Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa
File: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (raw, json)
Hash identifier: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=
Subject key identifier: FC:7E:59:C2:2C:8E:F3:94:1B:D6:68:7A:A0:B3:1A:0C:2D:43:F2:4E
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019427B51B8F719F9C8748912BC1B61EEE7C
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa
Signing time: Thu 02 Jan 2025 15:49:27 +0000
ROA not before: Thu 02 Jan 2025 15:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60111
IP address blocks: 185.157.116.0/22 maxlen: 22
2a07:a680::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1b:8f:71:9f:9c:87:48:91:2b:c1:b6:1e:ee:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Jan 2 15:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7e59c22c8ef3941bd6687aa0b31a0c2d43f24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:fe:24:15:ff:69:6f:96:38:ae:05:fb:34:
8f:d7:36:2c:d6:05:09:a7:93:26:49:c7:06:79:1e:
90:88:d0:cd:a3:15:41:a0:e0:56:41:9e:ee:39:ad:
70:1f:ff:65:2d:5f:1b:1a:06:56:0c:d8:cf:b7:c4:
df:9a:c6:5a:5a:08:fd:ca:b1:45:2e:f2:2b:8e:a6:
8b:ac:20:9e:57:cd:84:d6:3f:31:0e:0c:74:33:c9:
66:51:a7:6c:78:0f:cb:b3:c6:33:6c:b9:5e:fb:1e:
79:5a:49:ba:6b:e1:0e:da:97:c7:fa:da:97:38:b0:
76:c3:24:9c:7c:f7:72:c1:7b:5a:65:c0:2f:ad:73:
6d:bf:ad:14:25:44:d4:37:7a:ae:1e:46:45:a6:0e:
01:ac:a3:3b:c7:31:1a:51:0d:59:1b:97:26:82:85:
3b:df:69:d6:a0:32:67:7c:fe:b5:0c:02:4d:14:c3:
5f:43:18:88:32:de:dd:87:08:d7:cf:65:7e:df:e8:
98:05:d4:7c:21:89:73:b9:4a:a2:5f:49:87:d8:21:
82:54:46:86:4a:a1:3f:ce:56:00:4d:2e:44:a6:31:
ed:15:d0:53:10:38:91:47:94:25:15:e8:1d:7c:24:
52:22:5d:05:62:c3:ca:cc:a4:f1:e1:f2:65:41:4d:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7E:59:C2:2C:8E:F3:94:1B:D6:68:7A:A0:B3:1A:0C:2D:43:F2:4E
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.116.0/22
IPv6:
2a07:a680::/29
Signature Algorithm: sha256WithRSAEncryption
8a:5d:8d:5e:ef:a8:14:4b:39:a9:be:ee:12:b6:22:aa:98:ba:
68:29:54:9f:7d:fe:98:fe:46:ec:8c:2f:f4:c0:0c:2e:d0:73:
7e:20:97:fb:1c:33:27:1a:fc:a7:ac:b2:5f:7a:9c:8b:73:2e:
fa:ae:70:c9:5d:c4:fb:57:08:f2:0f:2f:a0:54:8e:e8:b3:00:
a7:12:7a:8b:cd:21:c7:e1:4f:74:96:0d:6a:15:83:da:99:da:
14:93:e8:1b:5c:9e:5e:64:59:fb:ca:79:b4:07:02:ec:50:d4:
7b:eb:1c:5b:76:08:70:33:61:17:09:ca:1c:61:44:93:a8:fd:
7a:fe:af:a8:f9:cd:74:5b:6e:9b:c0:82:15:76:03:9f:80:1e:
25:19:67:d2:72:dc:38:52:d9:cd:21:0e:d0:e5:64:f2:ba:8f:
f4:52:dc:38:15:cd:60:6d:bb:8f:23:35:fc:5d:87:29:e5:e7:
07:c7:88:1d:bc:08:13:31:7a:8f:22:7b:b2:b6:46:1b:60:18:
69:8a:68:92:20:67:30:2d:56:98:1b:a7:ad:a1:05:64:38:62:
f2:2a:67:df:93:8b:f9:98:e4:c9:72:c2:8f:9f:65:ba:68:1b:
26:4d:e9:01:53:65:80:dd:7f:df:9f:d2:57:f5:dc:86:e5:d9:
a2:b4:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:23 2025 by rpki-client