Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/X106OsUC0FAl9jkdnlr5gWlzbbQ.roa
File: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (raw, json)
Hash identifier: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=
Subject key identifier: 5F:5D:3A:3A:C5:02:D0:50:25:F6:39:1D:9E:5A:F9:81:69:73:6D:B4
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019424B2C014B7A1BA463823A44831C6C9D7
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/X106OsUC0FAl9jkdnlr5gWlzbbQ.roa
Signing time: Thu 02 Jan 2025 01:48:01 +0000
ROA not before: Thu 02 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203167
IP address blocks: 195.88.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c0:14:b7:a1:ba:46:38:23:a4:48:31:c6:c9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jan 2 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5d3a3ac502d05025f6391d9e5af98169736db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:78:9e:c4:81:53:64:ce:1b:3a:5c:e8:37:
87:9c:ed:57:60:4f:0c:46:85:32:12:85:df:d0:a4:
f3:1e:86:ad:00:b0:47:02:04:53:33:b5:06:a0:b6:
5d:51:3b:43:b5:ac:47:70:e7:b8:ce:14:0f:00:e0:
0e:67:c4:90:0e:2c:2d:3e:e2:a6:f0:68:ab:d1:0b:
85:c5:97:9c:b0:0d:87:bf:79:d7:00:f9:9c:51:35:
3b:3c:e0:72:bb:c8:d2:56:5a:25:dc:43:1c:27:2b:
e4:07:88:54:75:dc:cc:53:3b:ee:7c:7e:67:f8:ab:
70:22:84:d5:a9:18:ec:be:e2:7e:90:db:3e:f9:ce:
7b:f8:55:eb:72:86:53:71:ee:b8:4f:88:66:07:64:
1f:ba:e6:47:4b:1a:cd:b5:6b:ad:da:0b:e4:83:29:
ea:97:3a:2a:e0:f5:f2:7f:31:90:9b:e0:22:64:92:
e9:e6:46:63:2e:6f:36:22:df:41:9c:4f:43:fe:c2:
16:1a:1b:6f:05:5a:79:ef:c1:94:9d:48:68:c5:6d:
bd:83:48:3a:65:04:36:48:6a:7b:d6:6c:6e:c5:da:
a3:a0:35:08:1f:57:12:9c:60:3e:a8:cb:df:3d:6a:
34:f0:68:29:ac:70:1e:19:11:c4:57:7f:4a:35:83:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5D:3A:3A:C5:02:D0:50:25:F6:39:1D:9E:5A:F9:81:69:73:6D:B4
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/X106OsUC0FAl9jkdnlr5gWlzbbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.197.0/24
Signature Algorithm: sha256WithRSAEncryption
32:dc:15:09:8a:e1:ff:c5:2f:02:7f:df:6d:ed:88:56:9e:c4:
5c:b2:23:77:90:13:9f:37:a4:2a:a6:dc:02:5d:1b:bf:ca:fd:
ad:d4:9f:af:34:81:15:b7:26:c3:81:90:f3:92:f8:5d:16:df:
8a:2c:e1:88:77:5e:80:b4:68:3a:3b:a6:13:88:24:46:a7:bd:
52:6a:d4:ed:18:66:5d:b2:f8:63:c6:07:8e:ca:d9:24:d0:13:
31:b9:cf:16:21:34:e7:dc:9d:22:9a:b7:16:f5:ef:72:4a:1f:
05:d5:32:50:35:97:d4:54:eb:b0:20:81:51:4b:ea:11:ee:9b:
45:6c:94:ec:ef:26:5b:b6:b4:16:d1:5b:fe:17:f7:83:c3:4a:
23:ee:0a:26:a8:0e:7f:9d:d7:84:f7:ef:03:a0:62:c3:59:aa:
28:3c:30:6b:12:b3:e9:24:c5:d2:ef:65:79:23:6c:a2:ac:7c:
c5:d3:7b:00:27:86:15:1d:72:a7:bf:f1:12:47:77:26:5a:cb:
76:cc:c3:46:fd:95:b3:3d:d5:cf:78:74:09:b7:44:3a:51:97:
f5:74:ee:f4:4d:54:06:f8:c5:2e:4c:7a:4f:f5:fb:a4:eb:9c:
90:75:27:bc:7f:8d:60:42:02:98:41:bc:33:4c:38:f2:ea:0b:
77:e5:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:35 2025 by rpki-client