Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/tJBini9FG3BChCR4o24uWR0Dqyo.roa
File: tJBini9FG3BChCR4o24uWR0Dqyo.roa (raw, json)
Hash identifier: dYt6pr0cv9WK5NRnDweS/F9Py2xgkm/CsKP3kHvIfK0=
Subject key identifier: B4:90:62:9E:2F:45:1B:70:42:84:24:78:A3:6E:2E:59:1D:03:AB:2A
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 019509D2C5A4C3640B199CEAF88DED4E0E92
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/tJBini9FG3BChCR4o24uWR0Dqyo.roa
Signing time: Sat 15 Feb 2025 13:36:02 +0000
ROA not before: Sat 15 Feb 2025 13:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213593
IP address blocks: 198.212.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:d2:c5:a4:c3:64:0b:19:9c:ea:f8:8d:ed:4e:0e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Feb 15 13:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b490629e2f451b7042842478a36e2e591d03ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:16:12:4b:37:ef:c8:1e:d3:0d:fe:7f:a7:9c:
d1:0b:e5:6a:ce:91:85:6c:25:c9:f3:58:3b:03:a2:
81:6a:60:db:66:69:a6:2e:e9:20:15:5a:3e:0a:45:
81:57:99:b0:e9:8b:2d:2f:ca:66:c4:55:5f:61:eb:
22:9b:b6:51:14:11:11:e3:18:f6:35:10:30:e2:ee:
06:75:99:ac:c1:d9:69:b1:1e:c7:49:f7:2a:a4:8b:
c3:31:32:7d:52:55:c8:36:e3:77:c1:ce:e2:e2:a2:
02:a5:61:81:9f:37:8b:a2:ee:4c:9a:c2:d5:1b:aa:
d4:b2:a6:f1:be:99:64:1e:aa:ea:d8:94:09:4c:12:
33:cc:f3:71:ae:40:7e:da:dc:ad:08:0b:46:02:84:
0c:3b:34:5f:e4:df:55:55:5e:c2:46:9a:e8:89:2c:
ba:ab:da:b9:e8:ef:92:7d:8b:e3:2a:59:48:94:7d:
4b:5b:3b:44:aa:04:30:0e:45:1c:ca:32:b1:0f:c2:
19:f5:b8:27:8a:54:25:b6:c5:95:e3:96:08:42:da:
8e:90:e8:89:0f:2c:54:06:c8:be:0d:a7:bc:55:3a:
b7:d5:27:76:dc:c3:b9:ef:24:5e:a1:69:5d:de:9a:
ff:39:a1:6f:8f:c4:49:fd:6a:fd:26:55:89:65:a2:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:62:9E:2F:45:1B:70:42:84:24:78:A3:6E:2E:59:1D:03:AB:2A
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/tJBini9FG3BChCR4o24uWR0Dqyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.212.48.0/24
Signature Algorithm: sha256WithRSAEncryption
64:11:d6:a5:24:b5:84:f1:74:ba:a3:55:ed:46:2f:04:94:9d:
80:f7:08:ac:a3:c7:53:08:4c:94:12:a5:43:87:71:d7:ce:7b:
c6:fe:da:50:1d:dd:af:ba:d8:46:82:dc:d0:a0:91:10:0b:3b:
95:e9:82:ca:9a:5a:22:fd:7e:72:c4:32:c4:f7:0f:10:98:e9:
42:7e:f1:69:1a:59:c1:c9:eb:a1:e5:df:84:57:fa:fd:6c:7b:
db:72:a3:e8:31:4c:54:59:4e:8b:60:b5:4c:7f:ad:7b:fa:b0:
d9:70:76:72:7b:31:74:60:eb:77:89:1a:5b:25:7d:ab:c9:01:
d5:c3:03:00:fc:3d:3c:86:38:30:c2:51:04:b2:88:69:7d:1d:
f0:99:59:2e:2c:44:60:35:65:46:2b:1d:94:9c:a6:ee:a1:30:
3f:e3:e6:64:bc:a6:c1:36:09:c2:42:d1:4a:2d:a3:2a:b6:fd:
f7:d7:45:25:90:89:d8:28:7c:09:d8:65:82:47:68:f9:6e:e7:
33:a1:27:41:4f:ba:02:d8:13:98:9d:2d:b0:ca:96:4b:47:4b:
e3:ce:2e:4b:4b:ad:6f:68:5e:c2:09:16:5a:9c:f3:d0:f9:0e:
fd:0e:eb:a8:eb:40:1b:4d:00:28:1b:77:a2:85:c7:67:ad:df:
c3:e7:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:33 2025 by rpki-client on console.sobornost.net