Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/41n65uhvIrOs7pMXCEwIyWAHStU.roa
File: 41n65uhvIrOs7pMXCEwIyWAHStU.roa (raw, json)
Hash identifier: LjxJ/BCjHptc+tFYMZxLMpRYryRPRgRDdjg86l2vAZ0=
Subject key identifier: E3:59:FA:E6:E8:6F:22:B3:AC:EE:93:17:08:4C:08:C9:60:07:4A:D5
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 0194221F5C6B6BB8901C4E7CE27E3DCC7CF6
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/41n65uhvIrOs7pMXCEwIyWAHStU.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 92.53.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5c:6b:6b:b8:90:1c:4e:7c:e2:7e:3d:cc:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e359fae6e86f22b3acee9317084c08c960074ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:9b:ea:86:3c:79:db:5b:08:ad:bd:5e:21:
bc:46:f8:cb:85:8f:67:93:2c:bc:ee:cc:66:ba:41:
02:6b:01:89:37:48:f5:8d:aa:be:b2:6c:cc:0f:45:
37:3a:17:db:84:7c:aa:82:37:d4:e8:19:0d:e4:ef:
19:01:86:b8:c0:8c:62:bb:a2:89:db:24:e8:31:ea:
84:ef:60:33:e4:70:4e:dd:3f:b9:a9:6d:76:aa:cc:
b2:9d:1e:3b:6b:3d:0c:3f:ca:90:4e:52:b1:04:36:
fd:1b:50:b8:02:d5:fa:01:2c:3c:01:b5:c6:8e:47:
59:89:d7:9b:30:31:d6:ff:8c:dd:89:60:ee:59:9f:
2c:51:c9:b3:97:b9:22:72:9b:56:96:d9:2d:17:46:
4d:3a:7e:38:28:22:41:b3:ce:63:4e:02:0c:34:51:
63:dd:ea:b0:11:73:fd:3b:81:93:6e:8a:fc:4f:20:
12:9b:18:da:c9:02:1f:11:c8:39:1e:ae:bb:f3:eb:
49:dd:f1:fa:18:d5:16:9c:e6:60:e8:3a:5c:56:87:
26:02:3f:12:d7:ca:4f:02:67:b4:02:ee:b6:93:5c:
e9:e8:07:9f:d5:d6:d2:87:7e:27:fa:7e:59:da:a8:
c2:31:c8:06:3e:a6:c1:9e:d5:ed:8f:d5:ec:1c:2f:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:FA:E6:E8:6F:22:B3:AC:EE:93:17:08:4C:08:C9:60:07:4A:D5
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/41n65uhvIrOs7pMXCEwIyWAHStU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.176.0/22
Signature Algorithm: sha256WithRSAEncryption
09:48:0e:1d:fb:c5:9e:91:f0:21:95:5c:ed:d6:53:dd:16:ae:
bf:e1:83:67:82:17:6d:c7:88:58:48:7e:62:07:31:bb:6d:e4:
47:48:66:46:91:a3:68:a8:bb:11:92:69:66:b6:25:37:09:7b:
38:f2:d9:49:d1:c6:cf:e4:f9:98:da:ca:0b:6e:de:53:12:cc:
60:39:cf:ee:e7:3a:95:e4:2b:0c:9a:0e:de:f8:a3:ae:db:06:
2c:15:83:d5:0c:f9:6d:c2:55:61:28:df:85:47:a8:b9:d0:df:
29:b1:ac:b4:e5:34:87:ab:f6:31:b5:41:f7:b4:98:2e:c0:e9:
58:c3:8d:bf:01:64:fa:dc:e6:cd:96:41:90:69:ff:76:1c:65:
9a:34:3a:73:1a:b1:a4:12:89:21:92:4a:c4:48:5c:aa:5f:3d:
86:ed:74:1a:28:36:45:11:3d:4a:26:2f:e5:b8:cc:13:11:bb:
19:de:76:17:68:96:41:5d:03:81:64:36:d5:08:88:d5:bd:d3:
78:c7:ec:03:6f:de:5c:bd:44:ee:87:1c:fe:fd:83:20:f4:38:
dd:48:e1:0f:f2:5c:4a:16:b5:89:6d:59:10:5d:ff:16:13:aa:
e3:19:de:5c:9d:a0:8d:a6:87:80:fa:a4:91:86:e3:57:47:44:
b1:9a:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:13 2025 by rpki-client