Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/fzDOyXHw4ThoTSAi7ljnYyky0WE.roa
File: fzDOyXHw4ThoTSAi7ljnYyky0WE.roa (raw, json)
Hash identifier: b1cHh8j1rPir42V6XsC+HO+A+XYb+IZWauUQFAQdg78=
Subject key identifier: 7F:30:CE:C9:71:F0:E1:38:68:4D:20:22:EE:58:E7:63:29:32:D1:61
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 0194258F7478037D0754E7DD85C0ED7D8909
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/fzDOyXHw4ThoTSAi7ljnYyky0WE.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50117
IP address blocks: 193.104.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:74:78:03:7d:07:54:e7:dd:85:c0:ed:7d:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f30cec971f0e138684d2022ee58e7632932d161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:4a:7c:6b:b2:8d:2a:88:a1:74:32:8a:14:
ca:7a:19:e3:0f:c1:46:56:39:f7:3c:8f:1d:82:79:
c6:71:27:b0:9e:93:c9:d1:0c:cd:23:89:f9:c1:70:
20:4f:f3:6c:f9:11:37:79:29:95:2b:9c:31:7f:cc:
60:a2:99:e1:5e:5d:73:80:43:6c:c3:4f:da:32:40:
ec:ac:6c:c7:49:1e:23:ac:d1:e5:ec:a3:21:e2:7e:
b7:f7:92:93:00:d3:f5:3d:f1:ec:37:64:b2:21:94:
b1:af:87:75:7b:91:b6:b8:fb:24:d2:fe:e5:ff:c0:
5a:c0:0d:4e:82:a1:e4:84:44:d1:cd:24:5c:a1:06:
6a:82:8e:b2:d9:71:22:47:dc:a6:67:86:5d:59:4b:
20:53:26:c3:27:e6:43:d0:16:50:b8:bd:3d:61:67:
23:c5:08:f5:4c:31:f4:f7:3f:50:d9:c3:e7:69:b7:
1d:6b:cb:1a:94:82:70:bd:9e:73:1a:c6:fc:f0:92:
a7:1e:c9:1d:c6:c3:ad:f4:75:d8:e2:34:29:06:6d:
33:13:fc:65:39:0f:a6:21:dd:b7:41:55:68:16:9a:
62:bb:e2:a2:f8:dd:d2:36:0e:12:a8:6c:40:27:23:
c4:7a:0e:8a:52:9f:39:39:18:f2:dd:9e:01:d3:8b:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:CE:C9:71:F0:E1:38:68:4D:20:22:EE:58:E7:63:29:32:D1:61
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/fzDOyXHw4ThoTSAi7ljnYyky0WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.61.0/24
Signature Algorithm: sha256WithRSAEncryption
43:72:9f:5c:e9:22:34:16:fc:37:80:b4:27:dc:ff:45:8d:33:
d7:1f:99:23:6e:0b:e9:78:ce:dd:9b:31:27:d1:dd:55:d7:4f:
56:e6:0f:7e:e6:1b:ef:c1:1a:ba:b3:ec:2a:68:9f:a4:99:ca:
de:76:c5:28:04:87:b8:d1:c7:cb:37:64:1c:40:ce:d9:fa:d3:
ae:4c:87:02:a6:bf:d4:95:ce:11:93:47:2b:e1:58:50:3c:21:
99:36:80:26:d6:81:27:15:e5:bf:f5:64:a6:e9:21:97:e3:17:
13:42:64:c7:35:81:2f:a6:c1:bb:5b:8a:15:eb:4e:38:5a:bf:
0f:2a:f6:44:8a:2e:ce:2c:32:5b:c1:51:55:5a:b4:69:ff:c4:
4b:68:2f:d4:c5:58:72:a2:94:74:fd:ce:c6:21:54:45:aa:1c:
c8:c4:cf:81:cd:0e:ba:6a:a5:a5:1d:7c:20:cd:1c:59:8b:f5:
a2:e5:79:3c:10:b3:0a:a0:7a:51:4a:dc:db:6a:08:bc:20:66:
08:01:14:0a:ab:48:46:36:3e:89:ea:29:83:59:38:28:3c:ec:
d4:4f:0d:10:b6:29:5e:41:53:0e:26:47:a7:aa:53:57:a3:e7:
13:65:23:72:a3:9d:e7:fd:61:3c:1c:4c:a9:ee:68:f6:e2:cc:
1e:6e:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:54 2025 by rpki-client