Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/fx8MLGTxK80dTB_4NJYiocZMPwQ.roa
File: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (raw, json)
Hash identifier: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=
Subject key identifier: 7F:1F:0C:2C:64:F1:2B:CD:1D:4C:1F:F8:34:96:22:A1:C6:4C:3F:04
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 01941FFA769F3EB2ECBBB1F11F895ACDC654
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/fx8MLGTxK80dTB_4NJYiocZMPwQ.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202808
IP address blocks: 198.52.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:76:9f:3e:b2:ec:bb:b1:f1:1f:89:5a:cd:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f1f0c2c64f12bcd1d4c1ff8349622a1c64c3f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:a7:de:4c:18:0f:a6:8b:0c:e6:16:58:22:
88:08:8e:24:1e:f6:e2:6a:ce:00:91:f2:9f:a2:ed:
2b:8c:26:e0:28:f2:8e:9e:ba:8d:22:48:35:f2:00:
0f:37:ce:50:f6:bf:2f:33:c6:87:de:17:10:a1:34:
f9:3c:1a:1b:6a:b1:79:42:80:63:27:63:bb:77:7a:
9e:25:6f:e0:70:87:41:62:af:ba:12:20:fa:61:83:
b4:7e:2d:4c:e1:7d:91:1b:da:48:34:5c:a9:2d:3c:
db:3c:96:dc:36:e6:e0:6f:98:0e:9f:be:a3:71:b2:
62:71:2f:d6:a1:f0:5f:78:b9:e3:23:5e:a2:ff:b8:
5a:62:08:ba:75:0d:c5:9b:61:fd:72:8b:d6:1e:34:
9e:3f:ae:64:2b:c5:74:8c:19:7d:74:50:9b:d7:08:
0f:5a:49:5f:36:54:5a:06:88:68:00:ef:89:9d:e3:
35:9e:87:fe:e5:c0:27:1b:dc:eb:e9:06:26:ea:e3:
f0:ef:d3:28:c2:c6:a6:6c:50:06:dd:68:6c:03:87:
c5:88:4e:26:88:ca:86:4c:ad:a5:6e:9e:7b:94:19:
d3:53:8a:74:3b:fa:ef:a4:c1:66:b2:25:3b:4a:e8:
50:a8:f3:6b:89:ef:e7:13:be:09:c2:31:a6:69:f0:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:0C:2C:64:F1:2B:CD:1D:4C:1F:F8:34:96:22:A1:C6:4C:3F:04
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/fx8MLGTxK80dTB_4NJYiocZMPwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.52.45.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bb:df:87:fc:f6:08:9d:80:b2:f5:79:d1:d9:f3:02:c8:3a:
96:62:b4:5e:db:37:6e:d9:07:43:80:c8:dd:f4:45:34:64:02:
78:60:46:8d:cb:c1:c8:6b:5e:a6:6e:5c:93:69:b9:8a:18:fc:
1d:f3:a8:54:c9:af:4f:40:40:cf:8c:95:1f:34:c1:d4:2a:30:
64:c1:f4:3d:bf:ce:e9:85:99:36:cf:08:f1:93:e5:6f:70:c5:
bb:59:3e:32:d0:30:ad:64:44:63:57:f4:ed:6d:fa:ab:e9:43:
e0:0c:e2:63:96:fa:39:56:a1:e3:22:12:c6:9e:a8:b3:45:dd:
4e:13:11:4b:01:90:1a:95:96:c1:ca:c4:19:75:79:1c:75:f5:
30:22:e6:e0:09:c1:95:05:65:0e:54:d8:0a:fd:1e:9f:b4:d3:
2e:a3:57:25:45:40:76:b5:2e:96:3e:d6:bc:63:f6:0c:e3:0f:
14:87:d0:4d:f8:04:50:df:93:ab:11:50:00:bb:17:bc:24:d4:
58:45:84:fd:71:0b:cf:e7:33:69:c8:3c:45:ea:d1:68:9a:6b:
3a:a0:fa:b6:2b:a3:3f:7a:9c:73:d0:7f:15:ef:38:03:0e:54:
a3:67:cb:99:2c:0f:f9:38:31:54:41:28:34:0b:aa:80:19:5e:
6a:fb:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net