Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/fPixY3WHu0iS7LhmvjyqSUWCtxE.roa
File: fPixY3WHu0iS7LhmvjyqSUWCtxE.roa (raw, json)
Hash identifier: eFrW0YjN4UU4CPl27m5MP1nfVebOUnWW7VldAMbzpuY=
Subject key identifier: 7C:F8:B1:63:75:87:BB:48:92:EC:B8:66:BE:3C:AA:49:45:82:B7:11
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC0ED5FB834D0AF8EEEFD883F159C5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/fPixY3WHu0iS7LhmvjyqSUWCtxE.roa
Signing time: Fri 31 Jan 2025 00:04:08 +0000
ROA not before: Fri 31 Jan 2025 00:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215151
IP address blocks: 178.253.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:0e:d5:fb:83:4d:0a:f8:ee:ef:d8:83:f1:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cf8b1637587bb4892ecb866be3caa494582b711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:03:24:33:da:2f:e0:4a:91:72:e1:98:dc:
cd:9f:c9:b3:d2:e5:fd:20:7d:9d:b0:8b:00:f3:0a:
85:1e:e2:b8:58:f5:97:a0:c9:3d:40:56:74:3c:c7:
7b:f8:d5:34:b7:23:b0:ae:24:b5:ec:84:4e:2a:cf:
fb:12:c1:9b:94:79:6f:ba:17:93:d4:ad:6e:d2:e1:
c4:bd:9c:e8:d3:73:2c:85:61:c3:c8:69:39:f9:66:
f9:11:f3:15:5c:52:34:08:58:ab:2d:5d:bf:98:19:
eb:08:50:d6:bb:5d:84:44:00:24:10:6e:b8:6a:bf:
8e:69:a5:38:e5:78:fa:c6:6a:61:68:80:7e:3b:2f:
bd:47:61:a0:00:50:65:0e:e9:e2:6c:8a:9a:f0:dd:
af:6a:64:ce:a2:df:96:74:9c:e8:01:b9:32:45:d2:
b2:b8:d6:9e:75:d9:3f:79:26:cf:62:01:18:18:2a:
7d:0a:13:0f:f3:3c:19:85:b5:a0:88:f9:0e:c9:58:
c4:ca:64:09:1e:76:87:bc:57:6c:dd:9d:94:ca:7c:
f8:16:df:a1:25:50:b8:6b:ca:d5:ec:6b:39:02:87:
2d:01:a8:63:34:36:7e:77:a2:1b:63:84:78:70:81:
a9:e5:0a:b4:5d:5f:a0:71:7e:82:8f:59:79:50:56:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:B1:63:75:87:BB:48:92:EC:B8:66:BE:3C:AA:49:45:82:B7:11
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/fPixY3WHu0iS7LhmvjyqSUWCtxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:d4:38:79:4d:b0:1b:16:c4:b0:3f:2f:07:28:21:9b:2f:64:
55:3c:3f:0a:e2:b4:ec:ff:9a:ca:b9:ae:fe:25:06:ce:05:9a:
af:8d:95:4f:cf:ca:c4:b1:bc:a5:d5:56:89:df:a2:2a:0b:5c:
87:1c:0c:2b:29:12:e4:1f:a0:c2:aa:b1:5d:e0:98:e1:4b:eb:
31:87:e1:4e:1c:8d:5e:54:39:d4:47:b9:39:37:a0:dc:9d:cf:
9b:75:ab:7a:28:68:d2:bc:b1:da:37:2e:6f:8e:1d:5e:21:d4:
75:b5:7c:f9:c6:6a:17:e0:c9:4f:bc:99:67:87:29:d2:67:66:
ec:41:b1:0c:f3:84:56:36:cc:17:aa:39:b9:ee:be:77:c0:c6:
88:74:73:3a:36:c8:9f:11:58:73:75:df:0b:3d:7f:22:d1:28:
2d:dd:29:bb:1d:04:32:c4:5e:c2:72:e4:75:e3:1a:d7:ba:c9:
40:5d:36:11:73:10:ca:5b:97:8d:cc:0f:56:c9:61:94:e8:96:
c9:1c:84:86:41:7e:d7:8d:50:c2:69:45:30:fb:09:36:dd:96:
47:67:c2:c2:5d:06:eb:09:ae:41:9c:7b:63:a7:96:8a:58:3e:
7d:34:69:7d:8f:6f:70:44:05:4a:2d:e8:7d:87:de:1c:a5:46:
23:63:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:09:09 2025 by rpki-client