Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa
File: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (raw, json)
Hash identifier: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=
Subject key identifier: 7F:73:77:65:A4:55:D1:B3:9D:95:7D:77:F8:A2:06:4D:78:87:4B:E7
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 0194266C258FD06BF0FBA3F8C40E8438EA4A
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50469
IP address blocks: 153.92.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:25:8f:d0:6b:f0:fb:a3:f8:c4:0e:84:38:ea:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f737765a455d1b39d957d77f8a2064d78874be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:94:48:d8:86:d2:da:fd:67:f2:39:a3:01:
ab:c6:24:17:87:8c:8c:4b:0b:bd:6c:4d:b6:38:7a:
05:f5:a4:55:4c:c7:e7:ef:ec:09:d2:e7:62:ac:60:
69:10:56:b5:b9:23:41:0f:df:c0:6c:94:60:10:b2:
40:5f:6a:00:a2:89:66:2d:e0:80:2d:51:36:79:81:
aa:53:04:4c:5c:81:71:6b:1b:6f:83:24:c0:e4:2b:
ac:90:39:97:35:fb:fa:25:69:d9:75:a8:78:88:6e:
54:c7:28:16:97:7f:41:4b:e6:1a:71:b5:77:9b:be:
93:30:06:80:6f:50:df:da:54:81:59:b3:ba:ab:ec:
0d:0f:73:86:55:54:ff:fc:df:d8:aa:51:9e:46:d2:
63:b8:40:39:d0:23:4b:fe:1a:22:a9:e6:02:ed:cf:
a1:ac:1c:3a:41:a1:66:b0:4f:d3:9a:23:33:b3:18:
47:e2:a6:60:33:c5:9b:82:0b:4c:79:2e:ec:85:33:
b3:4d:0a:6d:16:81:9f:14:e8:95:0b:ac:0b:65:2a:
de:5f:ef:7e:fc:d2:80:ba:e2:d1:a2:68:02:0d:10:
73:b2:b3:e1:a6:b0:db:2b:3f:b3:a9:24:a7:24:cd:
c4:c7:20:49:a6:9d:5d:74:33:c5:37:1f:9c:29:96:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:73:77:65:A4:55:D1:B3:9D:95:7D:77:F8:A2:06:4D:78:87:4B:E7
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.187.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fe:72:1b:fa:44:d5:c8:36:26:0a:2d:cf:df:3d:2f:f2:b4:
cd:41:61:ab:63:a1:76:47:ab:0e:c6:81:6a:0d:20:97:54:32:
e8:58:ad:cf:20:90:aa:7e:2f:98:60:0d:8a:aa:2e:b0:2e:be:
01:0e:05:ee:8a:da:47:b5:d7:25:33:5e:df:5a:74:53:3b:60:
04:5e:e0:ec:12:6f:0e:62:f1:c5:76:3e:30:ac:76:e1:79:73:
16:19:94:84:41:81:e7:b9:c4:2c:55:74:ae:ad:59:a4:6c:59:
35:73:fe:0a:5f:32:51:62:16:54:87:4c:15:37:a8:56:21:c4:
db:9e:1f:83:5b:ab:bf:6f:ff:cb:df:33:f2:2d:58:64:11:67:
fa:07:8a:ad:ff:5c:3e:b8:36:2b:91:9a:30:68:08:ce:55:b0:
69:72:37:a4:f2:dd:5e:14:a6:7b:00:30:d4:58:87:90:f3:e5:
83:02:fe:fd:a1:91:a4:af:67:eb:d4:42:52:bd:8e:2d:35:b6:
e4:60:be:38:aa:1d:fe:72:c1:2b:10:90:16:ee:d1:b5:63:dd:
7c:de:b9:29:1c:bf:a3:50:39:e6:c3:ea:73:d4:22:17:be:df:
dc:69:ec:ab:d8:a2:ef:59:b2:7d:a1:ff:f8:99:43:df:cd:6e:
de:fb:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:43 2025 by rpki-client