Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/_F5YjzIp4N7IiS5lXnJMJsPMLEU.roa
File: _F5YjzIp4N7IiS5lXnJMJsPMLEU.roa (raw, json)
Hash identifier: HX+68oJeKBQGUaK3TL3s9cs53fsCINCeh8CnxLw+JsM=
Subject key identifier: FC:5E:58:8F:32:29:E0:DE:C8:89:2E:65:5E:72:4C:26:C3:CC:2C:45
Certificate issuer: /CN=2aa3e30497620868e17acb478682ce7a0bd13534
Certificate serial: 019427B5E1B1236DD6FB1A24A5FD50C78A39
Authority key identifier: 2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/_F5YjzIp4N7IiS5lXnJMJsPMLEU.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202042
IP address blocks: 185.6.76.0/22 maxlen: 24
2a03:e40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e1:b1:23:6d:d6:fb:1a:24:a5:fd:50:c7:8a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3e30497620868e17acb478682ce7a0bd13534
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc5e588f3229e0dec8892e655e724c26c3cc2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:4e:98:71:d1:a5:c7:31:76:da:46:98:5a:
a9:7f:ff:20:0b:cb:8a:ef:e0:be:77:82:6d:be:e7:
58:63:02:a8:32:44:2c:f8:ab:8b:72:e1:91:68:cc:
d6:4a:6a:1e:bf:30:ff:af:62:af:81:59:a0:7f:e1:
43:58:29:be:15:88:13:16:66:c7:52:a7:f9:88:6e:
70:fa:31:b0:89:b8:66:25:1e:1d:92:81:fb:c0:c4:
de:5f:f0:4a:ce:38:2b:b6:7a:38:dc:83:d1:20:6a:
6d:35:ab:54:09:29:43:45:51:dc:f5:fe:c2:a8:ec:
77:2e:19:46:94:7a:04:c0:45:68:32:cd:07:72:49:
1e:ab:5f:d4:84:be:c8:fc:f1:3f:b7:73:66:4d:95:
12:eb:b0:e0:f3:31:56:ad:4a:1f:00:0f:b3:5d:eb:
b5:3f:50:fa:c6:b8:74:db:59:a6:dd:eb:16:b9:66:
f2:78:23:78:2d:91:c6:46:9d:17:5f:7c:bc:e4:16:
94:f2:00:e5:82:84:32:6b:2f:22:d6:a4:5f:77:3c:
9f:29:9f:a3:1b:80:c2:04:20:f5:ff:c8:86:7d:40:
1a:b5:a9:31:5d:30:a8:b3:03:b8:2e:df:92:fd:b3:
15:77:71:40:ec:10:e6:83:b0:49:0e:c1:39:32:51:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:58:8F:32:29:E0:DE:C8:89:2E:65:5E:72:4C:26:C3:CC:2C:45
X509v3 Authority Key Identifier:
keyid:2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/_F5YjzIp4N7IiS5lXnJMJsPMLEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.76.0/22
IPv6:
2a03:e40::/32
Signature Algorithm: sha256WithRSAEncryption
a1:7d:02:00:0e:18:7c:f9:45:1d:d4:8d:6e:63:9a:f7:4e:c3:
ef:80:fc:6f:b0:c9:5d:1e:9f:b3:53:c8:28:53:08:24:41:01:
1f:94:1f:d0:63:72:38:ab:18:9b:85:7e:7e:36:34:bc:d1:7e:
24:6f:0d:9e:24:38:9d:33:30:06:25:bb:8d:c0:f9:53:34:fb:
47:ce:a5:c2:40:3f:28:92:3f:93:06:1d:c6:8b:93:4e:12:e4:
52:6a:c5:1d:49:ef:47:f3:35:37:81:69:32:ea:90:4d:b7:41:
22:78:4e:78:cb:10:01:bc:e5:70:56:02:c1:96:78:32:33:66:
57:0b:fa:80:74:87:6c:54:eb:47:fd:c0:26:fc:08:6f:ba:95:
9f:2b:65:2d:55:31:5e:58:92:34:e9:20:a3:5b:bd:41:af:b7:
cb:1a:22:ee:5b:d2:b6:70:5b:64:d5:5c:0a:8b:59:01:ad:4a:
dd:98:4f:f5:23:1b:71:cc:26:d6:ff:ec:cb:a9:8e:17:ba:c4:
0f:98:1c:09:fa:17:c9:e4:4b:59:56:21:14:92:ab:24:7b:e3:
6a:8e:00:69:e6:32:38:1e:68:c2:64:0c:a4:d3:d6:fd:66:05:
24:4a:a8:18:e0:dc:37:b7:d4:cb:15:bb:11:25:06:17:62:4e:
1c:01:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:55 2025 by rpki-client