Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/FuAE5x8IJALIfmhZTsiAE9-IbCg.roa
File: FuAE5x8IJALIfmhZTsiAE9-IbCg.roa (raw, json)
Hash identifier: MfUFICZEyn8ysR/zcHy2Sq4j5nmV7SDJce70wP8HCVI=
Subject key identifier: 16:E0:04:E7:1F:08:24:02:C8:7E:68:59:4E:C8:80:13:DF:88:6C:28
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 0194258E20A606B76CE6CD64097719884F7C
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/FuAE5x8IJALIfmhZTsiAE9-IbCg.roa
Signing time: Thu 02 Jan 2025 05:47:38 +0000
ROA not before: Thu 02 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41622
IP address blocks: 193.104.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:20:a6:06:b7:6c:e6:cd:64:09:77:19:88:4f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 2 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e004e71f082402c87e68594ec88013df886c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:b9:00:a7:14:6a:f0:a6:f6:b3:07:8a:a4:
2d:67:5d:88:2c:0f:57:b8:d7:c8:c3:41:be:5e:2b:
0a:39:d6:e5:b5:0c:92:f2:ee:5f:19:9e:1f:d5:b0:
a1:ac:e3:23:b9:01:1d:23:fb:ce:e3:fc:af:a5:bf:
5b:4c:5d:ee:64:6e:c5:d2:c2:c8:6a:df:2c:d8:e0:
73:20:c4:97:26:49:7c:a4:d2:35:f5:54:e9:42:13:
08:ef:a9:a5:c0:51:8d:3a:02:1e:1a:d3:82:e0:ac:
24:8d:87:b2:9c:a8:99:48:26:9b:99:c7:67:07:cc:
c4:eb:16:a0:13:e1:d6:c1:ce:12:b5:27:6b:92:fd:
bb:71:5d:ef:c1:05:2f:aa:bc:b7:fc:ff:a0:ac:00:
da:41:ff:b3:48:f3:fa:ee:8a:e6:78:bd:10:7b:25:
f9:8a:5d:e5:d8:39:50:06:b9:5b:7c:8e:ec:99:94:
c4:3d:3a:56:34:95:a5:95:b0:7f:04:ab:d0:10:d7:
d4:16:85:1e:c3:08:73:2a:d4:a6:39:9e:ee:66:c0:
8f:a7:55:6a:0c:80:7a:81:41:c5:e5:ee:30:7b:3c:
9e:0b:27:23:d6:9f:8d:70:50:ca:b4:a1:22:e9:c3:
e9:9c:54:c4:39:1b:1f:79:df:63:80:20:a7:c1:30:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:04:E7:1F:08:24:02:C8:7E:68:59:4E:C8:80:13:DF:88:6C:28
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/FuAE5x8IJALIfmhZTsiAE9-IbCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.116.0/24
Signature Algorithm: sha256WithRSAEncryption
73:15:7a:4b:65:2c:0d:dd:af:40:d7:0e:48:14:13:d3:bd:2d:
44:ca:a3:5f:e9:f1:a4:3c:a1:6e:5f:ca:a2:8f:80:8b:b6:f3:
4a:46:da:a8:1a:38:c1:99:ae:c0:cd:6f:4d:31:70:d5:aa:b0:
bc:78:28:3f:c2:89:b8:9c:d4:1c:77:13:a4:12:40:68:80:5d:
8d:33:e1:9b:b4:8d:c2:59:6a:96:4c:ce:db:95:29:e2:1d:f2:
65:70:74:b3:fe:f2:1a:c6:23:97:b0:79:3b:22:c2:e8:5c:3a:
5a:0f:05:df:f9:ae:64:96:43:84:64:e8:26:92:63:74:90:d7:
5e:2a:66:a9:c0:c6:b2:2d:f5:cd:8b:7d:1e:3c:14:8b:72:d4:
44:30:90:c6:4b:64:79:74:ed:49:5a:8b:fd:83:f7:41:79:bd:
98:9a:6c:68:87:82:38:aa:81:4c:62:f3:b4:bc:6a:57:90:28:
ed:b2:40:0b:c7:14:2e:fc:3f:60:6e:4b:a6:9e:98:4a:04:5b:
c6:61:8c:8b:dd:4b:f8:66:88:2b:09:10:c4:f6:60:0d:69:cd:
22:29:11:55:48:3c:1d:8d:be:13:a5:86:2f:ec:87:bc:fb:85:
1b:65:c7:95:8a:67:17:ee:86:b0:8f:e0:2d:cf:60:52:f1:e6:
84:5e:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:57:42 2025 by rpki-client