Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa
File: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (raw, json)
Hash identifier: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=
Subject key identifier: 7D:51:75:9B:35:7B:95:85:47:44:CA:3C:2E:76:76:E2:F3:01:22:CC
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 019422FB8F9B510B852615F482992DC3CFA0
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21183
IP address blocks: 193.254.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8f:9b:51:0b:85:26:15:f4:82:99:2d:c3:cf:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d51759b357b95854744ca3c2e7676e2f30122cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:4e:7b:64:7b:5d:e1:17:54:58:e0:39:be:
17:cc:a0:9f:04:e4:ee:e3:db:9d:77:de:a0:5e:25:
98:83:c8:20:66:12:6d:a8:0a:e2:d0:60:aa:5d:d3:
25:eb:05:2b:ff:61:e3:2b:9f:e2:2a:85:65:fd:9a:
65:3b:ba:de:60:60:bb:ab:90:4e:f6:37:79:70:50:
bd:82:b3:9a:7c:29:c0:c7:9a:3e:65:b3:0d:da:7f:
00:c6:cf:58:b8:eb:81:a0:fa:a9:06:43:38:0c:df:
e7:cd:5b:06:5a:ab:ee:1c:25:eb:43:e1:2f:c2:5e:
fe:26:02:6c:a5:ee:84:ec:71:06:1e:e7:9c:57:52:
d3:cb:aa:08:b9:d9:1d:a6:b9:d6:b1:0c:77:48:f5:
e7:4f:bb:89:71:01:af:dc:ed:f3:e2:56:a2:b9:55:
a7:91:e6:4d:a0:60:4e:e7:3d:05:bc:90:a5:ea:4d:
b6:37:13:bd:c1:b8:53:90:8b:84:23:3c:0b:a8:a3:
b1:a0:7d:d0:35:10:d3:da:16:ed:5a:0f:d0:c0:f6:
54:29:ed:49:f3:74:55:f5:e6:81:79:3b:17:7c:5e:
54:00:63:25:2c:83:f5:ad:0f:3b:ba:f7:de:c2:04:
3b:d6:03:d1:fb:61:df:ff:b1:fb:4c:ec:99:ab:f9:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:75:9B:35:7B:95:85:47:44:CA:3C:2E:76:76:E2:F3:01:22:CC
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a6:4a:17:9e:b9:1d:2a:2a:61:6c:0d:52:d8:91:44:6e:61:
1c:bd:08:a5:b6:31:8e:27:12:4c:0a:fe:58:e8:b6:05:f5:fe:
fd:54:8e:a8:42:2a:25:18:f3:f5:b8:f9:0e:50:84:22:3e:53:
99:09:f9:33:a1:91:28:a7:82:bb:9d:47:72:ca:7e:64:53:f8:
ae:17:a6:db:15:57:9c:f7:f0:97:2c:60:aa:2f:01:31:16:ed:
1f:6d:b3:62:b7:de:1d:c3:a3:29:31:12:31:38:35:af:1b:ad:
d4:74:6a:e1:cc:41:48:1b:96:2f:97:e3:21:e1:d6:26:aa:c3:
43:bd:e5:35:38:6b:42:3b:08:38:36:a0:b6:07:ac:6a:27:c9:
bf:3e:81:a6:04:94:cc:71:84:77:b6:ef:59:be:7f:49:79:63:
b7:b0:e5:5a:c0:54:74:25:08:c5:60:97:a9:f5:42:2e:6a:51:
b8:b7:58:46:7e:87:7a:16:53:a3:ee:4e:11:6e:bb:ec:1a:be:
a4:eb:e9:fa:a7:b5:4d:d2:db:0f:65:0c:58:0e:00:78:1c:a3:
ff:69:0b:27:9d:05:bf:92:26:57:5e:cd:9d:24:ae:00:cc:8a:
05:ff:d8:cc:17:16:3a:f1:65:ea:e9:0b:cd:b4:eb:fc:4e:87:
b4:be:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:04:04 2025 by rpki-client