Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa
File: 1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa (raw, json)
Hash identifier: FXd1EkC/KOtADwk2h9q6zCHuOQnU/RYSKRv48syIK80=
Subject key identifier: F9:F2:66:58:A3:EC:6C:C7:54:AA:06:13:C5:D4:AA:05:0A:09:DD:C6
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 019427B68F6A723BE1350FF3AEF14327868D
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199181
IP address blocks: 194.31.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8f:6a:72:3b:e1:35:0f:f3:ae:f1:43:27:86:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f26658a3ec6cc754aa0613c5d4aa050a09ddc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:05:b1:65:d9:76:2f:8d:ec:9b:b6:10:ea:
80:f4:20:0d:54:0e:bb:ac:24:94:90:1b:a9:08:f9:
db:a7:f3:af:89:b7:f2:66:31:21:6f:38:cc:cb:a8:
2e:4c:cc:8c:5d:72:ee:97:38:32:30:97:35:dd:6a:
15:35:d4:bb:15:e9:88:84:72:70:06:94:c2:63:86:
e3:70:a5:24:b9:5c:2b:28:9b:49:2e:75:72:d3:f6:
4c:80:bf:cf:bb:44:63:3b:fe:d2:d1:bf:93:1e:b3:
ac:29:54:4a:e0:ab:54:d7:cc:a6:48:6f:ce:4c:67:
34:28:f6:f7:92:13:b2:65:84:69:24:f7:bf:32:bc:
f6:8f:a8:8c:fe:7f:70:20:93:70:51:22:54:19:f9:
a6:8b:9e:0e:f3:0e:28:ab:ce:26:b7:dd:11:c0:d0:
99:02:87:22:04:9f:3b:80:09:b7:a5:d2:cd:cd:3d:
41:80:c6:3c:96:c1:c5:ac:dc:79:50:a6:db:d1:01:
6a:c9:ad:57:7b:77:89:ab:4d:3f:8c:4b:52:15:8c:
60:b3:c2:65:52:ee:f8:3d:f8:46:dd:7d:03:e8:92:
bc:24:41:78:78:13:90:28:cd:d3:7b:2d:bc:bd:dc:
d6:3f:7b:b0:7e:28:54:b4:ce:64:40:29:00:71:88:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:66:58:A3:EC:6C:C7:54:AA:06:13:C5:D4:AA:05:0A:09:DD:C6
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.253.0/24
Signature Algorithm: sha256WithRSAEncryption
15:56:d8:06:70:a2:65:a8:49:90:04:19:54:68:73:c4:37:33:
ec:59:d5:3d:4c:2f:5b:c0:f4:1c:4a:7b:ef:9f:6c:ea:44:dc:
71:f2:f3:08:b6:df:43:7a:7a:d3:3e:31:d2:f7:f9:77:89:57:
de:a0:63:85:f9:3e:da:ab:6a:71:fe:14:5f:46:bc:0d:a7:66:
c0:1c:89:f4:4f:a8:14:57:44:59:94:34:99:cc:a2:ab:29:3e:
2a:f1:9b:e5:88:92:11:54:50:a5:0d:b4:b4:a0:99:25:fd:ed:
ed:4c:b0:df:18:24:13:8e:af:4d:f2:70:4f:6b:5a:1a:e8:42:
2d:17:b3:9a:e4:59:e4:2f:11:b4:4f:3f:06:16:67:af:9a:41:
1b:df:0c:af:07:57:31:6f:cf:eb:a0:a5:d2:cd:91:73:9e:f1:
b3:48:ed:b3:ac:1c:89:76:ee:1a:f3:51:98:fb:0b:51:e2:ad:
dc:79:39:df:bc:71:c8:ff:fd:d3:1f:ec:e2:f0:7d:34:48:6e:
aa:ad:67:aa:c2:c5:c4:10:8c:a6:36:c6:cb:b0:8c:96:31:09:
89:6b:81:ab:79:1e:1e:43:98:46:6f:20:8e:b7:1b:01:6a:17:
4a:7b:a5:90:62:a3:b3:a3:26:e9:49:4f:25:e4:4e:d5:0a:cb:
4b:6e:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net