Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/F4krcfZM1UZsTqvaMCtpZmdxPeY.roa
File: F4krcfZM1UZsTqvaMCtpZmdxPeY.roa (raw, json)
Hash identifier: eSWMVIFHJu7FWr2c/Zj4PabuZICvvVpgjd0R+OOr6I4=
Subject key identifier: 17:89:2B:71:F6:4C:D5:46:6C:4E:AB:DA:30:2B:69:66:67:71:3D:E6
Certificate issuer: /CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Certificate serial: 018682F6BB04FD4FB722AE7D2C6564835ED6
Authority key identifier: F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/F4krcfZM1UZsTqvaMCtpZmdxPeY.roa
Signing time: Fri 24 Feb 2023 10:27:33 +0000
ROA not before: Fri 24 Feb 2023 10:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 194.26.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f6:bb:04:fd:4f:b7:22:ae:7d:2c:65:64:83:5e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Validity
Not Before: Feb 24 10:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17892b71f64cd5466c4eabda302b696667713de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:59:14:d9:64:0a:92:1b:69:db:f4:63:9c:84:
e8:30:c4:82:37:53:2f:04:b4:64:b0:92:de:4c:4d:
71:88:c5:5f:04:fd:2f:d3:1b:55:d8:81:0e:42:fc:
4f:86:bc:d2:db:ba:e3:5d:ea:18:6d:80:73:12:db:
40:c0:88:65:9f:11:66:bd:53:91:70:df:43:7f:c3:
6e:4d:1a:4d:80:8e:e7:2c:58:74:b1:3a:29:d0:b5:
47:db:15:6b:82:82:04:e4:33:11:fa:9a:a4:49:8a:
0b:07:1f:46:82:d8:5e:39:7a:2f:22:1f:3d:3b:7e:
24:a8:13:25:52:f1:54:84:bf:03:3f:4d:4e:fd:df:
72:44:fa:1c:15:e6:b9:51:fa:22:79:e0:2d:f1:c6:
9a:24:b5:0d:9f:00:2a:5f:58:64:84:d1:e9:19:12:
9c:dc:30:a5:51:84:c4:2b:99:e2:25:d2:48:31:bf:
85:71:93:94:45:fa:88:04:40:f9:13:6d:a0:2d:97:
ac:a9:cc:d2:6d:fa:92:3a:74:da:d6:ed:95:3f:59:
79:6b:37:64:5e:08:39:fa:b1:f2:ba:56:97:36:9f:
42:9e:40:da:18:4a:6d:bc:03:32:f9:7d:76:ae:b7:
81:52:09:69:da:a5:87:12:20:0d:7a:95:3c:b4:24:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:2B:71:F6:4C:D5:46:6C:4E:AB:DA:30:2B:69:66:67:71:3D:E6
X509v3 Authority Key Identifier:
keyid:F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/F4krcfZM1UZsTqvaMCtpZmdxPeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:84:4f:d9:87:3b:bf:2b:76:f9:6e:d3:3b:3a:12:3a:12:8b:
d4:2b:14:f6:47:dd:b1:56:33:5e:b0:1b:a7:b2:54:66:6e:13:
bc:43:36:99:df:38:22:7f:b7:d9:a0:6b:93:ee:39:4c:0e:7c:
71:89:72:7c:c2:b8:d4:7e:68:ec:b6:3c:bd:d9:2f:71:9d:45:
1c:34:f0:d8:46:3f:c5:86:d2:bf:f7:21:58:6e:86:2c:c9:44:
bd:eb:41:f9:25:dc:d6:66:fe:66:69:2c:25:4b:60:ba:74:ed:
6c:48:b0:f2:b7:64:f9:c5:bb:fb:4b:85:9e:c2:b4:6f:ea:3c:
89:38:70:3c:07:9d:02:00:05:a4:bd:42:6b:be:27:25:3d:04:
f1:ac:19:32:9f:5b:7b:91:3c:1e:a3:f8:71:b7:d3:2c:41:71:
cd:7b:f5:90:93:cc:63:19:81:44:b2:81:9a:2f:e9:43:83:73:
fb:d9:85:bd:49:7a:6d:47:a8:b6:da:a5:98:d2:c8:d1:ab:a0:
7a:7b:0b:d5:17:f9:fe:11:e5:c7:00:62:25:11:96:3e:5f:b6:
a0:c0:cb:31:ed:ca:47:a3:e1:52:e3:24:5e:a7:f5:b8:93:10:
a2:ee:0f:56:6a:49:08:28:bc:0b:d7:59:d7:a2:99:fd:e8:cc:
76:30:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:04:06 2025 by rpki-client