Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa
File: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (raw, json)
Hash identifier: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=
Subject key identifier: 16:C4:85:12:86:58:6F:73:65:FA:19:24:82:35:4F:51:DD:88:BC:30
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0194266BE97468AEFA5EBB84BC253583DC87
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24982
IP address blocks: 5.57.2.0/24 maxlen: 24
85.112.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:74:68:ae:fa:5e:bb:84:bc:25:35:83:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c4851286586f7365fa192482354f51dd88bc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:1d:16:b5:1c:c2:4c:6e:22:63:f0:31:23:
83:ed:77:d7:c4:d9:a2:06:f4:0a:a8:c7:72:d3:6e:
9d:69:d6:9e:fa:0c:9f:42:8c:5a:a3:91:49:d3:75:
6c:01:dc:39:f2:a4:32:59:e1:7a:fd:12:1a:2a:ac:
f8:eb:5d:fc:bc:46:b4:ec:18:15:9f:80:f6:b7:b2:
ad:7d:58:bd:8b:d1:54:cf:a3:f8:55:9e:88:54:ad:
85:c7:89:ff:ff:cb:57:ce:d1:ef:bb:bc:e8:47:e0:
d0:9b:70:ac:b6:74:38:27:38:86:41:8d:88:a1:04:
3d:fb:02:92:7b:61:9b:cc:73:fd:cd:ae:c8:a8:45:
7b:77:30:77:d8:fc:90:22:6f:0f:dc:38:d4:c3:d0:
3d:e4:ce:de:c9:29:ec:f5:88:17:61:31:63:df:33:
2b:fe:23:2f:8f:ea:91:96:8a:e0:71:cc:0a:72:e8:
da:31:e3:11:ae:be:8f:79:7a:08:a0:6c:70:ed:bf:
43:12:93:fc:f6:65:4c:de:1b:fa:bb:1e:29:bd:55:
e4:ea:e5:00:16:c1:8e:89:2b:eb:24:db:33:f5:6d:
83:67:5c:de:bd:a6:f1:8f:63:94:9f:ac:f6:14:55:
21:ed:1b:40:52:31:18:b2:67:d4:80:c7:53:f6:f9:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:85:12:86:58:6F:73:65:FA:19:24:82:35:4F:51:DD:88:BC:30
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.2.0/24
85.112.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d3:11:2b:f4:af:fa:5e:5b:c6:a8:02:14:b7:c8:bc:0e:10:
b6:94:2d:7b:71:67:e0:f1:d6:cf:a5:be:a6:9b:6b:99:8f:e6:
dd:be:82:18:98:3d:24:bc:7c:f0:fb:09:9a:61:ca:e0:9b:97:
1f:5d:b4:b3:8a:73:b8:34:13:02:d4:51:58:65:ed:0e:32:bd:
6a:7a:75:79:1e:93:a9:8f:71:d9:dc:33:f0:f4:b2:a9:47:70:
33:16:3e:32:bc:d3:c5:6c:32:76:da:b4:14:05:5e:97:ff:68:
59:c0:3b:09:23:42:d9:38:72:e2:cf:33:37:41:1e:6b:87:b3:
9d:03:e1:af:18:17:8c:51:38:ae:f9:87:f8:36:42:4d:aa:3d:
7b:71:f7:ba:94:f7:cd:c8:16:17:4d:02:01:ec:f3:00:7d:14:
a9:13:74:cc:47:9e:7d:0b:2b:04:fe:35:b5:5c:8c:59:24:43:
13:2e:5b:64:8b:89:35:10:f8:09:56:b9:63:1b:dd:72:01:4c:
7d:19:2b:af:40:b8:c2:8a:1a:34:00:17:26:d4:5b:73:e1:29:
64:9f:3f:35:3a:13:6b:67:d6:6f:d7:bd:78:60:c2:1c:b7:59:
41:03:c3:a3:37:22:c5:26:30:57:e4:48:7a:a4:7b:c8:1b:b1:
b0:f6:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:20 2025 by rpki-client