Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FwFPhve-Ur2YYjR6PhEM60vBCm4.roa
File: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (raw, json)
Hash identifier: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=
Subject key identifier: 17:01:4F:86:F7:BE:52:BD:98:62:34:7A:3E:11:0C:EB:4B:C1:0A:6E
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C1A2D916A5897A9C7DCA409779824
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FwFPhve-Ur2YYjR6PhEM60vBCm4.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34977
IP address blocks: 5.23.12.0/22 maxlen: 22
5.23.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:2d:91:6a:58:97:a9:c7:dc:a4:09:77:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17014f86f7be52bd9862347a3e110ceb4bc10a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:11:79:da:75:59:2b:bf:9a:71:3f:25:83:
bb:b4:ba:64:1c:28:d9:86:99:6c:56:f2:d2:b1:58:
7a:92:f0:17:06:92:97:a8:18:29:11:ea:a1:c5:ff:
86:46:9a:a0:ae:5a:d1:ad:03:96:84:3d:1f:19:3d:
69:e8:52:9c:e3:36:24:11:c0:84:92:b0:fa:17:c4:
20:4c:1b:77:62:b7:f2:e8:ed:6e:15:8e:0e:4d:cf:
57:1d:33:8b:3e:e5:c6:91:17:cf:12:43:e3:75:08:
8d:67:70:56:53:06:26:ae:6a:86:2f:c6:41:2c:58:
52:43:53:7d:21:69:dd:21:a1:ba:77:3a:ed:02:14:
d1:2e:8c:ad:44:55:88:4d:9f:21:2e:2d:2f:85:cc:
23:3d:75:5e:4e:b0:d0:9b:ef:c0:83:ed:49:ea:73:
49:30:7e:a5:e0:ba:7b:8d:d2:46:ab:8c:83:e5:58:
98:df:cf:03:77:e5:3e:d6:fc:b9:c7:60:94:9d:e8:
46:e5:77:6e:28:a8:fe:c3:53:da:31:c4:cf:59:21:
1c:1e:50:8c:cc:30:67:a6:47:70:e0:db:fc:35:57:
79:e1:c6:36:84:42:7e:b3:9f:4b:44:7f:b8:b9:a7:
1c:6a:2f:09:19:4c:08:cd:e9:8e:fd:8e:6a:06:19:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:01:4F:86:F7:BE:52:BD:98:62:34:7A:3E:11:0C:EB:4B:C1:0A:6E
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/FwFPhve-Ur2YYjR6PhEM60vBCm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:17:15:38:d8:18:77:4d:77:23:1e:88:aa:d0:3d:e3:52:42:
62:cf:31:e0:11:24:27:11:cf:ec:18:5f:20:3b:3a:15:ef:9f:
2e:58:79:45:cc:87:6b:0f:5b:fd:85:f5:f8:52:19:84:df:88:
53:72:65:48:a3:5f:4e:d1:68:d1:3c:56:a4:c3:c6:86:55:2c:
51:87:03:8f:70:d2:ff:fc:88:2e:ee:d7:2f:db:66:4c:a9:1b:
a6:44:73:f1:c5:a3:34:65:87:56:30:af:7a:be:05:7e:c3:89:
14:62:02:d8:9e:ad:be:f7:37:9c:03:b1:b3:6b:74:a9:7f:4e:
e9:a0:75:76:4c:12:d7:1f:d7:86:6b:52:90:48:41:f6:4a:8c:
69:b9:6b:d3:9f:46:fe:e3:5b:35:09:b1:12:f9:d9:b2:a5:cd:
76:e0:53:c8:af:ca:a6:d9:11:bc:a1:e4:40:21:ad:b1:fc:e5:
01:c3:c5:94:fa:fd:89:3f:c9:cb:c6:b0:d7:1b:d8:c4:f0:7b:
06:f3:dd:97:5b:0c:c3:2d:82:93:77:2b:1c:34:6c:06:44:e2:
70:85:e1:14:4e:f6:0e:70:be:38:b5:a7:bf:b5:28:6a:39:72:
fb:ff:95:30:e2:a2:70:4a:e1:ba:68:33:40:65:f5:93:e4:ee:
00:e5:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:04 2025 by rpki-client