Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/FAqlGSimYu0iYfDKBVjHX-VLzKc.roa
File: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (raw, json)
Hash identifier: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=
Subject key identifier: 14:0A:A5:19:28:A6:62:ED:22:61:F0:CA:05:58:C7:5F:E5:4B:CC:A7
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019427B5DB2310FA84B8B56D1185DA25F85B
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/FAqlGSimYu0iYfDKBVjHX-VLzKc.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13259
IP address blocks: 77.232.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:db:23:10:fa:84:b8:b5:6d:11:85:da:25:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140aa51928a662ed2261f0ca0558c75fe54bcca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ea:4f:b4:5e:e5:a7:ca:12:ff:e9:32:33:39:
88:6e:0f:31:fc:98:17:3c:77:34:4f:84:9b:ad:dd:
fa:e9:8b:c8:f8:f7:19:ec:9c:d1:5a:63:a2:91:38:
0b:67:7f:5a:9e:96:4d:f5:8c:57:f8:54:3d:11:66:
a5:32:73:06:99:91:80:1c:95:bb:6a:89:04:08:ca:
cb:34:b7:a9:78:95:65:59:0c:2a:b8:d8:5c:a9:28:
00:72:ed:3f:6a:77:c1:31:aa:40:70:90:72:23:b9:
fe:9e:25:8f:3d:3d:f3:1f:99:96:5b:37:e9:fd:99:
ae:30:ee:cf:c6:34:d8:62:04:1c:15:e7:0e:ee:41:
8f:fa:4f:b4:27:5e:1d:58:ac:d6:25:5f:2b:a7:09:
b0:15:f1:29:cb:80:2d:cb:36:3a:95:24:b2:0f:2b:
13:4f:e8:28:64:3a:2e:e2:33:1a:6d:8b:90:d5:24:
0e:dd:5d:5c:ab:d6:87:56:f7:99:22:07:f8:6f:85:
b1:12:f8:52:9c:7e:61:b0:44:bc:5a:13:41:3f:27:
a3:52:58:44:ec:76:ec:d2:74:08:7e:66:48:57:27:
d0:47:05:3f:68:5d:a4:34:f1:70:cb:7a:68:f5:e6:
30:f1:d0:d8:1b:cf:78:3d:29:66:9c:17:67:fc:1d:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0A:A5:19:28:A6:62:ED:22:61:F0:CA:05:58:C7:5F:E5:4B:CC:A7
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/FAqlGSimYu0iYfDKBVjHX-VLzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c1:9c:79:be:c3:5b:63:fe:19:4d:d3:85:15:4b:4e:53:21:
67:89:6a:5e:a8:8b:c7:aa:a2:6d:88:73:c0:4c:23:2f:74:71:
f0:53:9d:5e:48:db:2a:fc:cd:d8:b4:5a:01:52:3c:5a:59:74:
6b:ed:a4:9c:a4:72:e2:40:86:cc:e8:9d:01:e0:e7:fd:59:50:
27:c0:e6:c1:71:42:8c:14:79:10:79:45:94:26:92:e4:17:c1:
51:d3:79:d5:19:7f:1a:45:91:55:c3:5a:e2:2a:b6:65:fb:5b:
8d:4e:4b:f9:77:46:6d:e9:43:f6:77:7a:98:99:b2:df:e8:44:
88:37:89:fb:fc:1d:33:e5:68:fd:09:f3:4a:37:86:6b:0a:93:
e0:02:f0:09:b0:14:0b:4f:c6:67:e7:02:48:20:f1:15:70:e8:
b6:c5:1c:b7:31:b0:4d:f7:21:11:ec:1e:51:e6:09:8c:3f:2d:
98:c2:2f:d0:c3:07:54:01:d1:c5:ea:0c:3f:12:9f:81:45:4a:
f0:a6:65:9c:52:37:86:b7:14:fd:01:fe:57:dd:56:88:ae:2f:
b0:e0:67:7a:17:9f:a0:82:04:7d:4b:a0:71:02:05:2e:3f:3e:
19:8a:67:3b:bd:25:18:b1:cd:8b:54:cd:de:88:e8:fd:d4:0c:
70:be:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:21 2025 by rpki-client