Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/Fg4gfGthOyzcFXfxEYyjwrss7as.roa
File: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (raw, json)
Hash identifier: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=
Subject key identifier: 16:0E:20:7C:6B:61:3B:2C:DC:15:77:F1:11:8C:A3:C2:BB:2C:ED:AB
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 0194214385049C1DCD3192243B735B6CFE41
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/Fg4gfGthOyzcFXfxEYyjwrss7as.roa
Signing time: Wed 01 Jan 2025 09:47:40 +0000
ROA not before: Wed 01 Jan 2025 09:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28726
IP address blocks: 93.190.198.0/23 maxlen: 23
213.153.96.0/19 maxlen: 19
2a01:6d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:85:04:9c:1d:cd:31:92:24:3b:73:5b:6c:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Jan 1 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=160e207c6b613b2cdc1577f1118ca3c2bb2cedab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:b3:bc:16:fc:2d:17:a4:b3:69:aa:48:e4:
4f:60:5a:55:11:20:01:1c:bf:aa:e2:be:2b:bb:08:
06:cd:b7:e1:df:a7:81:10:17:16:ab:d1:42:4c:62:
1f:4a:58:e3:74:f4:1f:85:67:b0:8e:45:4f:94:5a:
02:03:cc:3c:ba:6b:3c:5f:98:98:8e:7a:84:a1:a1:
6e:18:93:4a:05:ff:f9:0f:50:09:1c:12:2f:ca:54:
ad:a6:18:85:92:77:ee:fc:cf:de:2a:0b:50:8d:2c:
40:00:f8:5c:94:cb:c6:e8:53:3b:73:ca:7d:a2:20:
98:de:d0:01:8f:41:3a:59:1e:b9:6e:e2:f0:b1:52:
3c:33:68:9f:63:92:1e:f7:93:7e:da:49:19:1d:75:
2c:2b:6d:b4:c7:ad:ce:25:b0:02:e0:3f:d8:8d:87:
ea:da:f5:be:9c:e9:60:a0:05:00:43:07:94:51:49:
f7:b1:e7:1e:99:20:61:73:3a:d1:95:da:22:77:27:
9c:4c:4a:6b:11:1f:5f:0c:77:21:c5:07:14:c1:b5:
50:3b:fe:49:74:f2:04:78:8f:fd:98:23:42:38:fb:
a7:b0:66:13:59:ca:6b:98:d8:9b:1f:e2:c1:21:51:
31:26:d5:7d:8b:b0:16:f3:72:20:5b:d2:b9:e1:71:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:20:7C:6B:61:3B:2C:DC:15:77:F1:11:8C:A3:C2:BB:2C:ED:AB
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/Fg4gfGthOyzcFXfxEYyjwrss7as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.198.0/23
213.153.96.0/19
IPv6:
2a01:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
58:ff:58:a5:fb:16:c0:c0:03:6d:cb:68:b9:74:f1:a5:74:da:
8f:90:af:3b:ec:a2:6b:27:5a:31:54:fb:8d:48:62:55:a1:c1:
b1:4c:07:44:74:33:f7:d7:83:57:20:5a:7c:79:4c:4c:d2:1c:
d7:be:4d:30:d4:28:72:4a:26:a7:20:d2:06:ed:06:9c:39:5b:
ef:57:90:ad:cc:b1:79:a3:55:d7:38:8e:21:24:c7:7e:3d:4f:
d3:11:12:ed:a3:02:15:22:87:a6:35:1a:29:d8:73:38:79:a0:
cd:69:fa:73:9d:fd:33:07:9f:72:43:2b:39:02:ce:a7:47:2c:
47:d1:88:dc:17:2e:61:2c:66:2c:73:d3:2c:47:d3:a0:ed:6b:
e6:10:24:b5:2f:1d:aa:96:87:90:db:1f:ad:80:38:01:10:e7:
17:94:49:d1:c1:2d:67:a4:61:3d:c0:bb:57:41:64:b0:3d:a5:
c0:eb:fe:6e:f4:c0:9a:a0:f5:73:6c:53:05:46:b1:77:8b:8b:
91:c8:6d:d1:05:4d:e8:70:27:a4:23:2e:54:53:bb:60:04:5a:
c8:19:ac:f4:bf:72:d4:14:c1:05:10:bc:7b:10:d5:19:cf:17:
1c:3a:bd:de:88:17:5d:c5:df:ab:0b:72:20:3d:7c:0c:c9:32:
50:b7:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:25 2025 by rpki-client