Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/F1oKspcJIA5CxkgGbXIBC4yC3wU.roa
File: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (raw, json)
Hash identifier: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=
Subject key identifier: 17:5A:0A:B2:97:09:20:0E:42:C6:48:06:6D:72:01:0B:8C:82:DF:05
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 01942067F8F77C65CCAECE43DA30C07DF00F
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/F1oKspcJIA5CxkgGbXIBC4yC3wU.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41978
IP address blocks: 194.35.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f8:f7:7c:65:cc:ae:ce:43:da:30:c0:7d:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175a0ab29709200e42c648066d72010b8c82df05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:cd:b6:e3:4c:d9:15:61:ca:81:5e:44:ce:
30:ae:a5:10:06:05:c5:72:6e:1e:25:08:ea:1a:a5:
03:92:fd:3c:2f:2b:64:e2:fd:de:6f:ca:4e:0d:a7:
06:f2:b9:50:49:87:bd:39:ce:73:6a:08:5a:ea:1f:
b8:9f:fc:94:e8:a4:7a:bf:ac:e0:11:37:af:03:f8:
fb:92:43:b2:66:eb:9f:da:c6:68:48:e7:de:fe:f7:
f6:d1:c8:b5:32:60:1e:8f:d6:bc:ea:b0:ea:8d:ca:
02:8e:61:4a:f1:f7:c5:6f:a6:78:ee:44:8f:f0:ee:
dd:86:f0:f3:cc:eb:3f:4e:f1:d8:43:8e:5b:6f:a4:
4c:8d:1b:82:27:56:0d:88:da:df:91:58:b4:d4:df:
56:b3:28:11:e5:4d:f7:4a:79:25:86:b4:ed:14:5f:
f3:2a:6b:3c:85:49:66:09:f4:b6:19:5e:de:ae:fe:
6c:9e:a6:e2:e3:83:ee:d0:ee:7f:58:94:8d:cf:93:
7d:86:b7:a4:65:14:7c:c3:f1:6c:bc:4d:f0:4e:9e:
75:49:07:34:e6:3c:cc:3e:98:51:4e:1d:20:1f:d0:
a6:42:e3:02:30:a1:a5:44:b5:0a:8d:2c:85:07:e4:
df:65:f7:88:0c:2a:f5:85:a1:37:7d:e5:32:b9:bc:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:0A:B2:97:09:20:0E:42:C6:48:06:6D:72:01:0B:8C:82:DF:05
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/F1oKspcJIA5CxkgGbXIBC4yC3wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.74.0/24
Signature Algorithm: sha256WithRSAEncryption
28:06:b2:23:d1:09:dd:a9:c3:19:da:fe:d0:d4:1e:2b:d8:0b:
23:2b:ab:1c:37:bc:06:f4:21:f5:2e:c9:84:7a:f0:1f:5c:6b:
99:a7:ed:6e:fa:1f:11:63:e9:09:28:c6:d0:da:4e:e6:69:c8:
dd:b0:dd:38:57:eb:e9:56:e4:5a:ea:1b:48:aa:48:40:d0:a0:
3b:21:21:b4:1f:24:f2:32:61:2c:e2:78:a4:29:35:b2:45:3a:
10:7d:82:b1:13:00:40:d0:ac:05:2f:49:09:8a:63:7c:b9:a3:
16:ad:c9:e0:30:94:14:29:fb:67:3a:51:30:e3:f5:d3:de:4a:
b6:e7:b1:9d:6a:ca:49:6c:cf:83:39:ea:e1:4b:12:54:b1:4f:
20:11:2d:36:72:c3:81:6e:e9:ce:ab:2a:17:f5:29:ff:03:75:
f7:86:0c:51:7d:a5:55:40:fc:ec:cf:3c:a9:1d:a9:05:4b:a9:
fa:13:e1:66:e3:e9:09:b2:8a:d9:19:97:70:4a:69:0b:2f:6b:
a7:7a:e3:bb:2d:99:e9:f6:8d:05:82:fa:3b:cf:30:0e:98:25:
0c:ed:76:6c:a9:b4:c0:86:da:6b:86:fc:58:0c:c4:90:60:8f:
2e:57:a9:ee:30:89:63:22:02:83:c3:1b:71:8e:6a:bc:ed:e2:
fd:d5:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:16 2025 by rpki-client