Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX42plXOIwkenaDbeF18ikl0QAk.roa
File: fX42plXOIwkenaDbeF18ikl0QAk.roa (raw, json)
Hash identifier: lArGsoR/CuTZ43nz99yl1BXUNjgAUEDrh/JorDOTvaU=
Subject key identifier: 7D:7E:36:A6:55:CE:23:09:1E:9D:A0:DB:78:5D:7C:8A:49:74:40:09
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222016D7F7B66B6ABDD274A4C991A193
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX42plXOIwkenaDbeF18ikl0QAk.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38337
IP address blocks: 188.241.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:d7:f7:b6:6b:6a:bd:d2:74:a4:c9:91:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7e36a655ce23091e9da0db785d7c8a49744009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:89:74:7a:da:ac:50:fa:22:ab:b1:46:2f:
91:fa:ed:17:39:09:91:1f:c0:93:29:75:26:68:f5:
22:ce:83:03:c7:63:19:18:c4:6f:c6:d1:33:a9:0d:
ba:f6:40:dd:92:60:8b:ca:0a:ca:5d:e2:74:5a:29:
8f:32:bc:ce:cb:10:ab:c9:fb:1d:58:3d:12:41:29:
f3:a4:00:ba:3e:b6:08:e8:55:52:54:e8:80:94:69:
f0:1b:9e:2a:ba:4f:be:a7:96:29:d7:9c:6a:d8:98:
13:dd:3e:22:73:8a:89:3b:6f:bc:75:c3:72:44:d5:
c4:23:13:ec:d5:04:63:b9:55:1a:ac:38:8d:29:7d:
83:16:0e:a3:21:2c:34:5b:18:29:2c:91:26:a6:c0:
67:7f:e4:d5:22:a2:1b:e6:1d:3c:f7:81:d0:45:69:
a0:94:79:a2:56:03:d2:28:ed:d9:16:ca:f6:44:e5:
14:0b:06:64:93:97:85:4e:73:ec:b6:e8:25:8d:5b:
b3:70:c3:17:1a:4f:8b:4f:7b:d7:63:dc:1b:53:4e:
ab:0a:22:a5:08:1d:2e:e5:80:dc:d7:38:70:85:de:
52:0b:8a:77:10:40:36:ae:d8:80:72:1a:15:24:eb:
f7:49:fe:b9:ef:b1:be:4d:93:8a:32:f8:22:cf:15:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:36:A6:55:CE:23:09:1E:9D:A0:DB:78:5D:7C:8A:49:74:40:09
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fX42plXOIwkenaDbeF18ikl0QAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e6:86:2f:cf:be:27:e5:32:25:11:75:81:ee:36:05:65:c4:
60:71:e4:de:c3:19:35:11:4b:cf:03:d1:ab:c8:01:45:98:c0:
d0:11:8a:66:2c:c7:fb:0b:c8:48:88:8a:c7:1c:ec:cc:6c:b1:
df:6f:2a:87:8f:c4:60:c9:c9:94:68:d4:d3:d4:af:50:d5:a9:
a5:2d:d9:09:9b:c6:47:5e:30:88:ba:f9:6a:3b:e2:4c:e6:e5:
23:66:d8:24:3f:24:5f:c5:12:0c:34:e5:5b:89:ff:82:41:84:
07:a6:a1:74:64:f9:ef:8d:c2:ef:4f:e5:b4:5b:ec:c5:d9:f0:
49:0b:12:ab:3a:02:13:13:00:b7:37:60:d3:56:43:99:3a:82:
6b:46:74:31:d2:04:7c:67:20:16:dc:21:51:04:0f:2f:bc:a3:
b4:e2:7f:a5:47:4e:b8:db:b9:f6:e0:13:9e:dc:97:bc:82:bd:
f7:8c:ee:fa:6c:6f:68:0a:f8:70:8b:60:81:d7:10:8b:48:3a:
d9:3b:ca:2c:fb:70:69:e4:95:49:63:5e:d8:46:85:35:3c:6a:
1c:d3:f4:0f:71:2e:04:d4:a8:ab:8b:4a:77:45:05:22:6e:15:
bd:9b:64:db:68:6a:11:e5:c5:6f:a3:cf:99:b3:7b:3f:32:d8:
71:2c:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:35 2025 by rpki-client