Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/fZfevjulHSUQq3s5yWFv674TKWU.roa
File: fZfevjulHSUQq3s5yWFv674TKWU.roa (raw, json)
Hash identifier: vf320BzAd94TsSHPIP51253x2PDIPLIwS/GKSnpY5mg=
Subject key identifier: 7D:97:DE:BE:3B:A5:1D:25:10:AB:7B:39:C9:61:6F:EB:BE:13:29:65
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019425FDBAC1DC8519B169CAC9D065D05606
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/fZfevjulHSUQq3s5yWFv674TKWU.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211873
IP address blocks: 185.105.40.0/22 maxlen: 24
185.149.28.0/22 maxlen: 22
2a06:34c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ba:c1:dc:85:19:b1:69:ca:c9:d0:65:d0:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d97debe3ba51d2510ab7b39c9616febbe132965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:3e:63:aa:d8:23:88:3e:29:76:2d:15:1c:
91:d5:fa:6b:1b:fd:a3:4a:b2:58:53:f4:f9:3f:de:
89:0b:4d:2a:4e:db:4a:ec:3f:4b:56:b7:7e:24:43:
c5:18:78:ab:73:23:09:91:a0:7d:0e:4a:8e:66:50:
fe:3d:7c:63:82:05:9a:3d:f4:15:e3:94:a6:71:b4:
3f:81:5c:30:92:3f:fe:ba:c7:2d:8e:09:77:51:fc:
4a:c7:0c:99:09:7b:fc:1d:1e:6b:1b:6d:da:33:35:
c7:6d:51:19:f6:14:0b:9c:18:1f:bd:41:64:b4:fc:
72:6d:7b:03:e1:c8:24:d8:fd:ba:3c:d3:b3:f6:98:
72:e2:f0:18:35:45:16:38:aa:0c:a3:97:99:bf:a5:
4d:3e:7a:3e:bc:df:03:d7:be:4f:23:db:37:a6:d5:
a4:3a:72:f3:a3:9c:5e:8d:b8:cc:2a:8b:6a:32:3c:
d6:b6:25:93:ff:06:b1:90:43:3b:7c:ec:0c:7a:a6:
f8:8f:38:d4:35:b8:d5:74:19:76:d2:6c:60:23:f8:
49:29:23:b8:2e:28:ae:52:7c:e7:b7:5a:af:82:e6:
d2:c9:d9:91:c9:9a:1e:fb:f5:c4:65:50:40:91:f7:
2b:6c:d3:8f:c8:18:6c:12:b6:01:e4:43:0e:bc:52:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:DE:BE:3B:A5:1D:25:10:AB:7B:39:C9:61:6F:EB:BE:13:29:65
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/fZfevjulHSUQq3s5yWFv674TKWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.40.0/22
185.149.28.0/22
IPv6:
2a06:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:83:21:25:8d:7d:25:79:5c:3f:19:d1:25:b9:83:55:41:43:
d7:1f:11:57:c1:c1:e3:8f:63:e0:21:76:c9:fd:69:8c:2e:77:
ac:6e:1c:02:be:99:65:63:20:ba:46:e2:da:1e:7f:d5:7e:fd:
08:18:82:b5:96:a8:30:c4:9f:1c:6c:d4:4e:a4:f5:41:d6:12:
be:94:60:10:24:b1:95:88:ab:ee:a5:9b:d5:95:38:42:96:7e:
68:f8:85:42:63:00:50:fc:5a:f6:02:6d:b8:a0:ec:f4:db:ce:
0f:3e:4d:1b:52:84:99:89:4d:fa:f3:a8:fb:ae:cb:4b:e2:8d:
a1:a1:e2:e3:82:df:c5:27:90:4e:cb:7a:f1:a1:23:93:59:dd:
df:e3:19:66:bc:93:5b:b4:68:87:88:8b:1d:8d:37:37:86:d9:
94:f6:b1:60:bd:17:f5:76:97:55:ba:cb:7a:55:37:2c:47:d2:
1b:08:7c:7b:cd:df:ea:6f:91:d3:c8:80:ca:ad:ca:4a:49:4d:
f6:d7:8e:a1:78:93:91:62:e0:0a:7c:31:e8:65:fb:05:a3:a2:
db:1b:1d:9a:72:41:e9:eb:eb:a9:e5:f6:06:a0:c5:23:4e:18:
59:7a:76:b5:be:01:76:5f:f5:c7:cc:0b:92:55:3d:93:e7:24:
2e:5a:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:27 2025 by rpki-client