Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/II7yHBEdnUHMS4NEG3cJmmouTG0.roa
File: II7yHBEdnUHMS4NEG3cJmmouTG0.roa (raw, json)
Hash identifier: 1A2ldI4N+lxuF/IwKKhIwjgsIHcFt59vvrcV1uOWMII=
Subject key identifier: 20:8E:F2:1C:11:1D:9D:41:CC:4B:83:44:1B:77:09:9A:6A:2E:4C:6D
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266ABAD9F30428E826229D462F1A92A9
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/II7yHBEdnUHMS4NEG3cJmmouTG0.roa
Signing time: Thu 02 Jan 2025 09:48:36 +0000
ROA not before: Thu 02 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 185.49.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ba:d9:f3:04:28:e8:26:22:9d:46:2f:1a:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=208ef21c111d9d41cc4b83441b77099a6a2e4c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:c7:5b:e7:7f:c3:e5:8b:92:de:c6:fb:cc:
96:02:bd:71:d5:3a:c0:1c:58:88:17:18:10:37:84:
47:15:04:b9:40:39:99:29:51:8b:82:82:8b:4b:d5:
a4:46:78:ac:20:c2:c4:8e:35:f2:9d:7e:1f:c2:5d:
97:4c:94:bc:fc:8f:8d:25:a7:15:94:67:b7:8b:40:
f6:d4:38:1d:3d:6a:77:1d:c6:62:d0:b5:72:2e:31:
40:50:67:4e:4f:95:af:f0:ec:0c:79:d2:e6:e5:13:
f0:97:7d:df:31:ae:c6:05:93:a3:e1:52:a5:bc:77:
65:b9:4f:29:54:b8:95:3f:8c:9e:a1:e7:f3:50:0b:
e0:cd:df:8b:8e:ee:c2:eb:9a:94:30:6d:45:07:30:
62:97:71:df:5d:a8:7c:52:49:06:11:6d:39:57:90:
75:35:4e:fe:47:b2:c2:ae:5d:fc:91:d1:09:bd:92:
3c:7f:be:33:f0:06:65:0f:a4:ec:72:44:9e:58:2c:
be:6c:f7:4b:8d:60:52:7e:58:fb:39:fb:05:9a:cf:
9d:12:0f:34:b9:41:54:57:86:2d:18:5a:d2:7d:e3:
c6:55:a7:36:13:37:7a:44:65:f2:93:7c:b9:42:74:
ce:cc:3c:1f:7e:52:a9:36:37:e6:88:5a:f3:19:99:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:F2:1C:11:1D:9D:41:CC:4B:83:44:1B:77:09:9A:6A:2E:4C:6D
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/II7yHBEdnUHMS4NEG3cJmmouTG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4f:63:23:88:24:2a:ca:4f:97:b4:bc:8a:83:2c:ed:87:ee:
25:9d:20:88:96:68:b4:39:b7:fe:a1:19:ed:c2:79:a1:48:7d:
fe:4c:4f:68:b4:2a:af:8b:ef:cf:f9:89:23:3f:f3:39:f0:46:
cd:ad:07:91:65:48:57:07:59:e2:95:63:b5:96:66:4f:d3:8a:
c7:96:6a:2f:fb:60:c4:31:56:57:a2:fe:85:b3:16:8b:d1:65:
75:b2:68:33:26:7b:c4:1f:72:38:dd:10:77:c0:14:d3:12:fe:
81:46:cc:4d:3b:bc:15:ca:32:9a:ea:3f:d1:71:d8:c2:63:75:
6f:d8:72:91:e4:30:88:1b:2b:6e:08:31:d3:47:3d:d3:52:25:
11:b3:ca:38:d8:c7:71:78:37:6f:0e:fd:86:9a:b5:08:c2:53:
b8:ae:9b:a0:35:8e:5c:65:f8:1d:f8:42:64:d2:37:7b:4e:67:
bb:9e:97:a0:be:74:0c:70:0a:bc:85:d1:0d:18:f1:eb:45:9e:
56:a1:de:92:d5:ef:71:14:bd:ae:3d:67:20:23:4e:6c:34:2a:
3c:9d:f3:52:ad:12:cd:c2:88:7a:cb:b9:90:08:2d:19:f8:56:
af:e4:d4:04:09:ca:2c:f3:04:84:eb:ee:0d:dd:6f:f1:e7:a1:
36:92:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:34 2025 by rpki-client