Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fkiMonxbwz3kZc8YkJyvn2qIywM.roa
File: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (raw, json)
Hash identifier: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=
Subject key identifier: 7E:48:8C:A2:7C:5B:C3:3D:E4:65:CF:18:90:9C:AF:9F:6A:88:CB:03
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449CE09C277ED4BACF1E4EB5DBE5A5
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fkiMonxbwz3kZc8YkJyvn2qIywM.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204620
IP address blocks: 83.139.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:e0:9c:27:7e:d4:ba:cf:1e:4e:b5:db:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e488ca27c5bc33de465cf18909caf9f6a88cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:32:08:4d:ca:c9:0f:ba:3f:6a:5d:5e:cd:
3a:5c:3d:45:8f:3d:04:c5:71:12:c9:b4:fd:c6:f1:
e3:db:e4:ed:f4:5c:85:0a:94:1f:62:cb:5a:88:35:
00:d0:0c:47:66:c7:7d:eb:31:8c:de:e2:c0:5d:f7:
7d:e8:f6:e5:35:df:0e:da:94:b3:d7:82:fd:df:63:
41:dc:fe:b0:a2:4a:05:df:5f:60:2b:a8:50:58:9e:
28:a3:4a:50:44:8f:53:00:33:c1:ac:a6:45:cb:ba:
ae:a4:e2:e2:4b:fa:c4:df:47:1c:9f:bb:b1:bf:52:
7b:55:b8:f4:39:90:10:43:cd:a0:82:b8:20:55:70:
46:23:82:ea:0d:fc:da:bd:74:bd:e9:c9:b3:e1:a0:
5e:24:09:d4:60:80:5e:be:01:fa:a2:89:1e:23:1b:
42:71:e3:92:13:9b:1b:e6:a4:95:a8:49:fc:3b:e6:
c4:13:f5:82:56:10:c9:e9:11:52:b3:80:12:9c:87:
f5:ff:79:9d:b6:05:1a:35:69:ac:4a:36:5f:05:f4:
b5:ef:1c:2e:86:20:5a:8f:1a:02:42:27:33:8c:b4:
23:ad:8a:d0:85:0f:09:62:38:22:4e:70:d1:9e:89:
ac:56:69:5d:52:03:32:0a:de:34:99:b3:d5:90:f4:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:8C:A2:7C:5B:C3:3D:E4:65:CF:18:90:9C:AF:9F:6A:88:CB:03
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/fkiMonxbwz3kZc8YkJyvn2qIywM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.21.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8a:c7:dd:fe:99:11:82:d0:98:e3:85:00:9e:cd:84:c8:5b:
57:88:70:48:c0:31:02:08:21:3b:85:f0:a2:20:da:f7:91:7f:
4b:ed:a2:54:4d:fa:98:09:68:34:1e:6e:94:36:8c:38:3f:5e:
f1:60:05:9a:bb:79:93:41:cf:cd:50:a8:ef:c4:d7:00:ce:41:
17:4a:f3:e2:99:f1:b3:34:a7:ff:91:b1:f3:95:ad:60:43:1e:
5e:d5:eb:49:0a:4b:26:66:58:75:d3:2c:ca:c7:58:a9:7d:f8:
c6:60:b5:c3:e2:af:57:0d:b2:01:b0:58:f0:00:c2:74:59:1f:
21:8e:31:48:15:99:5e:a6:6f:38:91:09:32:bc:2b:a8:6a:73:
cb:8d:c5:da:2b:66:f3:cd:7b:7b:a1:20:30:15:67:16:9b:1d:
21:1c:77:6b:9d:3c:b0:97:d6:da:82:e7:4e:f7:bd:75:f3:2d:
8a:5e:78:d8:14:8f:c8:a2:ac:fd:a5:73:e2:24:b4:8d:73:d7:
0f:b9:2b:1f:72:51:fa:c7:d3:4f:c0:8d:6b:ec:2c:93:fd:06:
25:2b:01:0a:c7:43:68:14:0e:0a:79:71:8a:eb:8b:23:66:d4:
c5:e1:e6:4f:bf:53:f9:25:67:fe:ee:3e:5a:52:c1:36:12:1e:
51:23:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:53:07 2025 by rpki-client