Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/1-7BUvW0DqpGIoHRUThEcreOn85U.roa
File: 1-7BUvW0DqpGIoHRUThEcreOn85U.roa (raw, json)
Hash identifier: 1h+BwanAoTba+J1D0yPZhO85Nea+fKXXhs9HYI66nl0=
Subject key identifier: FB:B0:54:BD:6D:03:AA:91:88:A0:74:54:4E:11:1C:AD:E3:A7:F3:95
Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Certificate serial: 0194258F68EA2781820ACC9477D2865AA896
Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/1-7BUvW0DqpGIoHRUThEcreOn85U.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200780
IP address blocks: 185.204.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:ea:27:81:82:0a:cc:94:77:d2:86:5a:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb054bd6d03aa9188a074544e111cade3a7f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:1c:57:82:09:8f:ad:93:a5:8d:3e:b8:50:
ff:90:fb:2c:be:15:3b:08:89:e4:47:46:20:da:2f:
57:5a:79:e4:28:8e:5b:6c:27:b4:8d:22:ee:eb:da:
9c:31:f9:82:34:20:59:36:72:f1:dd:8a:cb:28:12:
b5:15:b6:44:0d:27:f2:5e:63:c1:9e:62:b7:f6:c3:
04:7a:97:8b:49:73:d9:6c:d8:a5:a1:d0:69:9f:0f:
91:15:50:cb:13:32:4d:d0:c0:1b:1a:2a:a4:ee:dd:
31:09:2a:69:9f:79:c7:18:18:f7:f4:7a:20:34:5e:
0a:2f:7f:95:2c:ff:24:3c:74:ae:50:9c:fd:6d:aa:
c6:b1:74:44:65:f5:4f:91:a0:d6:e7:ac:88:5a:63:
72:e7:2e:49:e6:8f:bd:39:2c:50:02:cd:71:fe:51:
ac:ab:9c:4c:5d:b9:23:53:54:db:82:29:84:55:1b:
8c:06:e0:3c:38:bf:a3:7c:8b:3f:8d:ec:c4:ef:4a:
ed:e9:e3:72:89:0a:80:7a:56:e4:ef:09:7d:c7:96:
85:01:b8:ed:0a:bf:ce:8d:65:95:50:b0:83:c0:02:
97:0b:d0:ba:18:58:9a:2a:8f:c7:d5:bd:64:ab:30:
84:7d:1f:d0:60:f9:00:ec:36:e1:21:25:c7:22:fa:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:54:BD:6D:03:AA:91:88:A0:74:54:4E:11:1C:AD:E3:A7:F3:95
X509v3 Authority Key Identifier:
keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/1-7BUvW0DqpGIoHRUThEcreOn85U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.190.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6e:ea:6c:6a:31:41:0b:38:b6:58:d7:d5:00:7a:c9:d1:ab:
e9:ca:4a:62:0c:0a:9c:a9:12:69:76:eb:c6:f2:a0:bb:a1:30:
4e:ae:6a:10:0c:64:c6:b3:35:cb:4c:66:16:18:36:72:67:14:
8e:f0:b0:77:a1:87:4b:84:b7:c5:e4:df:59:25:8a:49:2f:6f:
a6:11:98:eb:0d:8b:b7:59:e6:27:56:78:e4:75:87:f7:d2:b5:
35:83:e2:bd:67:0c:6d:3c:17:d8:f7:51:8f:4b:76:54:7b:1e:
c1:b7:61:36:45:8e:4c:b4:66:47:49:93:38:e8:13:32:50:40:
77:85:ad:af:a9:78:7f:ab:5e:53:53:6e:9e:41:4a:7e:ce:2e:
97:e4:62:63:2d:c5:bd:17:40:de:83:40:03:9f:43:be:f1:30:
d2:69:25:cc:78:fe:88:b9:79:27:06:8c:b9:f8:12:9e:62:c2:
cc:b5:48:e9:ea:ed:d3:b8:d7:f4:b6:3a:9a:ee:4d:00:c2:82:
c5:b3:46:4e:57:dc:03:15:07:9e:e0:66:c6:97:8e:b3:60:20:
74:4e:ea:b7:7e:89:d2:44:a6:a2:04:52:43:56:c8:65:aa:83:
57:1d:86:4f:70:79:16:28:27:93:4d:29:77:f4:a7:72:3d:93:
d6:5b:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:10 2025 by rpki-client