Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/Ftnb9Ud8kWttM5-w7OSz4uHafco.roa
File: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (raw, json)
Hash identifier: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=
Subject key identifier: 16:D9:DB:F5:47:7C:91:6B:6D:33:9F:B0:EC:E4:B3:E2:E1:DA:7D:CA
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 01942143CA06D13757D4D257211BFC9B64D9
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/Ftnb9Ud8kWttM5-w7OSz4uHafco.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49781
IP address blocks: 5.253.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ca:06:d1:37:57:d4:d2:57:21:1b:fc:9b:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d9dbf5477c916b6d339fb0ece4b3e2e1da7dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:fd:42:fb:35:ef:46:42:64:72:3c:d5:da:
c3:64:7e:2f:9d:a3:1b:f7:f9:d3:4f:9f:6e:d0:a5:
1b:2b:d9:33:07:01:0d:22:08:c7:d9:4a:a7:f5:52:
80:5f:f4:02:e7:81:b6:da:69:9f:35:07:5d:34:f4:
a3:00:d3:51:50:1e:33:37:61:48:5c:97:32:1e:c1:
7c:f9:fa:16:db:38:d8:e4:8f:5a:f1:27:49:39:2c:
95:e9:5d:8f:a2:4b:f9:76:84:21:73:eb:00:96:8e:
66:68:74:16:be:5f:d9:e2:53:29:19:95:4b:11:43:
95:24:0c:fe:6d:c4:ca:7e:9f:83:cf:3b:dc:7f:d4:
41:83:6f:92:45:c4:0e:ed:cb:44:8a:5e:67:23:70:
b2:fc:16:04:0e:c4:8e:c3:22:c6:37:6b:ca:70:dc:
05:0d:3f:b4:ae:37:96:62:cd:3d:cf:33:f5:63:da:
a1:3b:ca:76:e9:6c:ae:dd:d4:0a:a5:e3:e4:a7:7b:
24:04:da:12:33:c0:8f:0a:51:74:13:44:8f:ad:57:
31:a3:b3:62:c7:d6:27:db:9a:af:3f:d0:ea:38:aa:
b4:74:57:c4:a7:69:f9:b0:2b:83:69:d9:15:e9:4c:
6b:3c:b3:14:5a:6e:62:30:53:42:49:30:8e:9e:f6:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:DB:F5:47:7C:91:6B:6D:33:9F:B0:EC:E4:B3:E2:E1:DA:7D:CA
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/Ftnb9Ud8kWttM5-w7OSz4uHafco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c0:c6:03:98:24:6a:8c:82:81:98:8f:b7:72:59:3d:9d:fb:
25:44:5f:8b:3c:e5:11:93:61:d4:aa:da:7e:95:ab:ce:4d:aa:
cf:1d:f4:3f:f2:89:5e:f8:2c:62:08:b9:16:86:85:72:b1:d8:
d5:3a:11:2b:6b:63:8f:a1:44:d1:c7:cd:16:b8:88:9d:3b:39:
6f:c9:e0:b0:cc:43:ea:23:d1:07:e4:5b:d5:6f:34:3b:7b:cc:
25:4d:5a:6a:02:6d:e2:80:dd:13:32:94:01:a2:9d:a7:20:1e:
30:7f:6f:50:10:d5:bc:60:26:92:93:7b:42:4e:2a:cb:0a:6f:
29:ae:bd:e7:65:04:9b:02:d3:d2:d6:dd:a5:b2:35:77:00:ce:
f3:2a:0b:42:84:73:d2:0d:86:24:cd:96:0d:3f:dd:58:81:90:
fb:52:b1:41:f0:8f:45:d8:3a:d1:cf:bc:60:54:2f:3c:66:cb:
89:87:1d:23:61:20:ce:25:b3:56:7c:32:ca:92:47:07:da:4d:
7b:52:65:3c:eb:75:af:1d:33:9f:91:f2:05:d8:9b:b5:d0:1b:
4d:35:a7:48:f9:a3:81:df:99:c2:21:39:54:fd:85:d7:7d:d8:
9f:52:a6:fe:c0:96:7e:55:5b:1c:36:c9:68:5f:af:f2:c0:98:
81:26:7f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:31 2025 by rpki-client