Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/5VOe4OYzzKTEUENK2qpP4dw1rHM.roa
File: 5VOe4OYzzKTEUENK2qpP4dw1rHM.roa (raw, json)
Hash identifier: yklM+8+QIVgxqJFRG7PIjsPzJR9m2DNglBvEbvNzHQI=
Subject key identifier: E5:53:9E:E0:E6:33:CC:A4:C4:50:43:4A:DA:AA:4F:E1:DC:35:AC:73
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019425FDBA738B14E7732E301856C176F3FE
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/5VOe4OYzzKTEUENK2qpP4dw1rHM.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16097
IP address blocks: 185.105.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ba:73:8b:14:e7:73:2e:30:18:56:c1:76:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5539ee0e633cca4c450434adaaa4fe1dc35ac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:83:b0:5f:22:a4:ae:41:cd:f1:66:12:4d:
1b:9a:13:eb:7c:34:ca:ba:e1:42:50:fa:5b:17:41:
f9:21:a2:d4:95:fd:9b:36:07:72:a6:6e:8c:77:17:
a3:1f:fb:fe:59:62:a1:24:07:49:eb:93:a6:f3:5c:
24:2a:84:c5:1d:de:3b:d0:bc:05:35:3c:a9:fa:b0:
83:dc:a9:5e:dd:47:73:63:be:e0:c6:b9:b9:8d:30:
15:9f:91:41:b9:a5:75:9b:1b:e0:6b:a3:5e:42:26:
62:69:26:20:60:61:8f:4e:b8:f4:8b:13:b6:3f:2f:
7d:37:4e:2f:ed:3c:66:35:4c:85:a7:28:e1:18:d1:
af:0d:fd:41:fa:bc:b0:0d:05:f5:63:1e:19:56:e2:
5b:1c:28:80:06:02:13:8b:44:73:38:2d:7b:5b:43:
66:4e:15:52:c5:10:44:45:7f:91:dd:a6:af:9f:0e:
83:44:f6:8f:b9:2f:2b:f1:d1:88:4a:34:44:41:36:
ba:41:6f:7d:6f:64:35:55:3b:4c:0f:90:d2:d9:85:
40:6b:d2:23:bb:e9:54:d4:c1:4f:a0:03:97:1e:e9:
70:d3:0c:5a:c0:50:e7:4a:4f:3b:b3:05:42:44:1c:
00:ea:2a:f9:14:b1:a2:1d:b3:a9:89:38:16:12:3f:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:9E:E0:E6:33:CC:A4:C4:50:43:4A:DA:AA:4F:E1:DC:35:AC:73
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/5VOe4OYzzKTEUENK2qpP4dw1rHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ab:eb:48:52:38:16:94:86:04:ce:12:50:56:f3:9f:fe:b2:
e4:d0:92:ca:56:9a:ae:9c:48:94:a9:0c:ec:ea:72:30:d5:d5:
bb:f5:ac:9b:1b:46:6f:d0:d4:03:0f:e2:9c:28:93:1a:ef:e0:
53:1d:5c:0d:99:78:4a:82:91:c0:a2:61:4b:4b:11:69:b6:64:
3f:ff:9e:ce:75:32:ff:f9:73:dc:33:44:e0:27:84:be:24:4c:
25:f4:96:0e:52:f4:34:49:81:4b:4f:20:38:88:67:24:83:7f:
f2:c4:e9:c9:3f:25:de:ba:b3:dc:f8:be:36:54:9f:23:42:0b:
aa:70:c1:e9:ce:d8:6e:64:9f:96:18:84:9d:8f:e8:9b:f5:a9:
c3:4b:d4:40:df:c6:49:1a:74:50:2c:25:67:fb:1e:8b:f5:aa:
9a:89:fa:3b:0b:f9:b0:6a:db:9a:47:43:ce:2c:00:b9:11:7e:
30:05:5f:ad:f2:82:f2:21:f4:58:2f:fc:ba:f9:fe:a6:e6:35:
85:de:20:55:c3:1b:c5:4e:0a:5f:08:23:db:c5:f8:22:65:9b:
01:4f:e4:58:c2:63:a7:88:1e:e8:e6:4f:16:c9:16:03:08:38:
0b:ee:5d:7f:cf:c0:76:ce:c7:46:bb:cd:69:58:71:89:de:f2:
51:af:a7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:21 2025 by rpki-client