Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/_BQFOb4RfeyOje9Arc3xnmeBCCk.roa
File: _BQFOb4RfeyOje9Arc3xnmeBCCk.roa (raw, json)
Hash identifier: h/hRpoJ/41UGxL7tc97hMfLgDOcf5JHNmsQakoMz5gI=
Subject key identifier: FC:14:05:39:BE:11:7D:EC:8E:8D:EF:40:AD:CD:F1:9E:67:81:08:29
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F212F965E65BF51C9CFDC75190C4
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/_BQFOb4RfeyOje9Arc3xnmeBCCk.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50302
IP address blocks: 62.73.102.0/23 maxlen: 23
212.5.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f2:12:f9:65:e6:5b:f5:1c:9c:fd:c7:51:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc140539be117dec8e8def40adcdf19e67810829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:3d:c2:0a:e1:80:1d:e9:3f:2e:d8:a2:47:
0a:ea:ca:a7:7d:ee:0f:fe:f7:e0:de:85:da:f4:f5:
d3:0e:3b:38:fa:d0:c4:ec:c3:07:33:1b:09:5c:e4:
8c:6a:a6:c6:20:4f:de:e9:7a:13:80:d5:2d:2b:97:
d0:c7:64:bb:49:ee:e8:85:a5:33:62:2e:5e:bf:d4:
b0:e1:39:db:fb:fa:e1:28:6d:44:b0:81:29:4e:fb:
15:39:67:13:1c:76:27:1e:ba:f0:f1:c7:0e:7a:d4:
66:87:94:8d:f6:13:5d:8d:a1:7d:d4:6d:03:36:fb:
ab:46:1c:cc:09:95:6a:4e:81:bf:ef:06:61:c9:7b:
8f:c4:b0:9e:2c:57:55:7f:d2:6e:cf:a6:45:ed:30:
31:11:3b:c3:d6:e3:7b:b2:53:56:9c:5d:7c:c2:05:
2e:ab:b4:ba:f6:0d:f7:62:54:01:c2:6b:da:d0:e9:
6a:3c:0d:c1:68:f0:a6:24:a8:0d:5d:6e:27:0e:26:
f0:43:86:46:af:5b:cd:4b:ae:c7:d8:f0:f7:c0:03:
45:2b:a9:e8:92:34:7b:78:bb:78:24:3d:b3:43:0d:
e1:7c:d5:1c:04:9b:df:5f:b8:b6:66:28:f4:ec:99:
ab:38:e7:39:3b:b3:7a:84:ce:aa:f5:29:79:e6:2a:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:05:39:BE:11:7D:EC:8E:8D:EF:40:AD:CD:F1:9E:67:81:08:29
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/_BQFOb4RfeyOje9Arc3xnmeBCCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.102.0/23
212.5.134.0/23
Signature Algorithm: sha256WithRSAEncryption
24:a6:61:61:80:2b:43:e4:b8:d6:33:ca:9c:8c:97:7c:64:fe:
f1:04:0a:5b:67:e5:9d:bc:5c:81:ff:61:02:76:50:20:c7:37:
fb:8c:b1:36:86:5b:c9:53:5e:3e:c1:81:6f:bf:fe:35:c2:76:
e3:7e:55:b7:28:c2:0d:71:44:4c:9b:fc:d4:7f:f3:50:7b:d2:
c8:29:31:58:f4:58:7f:76:c5:3b:cc:8b:5e:aa:1f:51:34:cb:
9f:48:15:0b:78:67:10:26:28:43:74:5a:1e:7a:12:7b:4a:de:
ad:bb:02:43:67:a2:bc:6a:5c:72:25:6e:a5:d9:88:b9:c2:99:
c7:8a:b4:27:fd:ea:59:fb:8e:2e:32:68:5d:d8:cd:40:7c:b0:
bf:99:12:30:1d:1e:a1:dc:5f:7c:35:02:1e:a9:d5:4a:34:65:
c6:34:7e:3c:64:f9:95:70:d9:ed:58:1e:60:6c:19:1b:f8:8f:
05:cc:ba:ad:77:31:57:18:de:00:c2:ea:b8:0c:50:0e:f6:6b:
42:e7:a7:b0:61:89:32:b4:21:cb:b4:e1:48:7c:09:b1:12:c3:
f9:c0:4f:d3:d7:8c:97:f4:7a:ba:8d:63:b2:48:d8:bb:79:03:
db:5d:b0:02:5f:97:4f:3e:03:0f:e2:34:1d:12:cb:e7:1f:b5:
7b:ee:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:38 2025 by rpki-client