Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/bjwBa29o8sLtvq0lB3wmXidRAXM.roa
File: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (raw, json)
Hash identifier: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=
Subject key identifier: 6E:3C:01:6B:6F:68:F2:C2:ED:BE:AD:25:07:7C:26:5E:27:51:01:73
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 019424B394EFF090F5CE0F7C9C51F46F9F1F
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/bjwBa29o8sLtvq0lB3wmXidRAXM.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42273
IP address blocks: 194.50.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:ef:f0:90:f5:ce:0f:7c:9c:51:f4:6f:9f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e3c016b6f68f2c2edbead25077c265e27510173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:85:9b:de:ce:d4:9d:57:a8:f5:ee:5a:64:
16:24:3a:27:ce:ad:22:e6:87:06:27:ca:84:87:29:
ae:20:be:a2:e3:c5:5e:9c:82:3f:a9:08:4b:38:65:
ef:00:21:99:ff:71:42:ec:a2:f9:74:ce:66:94:80:
9a:96:c5:a5:56:57:3b:ef:0c:b1:b7:9b:97:e2:ec:
43:0d:f9:57:08:f5:15:e0:69:e9:aa:b7:f5:f6:15:
b4:7d:83:75:1c:87:aa:5a:68:14:b5:fb:3d:63:09:
94:69:d4:fd:24:78:0f:8a:cf:b4:29:ac:a4:60:62:
c0:fb:e7:b6:d6:0b:21:6d:b1:1c:3e:39:8a:16:a7:
2b:28:88:d8:48:3d:3a:75:e5:37:30:85:b6:c0:a0:
2b:e9:22:04:db:71:67:61:03:4a:d2:57:6d:a3:61:
96:24:6d:5d:e0:7a:7c:b2:c3:03:6f:b1:a0:70:e1:
d1:ba:12:c0:ec:b7:47:27:0a:dc:0b:c5:77:db:f5:
83:92:6a:fe:ed:65:54:d3:bc:77:cd:5e:f7:04:ba:
a6:71:53:d8:93:d8:69:bd:2a:35:db:04:f8:e3:b3:
65:06:2f:9b:55:0f:36:aa:6e:07:9c:71:09:b7:e3:
15:aa:ec:ac:5e:e6:48:4a:17:74:28:fa:67:38:2d:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:01:6B:6F:68:F2:C2:ED:BE:AD:25:07:7C:26:5E:27:51:01:73
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/bjwBa29o8sLtvq0lB3wmXidRAXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.166.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2f:19:05:7f:0a:76:f5:89:ed:5a:0b:c1:f7:44:3b:b3:f8:
a5:ce:86:c3:99:4b:52:b2:fd:f7:57:8e:12:f3:2a:91:98:cc:
d8:77:48:76:ce:58:01:f0:68:14:eb:a7:cb:5c:b4:ed:b7:9d:
d5:6b:c2:05:09:24:08:4c:b5:a4:46:bc:af:78:94:42:0e:62:
ea:98:a0:37:57:d4:63:53:15:3b:6f:0f:f6:79:b0:a1:01:41:
16:3d:1a:17:e0:a7:fa:21:82:21:07:6b:81:0a:90:80:1a:49:
79:40:1d:4e:2a:5d:16:60:26:59:0f:96:36:99:8b:af:7c:61:
d1:0b:44:4f:96:2e:a6:5b:70:dd:0d:a2:6d:88:e0:e9:47:8b:
ca:c2:88:e0:bc:11:2d:7f:ff:7a:5a:9c:7e:c0:b2:df:a5:6e:
31:f5:b4:a7:17:d6:5a:5f:ad:54:81:00:f1:ed:6c:5f:2f:15:
30:c4:59:0b:d5:f5:85:bb:ec:e3:45:d5:9a:c0:1b:5f:cf:94:
12:7c:85:c9:47:36:59:a6:ee:38:c6:d0:44:de:5f:85:68:5c:
a7:8a:fc:79:24:15:2e:dd:3d:ad:60:a4:e5:7b:c6:9c:6d:ec:
a2:f0:56:56:24:01:8c:bb:24:70:45:e7:e8:e5:42:93:0d:3a:
99:a9:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:45 2025 by rpki-client