64:19:4b:d3:2f:d7:c6:1d:02:80:67:43:c2:8e:
29:1a:ac:99:29:47:e1:cc:80:7e:13:ae:56:eb:1f:dd:cb:63:
b6:97:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:30 2025 by rpki-client