Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/FmWPQsDQv1I31vsCB-XoPwOttAE.roa
File: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (raw, json)
Hash identifier: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=
Subject key identifier: 16:65:8F:42:C0:D0:BF:52:37:D6:FB:02:07:E5:E8:3F:03:AD:B4:01
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 01942067BC85E029E29621C439C766A860DA
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/FmWPQsDQv1I31vsCB-XoPwOttAE.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215298
IP address blocks: 185.67.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bc:85:e0:29:e2:96:21:c4:39:c7:66:a8:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16658f42c0d0bf5237d6fb0207e5e83f03adb401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:f1:04:c7:28:bb:9c:e8:8b:8e:f2:54:09:
94:ef:41:b9:d5:40:2c:b8:90:73:87:a3:9b:a5:dc:
f6:d9:70:c6:46:15:08:94:ba:b1:13:b7:ca:75:61:
43:44:bd:85:fa:96:dd:7d:13:28:94:9c:43:62:cf:
79:46:ec:34:1b:25:45:65:eb:61:d0:88:8f:9c:94:
5b:dd:3e:8a:89:93:37:b3:fc:21:5d:ba:ed:7a:d5:
70:04:90:45:e4:7e:28:ca:3e:2f:b2:91:ff:ea:1e:
7f:7e:ad:94:67:17:17:38:1d:04:4a:fc:b5:31:9a:
61:0e:ce:b3:c0:f3:9d:84:ae:a7:64:29:cd:2f:1f:
fd:50:ec:75:ea:1a:49:0a:84:bf:ec:ad:66:0f:91:
df:a1:62:73:03:a8:9d:0c:2d:a2:de:65:7e:a2:f9:
bd:42:ec:67:b1:29:52:1c:57:f9:cd:26:16:df:12:
07:5f:12:9e:fb:43:cc:c1:bd:1b:90:c9:0b:cf:b1:
34:15:b6:ea:48:1b:6d:2f:8c:ca:eb:da:34:51:65:
03:f3:1c:f6:37:81:98:30:71:6c:73:4e:3e:47:4b:
c5:58:6a:aa:56:e1:20:4b:33:cc:3e:e1:a3:3f:e1:
5e:32:e2:81:3e:03:bd:8a:21:f8:fb:68:a8:51:58:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:65:8F:42:C0:D0:BF:52:37:D6:FB:02:07:E5:E8:3F:03:AD:B4:01
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/FmWPQsDQv1I31vsCB-XoPwOttAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2e:d4:6e:f3:24:e6:c0:d4:f2:e8:e8:e9:58:5e:09:d3:c4:
6d:98:6a:13:35:86:7c:68:eb:72:58:86:ca:11:72:4b:50:2b:
a6:9c:fc:9a:c9:67:de:06:eb:d8:92:d0:83:f1:df:56:51:21:
f0:0a:c8:b9:fc:22:58:3d:36:25:17:11:7f:b2:ce:4a:d0:97:
3e:01:7c:cf:f9:16:71:5a:26:2f:ce:52:e7:44:bc:05:75:3f:
8f:c7:5f:ed:35:dc:9e:2f:95:92:9e:04:f2:1d:45:b8:55:13:
61:38:12:92:74:aa:e1:81:18:7c:e0:a7:fb:4b:11:03:7c:7d:
fe:0b:aa:9b:f8:f0:eb:7a:db:3b:10:df:e3:e1:ec:4f:d3:fd:
8f:e1:17:e6:4d:7d:ba:a3:5a:1e:90:69:aa:a7:f4:ce:4d:b3:
53:87:42:94:a6:00:a1:d4:09:b4:e7:d1:d9:e2:9b:a3:98:37:
e8:f9:43:ce:d0:9c:2c:b6:af:6a:6b:bf:43:35:d5:12:27:b9:
b7:8c:08:49:4a:71:fd:b7:48:c2:4a:05:da:e5:14:e3:53:70:
6b:ae:83:23:b7:7d:70:c3:08:b6:11:e2:37:03:3d:bf:bd:de:
ba:03:20:0f:d4:24:3b:d4:aa:a9:27:48:3e:93:5a:c2:ae:01:
bb:24:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:31 2025 by rpki-client