Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/Fpusx3nImBA0IUxzGHSKyPdUse8.roa
File: Fpusx3nImBA0IUxzGHSKyPdUse8.roa (raw, json)
Hash identifier: ifn1BmchQ12bsVckZdjUUeYe+hJNMZFvCwq2esrjCZk=
Subject key identifier: 16:9B:AC:C7:79:C8:98:10:34:21:4C:73:18:74:8A:C8:F7:54:B1:EF
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0194221F2DF16BDF018DA7B27D8BE1690CEB
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/Fpusx3nImBA0IUxzGHSKyPdUse8.roa
Signing time: Wed 01 Jan 2025 13:47:36 +0000
ROA not before: Wed 01 Jan 2025 13:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199659
IP address blocks: 185.43.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:2d:f1:6b:df:01:8d:a7:b2:7d:8b:e1:69:0c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Jan 1 13:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169bacc779c8981034214c7318748ac8f754b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:d7:55:e1:7d:9e:db:39:3a:eb:2f:34:eb:
9c:c8:56:01:49:b6:cb:a9:0f:53:ac:f9:bb:46:77:
e2:f2:74:52:35:ca:67:44:c6:99:4d:87:be:ed:63:
0b:f4:3b:0e:1d:53:42:6f:43:77:b7:f2:e3:be:5e:
be:e3:ba:2e:92:f4:3b:6e:d8:7b:a6:ee:8f:df:fa:
e7:32:50:7c:5e:b2:01:a4:9f:13:d8:c0:70:84:3d:
72:fb:fb:36:92:69:01:7c:95:77:99:41:30:d5:b8:
5a:8b:46:80:a0:ab:a5:2f:ba:6d:23:c5:c2:b0:c0:
73:b5:25:fc:3e:b3:50:60:7c:8b:ca:90:3d:09:67:
a8:68:20:2d:29:66:2d:c6:f1:04:1c:35:34:4f:b7:
61:4d:f4:bc:71:87:89:86:fd:83:81:6d:09:8f:5f:
83:1b:a5:a2:4c:af:0d:4b:6b:b2:25:ad:16:10:c0:
c4:a8:6c:64:70:2d:d6:b8:82:24:c1:a1:63:c4:a4:
5c:fa:42:bb:b6:3d:3f:b3:49:ff:a1:35:bf:48:d5:
f8:03:2f:d0:59:c2:1a:d8:28:59:7b:64:73:b6:7c:
11:55:47:f1:4e:25:eb:57:9b:e6:30:57:b3:7a:e8:
ec:09:f2:7b:d4:c1:0b:74:b5:72:57:06:57:79:f7:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:AC:C7:79:C8:98:10:34:21:4C:73:18:74:8A:C8:F7:54:B1:EF
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/Fpusx3nImBA0IUxzGHSKyPdUse8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2b:93:aa:e2:33:ba:a2:e5:e7:2b:2a:b4:41:2e:45:ba:e7:
e0:cb:e0:73:23:4e:a7:4f:d3:52:20:a2:d1:af:f1:c9:b0:3e:
06:57:71:c2:33:d1:ed:6f:ac:12:42:6a:7e:97:06:e4:2e:70:
a3:ea:d0:8a:61:c3:bc:86:56:d1:24:4e:57:0a:22:8c:9d:d0:
02:0a:41:88:97:45:1a:18:bd:93:81:e7:f1:8b:d7:12:2d:0c:
8a:d0:99:d4:35:07:1b:44:b8:41:00:ca:62:15:b2:26:e1:d6:
09:0a:71:ac:27:6d:92:b6:e9:46:21:e3:d9:97:b7:64:8d:a3:
d7:c5:00:25:c5:e3:d1:9a:b5:d9:f1:20:99:b7:4f:2c:d6:4e:
1a:2f:e8:9b:2f:47:c7:2f:64:ff:27:6e:b5:ea:d2:23:fe:6a:
7e:a9:23:50:d6:24:1a:06:9b:a5:c6:79:5a:be:8a:de:e1:f6:
91:6c:85:6c:9c:03:be:ac:99:a3:33:47:4c:b4:33:cd:2d:05:
cb:00:bb:5b:bf:1c:a4:fb:7b:dd:98:f0:f9:e2:3c:91:9f:cb:
5d:ee:29:10:4c:29:af:1d:14:c4:9b:cb:5f:b4:6f:c5:25:ce:
e2:e2:29:38:c5:da:b5:40:3c:15:d7:ad:e5:5c:ac:6a:e8:04:
96:38:46:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:57 2025 by rpki-client