Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/_d2EFT-OpH3an9-ei2qvPBIPUiU.roa
File: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (raw, json)
Hash identifier: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=
Subject key identifier: FD:DD:84:15:3F:8E:A4:7D:DA:9F:DF:9E:8B:6A:AF:3C:12:0F:52:25
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0194266AB4585FA3D6C576CF577B16B235FA
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/_d2EFT-OpH3an9-ei2qvPBIPUiU.roa
Signing time: Thu 02 Jan 2025 09:48:34 +0000
ROA not before: Thu 02 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33846
IP address blocks: 164.133.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b4:58:5f:a3:d6:c5:76:cf:57:7b:16:b2:35:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Jan 2 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fddd84153f8ea47dda9fdf9e8b6aaf3c120f5225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:95:e7:28:01:b6:e7:be:ab:4d:46:79:d7:
90:30:1c:12:3d:31:76:3c:46:00:87:fc:85:b3:69:
62:dd:d3:42:57:04:1d:9e:47:9b:bb:ab:df:c2:3c:
12:03:9e:c6:ee:74:b5:22:a7:76:64:72:ed:55:87:
14:fb:e8:78:d7:b0:77:f4:d2:7e:06:90:4d:92:40:
7e:06:27:e7:22:c7:0c:12:f4:f5:47:0f:f3:6a:f0:
2c:c9:44:59:ec:d6:95:3b:4a:4b:24:4f:d5:30:2f:
d4:a8:7f:aa:69:74:1d:32:ed:a0:af:8a:f2:96:0e:
47:a7:94:e9:2b:13:85:c5:96:e0:40:17:81:85:fe:
bd:f4:06:43:fb:22:b5:bf:f4:c2:a2:19:5d:68:f3:
22:96:ed:d7:4b:b6:23:12:c0:87:1f:b3:93:b9:2d:
d9:37:1c:7f:5b:b0:9f:76:69:f0:e8:e7:60:11:b6:
9f:ab:7b:c8:c5:5c:f5:9a:d7:0b:ab:76:e6:6a:50:
f8:aa:26:96:01:4f:fa:45:a2:99:70:35:5a:38:c3:
3a:33:67:81:44:16:ad:41:e8:d3:5f:0e:15:2f:68:
f0:cc:cc:9c:16:11:78:76:f3:a7:e4:83:81:7e:24:
05:be:49:be:24:2c:a9:bf:37:2a:26:49:ea:0c:5b:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:84:15:3F:8E:A4:7D:DA:9F:DF:9E:8B:6A:AF:3C:12:0F:52:25
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/_d2EFT-OpH3an9-ei2qvPBIPUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.133.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e9:03:6d:2e:3d:3b:05:24:9a:2f:dd:1b:f6:d0:97:64:9b:
10:df:d7:18:c3:7a:57:a3:26:c6:53:98:e8:a3:a4:10:51:d7:
ac:8e:77:ed:5b:c4:aa:c1:85:82:64:10:cc:0e:74:fe:c5:e8:
ef:8f:fb:e2:b8:a6:5d:5f:76:bc:3c:b0:52:46:71:8f:c2:ea:
e0:94:41:10:ec:a0:be:b1:b0:b7:ef:b8:ee:17:3e:e7:bd:62:
a8:da:8c:02:38:10:bc:eb:3d:48:5e:fd:34:9c:82:f6:93:fe:
ac:06:7a:88:bd:2e:7d:24:f6:56:8e:fd:49:8d:fd:68:92:18:
e5:09:a6:19:d5:f4:94:de:f8:b1:e2:18:1f:39:97:c1:ad:9b:
b5:87:4a:07:ed:a6:65:b0:ca:91:de:13:41:f2:4d:d9:9c:37:
7c:51:fa:c5:0f:d3:75:2a:3b:cc:95:50:2e:09:9a:4b:37:41:
f5:f9:18:7d:7c:ac:63:df:48:f5:90:ec:50:3a:79:c1:23:e8:
2f:24:80:87:3b:7e:9d:f6:0b:bb:ab:e0:8d:6b:23:74:1d:d5:
81:e0:5f:99:9f:f4:68:3e:1e:c5:cd:86:46:bd:11:70:71:eb:
17:71:1c:f6:c6:1f:39:e1:7d:29:21:f4:1b:21:37:d9:91:4e:
23:bd:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:09 2025 by rpki-client