Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/J7rRCsqk5jp0UC9ggPBQTnWNShQ.roa
File: J7rRCsqk5jp0UC9ggPBQTnWNShQ.roa (raw, json)
Hash identifier: 50oNv+kVGYPxMT+VJi9DEobc6n4QmyWGJnr5UoTINQE=
Subject key identifier: 27:BA:D1:0A:CA:A4:E6:3A:74:50:2F:60:80:F0:50:4E:75:8D:4A:14
Certificate issuer: /CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Certificate serial: 0187336DEAFAECDDBDD1D16AD28BD2B194E5
Authority key identifier: 1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/J7rRCsqk5jp0UC9ggPBQTnWNShQ.roa
Signing time: Thu 30 Mar 2023 16:50:54 +0000
ROA not before: Thu 30 Mar 2023 16:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 193.239.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:6d:ea:fa:ec:dd:bd:d1:d1:6a:d2:8b:d2:b1:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1d04807504dcbe1ab80ef84d86e514c57e7e8d
Validity
Not Before: Mar 30 16:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27bad10acaa4e63a74502f6080f0504e758d4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:67:02:9f:0b:6d:ac:b6:45:79:2d:49:71:
55:5c:6c:dd:e3:7b:b4:ea:3d:cd:13:30:ce:50:12:
90:5b:fd:f1:52:6d:cb:3b:6f:67:6d:a4:23:d9:30:
24:ed:9a:3c:90:b9:57:73:6d:35:a6:16:b7:d7:1d:
d9:36:ab:37:bd:be:cb:c3:d2:44:4b:08:b5:de:00:
92:c2:1e:e8:0a:30:04:c2:63:45:04:42:a4:24:37:
37:51:90:cb:2a:0d:98:04:9e:3a:d4:70:fa:8f:db:
15:58:46:25:9c:b9:60:cf:70:fa:9f:fc:5f:56:ed:
d7:de:5e:c3:7e:cc:59:36:ff:3f:a6:ff:3b:75:c8:
3f:54:89:db:06:c1:18:10:ee:8a:af:9e:80:13:04:
a4:2d:1c:48:13:35:78:a2:d3:0b:6e:fa:59:0d:6a:
1c:f2:55:e5:ea:4b:a9:f4:aa:14:d3:94:c5:58:01:
cf:b7:53:49:76:ad:d9:ce:ed:31:40:5f:da:47:fa:
c5:8e:05:99:38:76:c0:50:ba:98:2f:97:bc:d1:b9:
fe:69:c4:99:4e:fb:b3:f2:b1:03:f0:14:51:26:2d:
9d:0c:14:0e:09:11:d8:41:5d:06:e6:51:55:0c:9b:
8a:07:79:27:56:15:ab:7a:65:e9:3f:5e:89:f1:a1:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:D1:0A:CA:A4:E6:3A:74:50:2F:60:80:F0:50:4E:75:8D:4A:14
X509v3 Authority Key Identifier:
keyid:1F:1D:04:80:75:04:DC:BE:1A:B8:0E:F8:4D:86:E5:14:C5:7E:7E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx0EgHUE3L4auA74TYblFMV-fo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/J7rRCsqk5jp0UC9ggPBQTnWNShQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42ac52-ba66-48a2-a07a-b636988ead4d/1/Hx0EgHUE3L4auA74TYblFMV-fo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.151.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ca:59:44:78:7b:ff:b1:06:7f:24:3d:30:89:c2:a5:bc:36:
fc:9c:78:cd:8e:bf:c5:49:60:df:91:ba:77:c4:37:26:ad:16:
f2:23:3e:b4:8d:de:3b:b5:36:ba:70:c4:a8:b5:6f:81:ce:71:
3d:11:2a:0b:cd:0f:3a:2d:63:38:52:b0:c9:be:f8:e1:94:ca:
c1:1f:6b:17:e4:01:33:8f:97:27:0a:f2:5c:dd:a1:23:8d:9f:
84:3f:22:40:a6:40:91:fb:12:b0:c3:8c:55:ea:8d:ad:83:9c:
82:6c:96:8f:f4:b2:2f:1c:90:53:1a:be:4c:67:fc:35:d8:16:
f8:b8:9f:fa:c3:8b:e9:5e:d4:3b:84:6a:c0:5c:7d:3f:0f:0d:
7e:a8:41:cf:f3:93:e6:51:2b:93:15:f2:87:8b:87:6e:53:8d:
ad:f7:ee:92:f5:4e:d5:86:c2:fd:e9:79:04:86:d8:ff:8c:6b:
f3:60:25:72:37:61:11:0e:b0:7a:47:ef:16:7e:38:ba:b8:6f:
8c:11:01:2e:a5:3b:09:32:07:a1:ce:e3:60:8e:6c:0d:54:b1:
58:d0:be:7a:7c:bc:e3:55:15:42:eb:bd:c6:9a:36:b0:93:ba:
06:a5:c8:e7:ef:1c:38:dd:5a:54:c4:81:70:6b:7f:11:79:91:
e1:ab:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:46:07 2025 by rpki-client