Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa
File: F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa (raw, json)
Hash identifier: ep3IMQ4ZZkY9pT/SX8gdzLkWK4LgBK5MsjhgdqazgtY=
Subject key identifier: 17:90:73:81:FB:BB:E9:1B:D9:DF:24:75:CB:BC:F0:15:FE:86:E2:43
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019420D64857E5CF21F04B6ED2822D105A8F
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28931
IP address blocks: 185.103.188.0/22 maxlen: 23
2a00:f400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:48:57:e5:cf:21:f0:4b:6e:d2:82:2d:10:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17907381fbbbe91bd9df2475cbbcf015fe86e243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:60:eb:24:29:9a:fc:57:a5:e9:44:f8:c5:
9a:2b:c9:69:78:cb:6c:f9:5d:66:5e:dc:90:64:34:
35:57:47:d5:8e:7f:b7:01:40:0f:5f:bf:9e:d9:fc:
67:8b:9e:b9:6f:3d:7a:f8:a1:5b:7a:55:18:71:72:
b3:73:70:d7:22:b1:b8:75:94:60:16:ea:5a:b3:f2:
3e:d9:37:45:8c:d5:b5:7e:76:b3:c4:2e:98:cf:0a:
59:40:75:8a:76:69:9f:2a:e4:6d:62:93:28:d0:95:
25:e2:fe:27:de:f9:9d:cf:05:fe:11:df:7b:38:3c:
74:6f:10:73:d0:2b:18:ac:ad:88:93:da:36:bd:c3:
91:f3:ce:1f:80:e9:b0:52:74:34:bb:8d:a0:1e:32:
9b:ec:ff:4c:b5:3f:b2:d5:13:25:2e:17:77:e1:4e:
dd:0f:79:ad:b0:03:a4:3b:b7:ee:06:a0:68:27:68:
22:65:d6:4b:0e:4d:f1:33:c9:56:93:40:08:b1:b9:
20:74:ea:11:28:45:df:84:a5:bc:14:7c:78:37:99:
56:a4:fe:45:16:23:b5:35:e5:60:ae:5c:9e:0f:b7:
87:2a:87:95:8f:dc:5c:dd:7f:b4:5a:1c:5f:fc:6f:
3f:c6:af:0d:3b:e9:9e:a5:9f:31:0a:2b:e9:b5:2d:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:73:81:FB:BB:E9:1B:D9:DF:24:75:CB:BC:F0:15:FE:86:E2:43
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/F5Bzgfu76RvZ3yR1y7zwFf6G4kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.188.0/22
IPv6:
2a00:f400::/32
Signature Algorithm: sha256WithRSAEncryption
3e:d9:d8:6f:e4:47:1f:9e:86:16:19:48:a7:50:c2:a9:bf:e2:
62:68:fb:57:b9:2e:b7:7e:10:b7:31:d0:c7:93:93:3d:8a:f6:
a3:c9:04:94:cb:b8:ca:76:16:50:53:e1:7b:51:da:b7:e3:38:
1d:8e:82:a8:a2:6e:00:81:bd:86:79:2e:35:4c:67:02:27:11:
ba:68:0b:1a:48:56:b7:cc:1e:28:a2:6f:71:e1:18:3c:45:b8:
d3:16:27:3b:24:44:91:b6:07:14:0d:f3:44:dc:9e:6c:46:4f:
1c:17:fe:4c:3d:5b:e1:fd:60:b0:a1:a9:17:9e:0b:2a:d7:c4:
a5:04:e5:18:5e:37:f3:7a:b4:f1:78:83:ad:6a:c5:dc:50:ab:
e3:b1:a3:b7:63:1d:8d:0f:c2:c2:a6:09:3e:02:fe:e4:8e:18:
37:b7:f1:5d:28:2b:d9:6f:75:1b:57:97:2b:e9:c1:08:83:59:
f8:aa:39:99:3b:a5:7c:ce:ce:a3:f1:f4:dc:65:b2:54:c4:00:
aa:2f:f1:27:8d:44:c4:c2:73:95:94:b5:62:30:49:82:c4:91:
01:24:5f:33:a0:65:97:fd:cd:01:4d:0c:28:f4:73:7f:0c:96:
b1:93:e5:a8:0f:b5:eb:65:b9:75:c2:51:e7:7d:9e:0f:64:3a:
94:7c:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:44 2025 by rpki-client