Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/ff-qexzHEUD1WgOGjo1dcXlM5zw.roa
File: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (raw, json)
Hash identifier: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=
Subject key identifier: 7D:FF:AA:7B:1C:C7:11:40:F5:5A:03:86:8E:8D:5D:71:79:4C:E7:3C
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019420D6145B7D14C1AE00D3C517D472064B
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/ff-qexzHEUD1WgOGjo1dcXlM5zw.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204818
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:14:5b:7d:14:c1:ae:00:d3:c5:17:d4:72:06:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dffaa7b1cc71140f55a03868e8d5d71794ce73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:bc:6b:f5:7a:81:6d:cb:83:dc:3f:c7:27:
16:c0:de:f5:f6:74:c4:c7:fb:5d:38:7a:3c:03:98:
03:ea:84:98:8c:59:96:43:67:d7:9f:28:ea:09:63:
42:5e:dc:46:45:c3:98:7d:7b:5e:d3:0e:77:93:e5:
48:31:41:c2:a5:92:99:23:d9:df:61:27:d1:d6:54:
06:15:f6:3c:c0:d4:67:1c:0e:38:dc:4d:28:33:18:
3b:b4:79:31:45:89:da:60:a8:9b:0f:e7:1e:cd:d4:
90:77:e0:02:a4:d4:b8:8a:c0:81:79:85:3b:fc:a6:
8c:1a:a7:aa:91:98:91:41:46:64:8a:09:5d:33:4a:
00:e3:04:bf:a2:2d:0a:09:ac:f3:73:6b:09:78:b3:
05:c7:4f:11:df:5a:03:49:2b:e9:3d:98:24:48:fc:
b8:ae:c0:ed:43:81:13:29:51:f7:58:3d:56:ce:86:
4b:e1:42:d1:27:f2:dc:91:27:b8:ba:4a:3f:6f:5b:
e7:49:72:35:58:a4:57:b2:fa:1d:8a:22:a0:4c:21:
14:8e:e6:2f:02:62:ec:8e:aa:ea:e8:c2:58:24:56:
62:c1:14:12:f2:ab:eb:62:cc:3a:27:21:c8:31:3b:
d5:bf:11:16:c2:83:38:ef:54:74:5b:3f:e7:71:17:
e4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FF:AA:7B:1C:C7:11:40:F5:5A:03:86:8E:8D:5D:71:79:4C:E7:3C
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/ff-qexzHEUD1WgOGjo1dcXlM5zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f9:db:1c:63:33:cc:12:ec:26:b8:1a:50:29:6e:61:8a:cd:
4a:65:f3:2b:59:d8:b9:e8:1a:b2:9b:27:43:aa:a8:f7:35:5e:
4a:86:9e:36:cc:b2:29:14:ac:23:f4:f9:cc:ed:d5:03:57:0d:
ec:7e:17:21:51:30:7c:1f:23:bb:58:7a:ea:5c:96:d6:b6:f3:
54:1c:78:9f:79:f3:aa:1e:81:9a:1b:d5:b1:89:74:a9:7c:a9:
63:55:46:07:15:68:df:77:fd:7f:7a:99:0c:d7:81:ab:c5:9b:
97:46:28:63:d1:54:a8:73:f0:26:6b:64:90:a2:79:3a:39:cc:
e1:eb:15:3e:db:4f:01:fe:d3:83:69:bb:fd:2b:38:84:01:cd:
e1:00:dc:26:cd:b1:c9:4b:dd:ee:ef:f6:00:5f:cf:cc:28:4f:
af:86:c9:22:8d:68:02:56:1e:b0:d9:cc:da:8d:da:26:26:ea:
58:f2:94:ca:98:79:1a:76:41:06:68:32:79:12:b6:8d:ab:1c:
b0:4e:09:f1:3e:9e:cc:73:27:4b:f8:92:52:22:70:13:2a:97:
f7:84:f1:4c:d6:ab:87:6c:40:cc:c2:a3:87:7d:23:55:4e:40:
c9:22:af:b0:34:b1:0c:a4:20:8f:82:a4:f0:c2:b2:65:b7:eb:
f6:f7:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:03 2025 by rpki-client