Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa
File: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (raw, json)
Hash identifier: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=
Subject key identifier: 7F:CD:6A:D0:66:86:4C:22:07:81:A1:55:94:74:C7:61:72:FB:48:44
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 019426D90F2B72BE4B1F34289E6B82C5898B
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa
Signing time: Thu 02 Jan 2025 11:49:06 +0000
ROA not before: Thu 02 Jan 2025 11:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199927
IP address blocks: 45.11.12.0/22 maxlen: 22
185.42.56.0/22 maxlen: 22
2a04:8e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0f:2b:72:be:4b:1f:34:28:9e:6b:82:c5:89:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Jan 2 11:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fcd6ad066864c220781a1559474c76172fb4844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:e4:6f:2a:e8:f1:7d:d1:3b:27:8f:a0:d3:
06:1b:e5:74:ec:52:cb:78:41:cd:54:08:52:2b:f4:
24:66:e2:cf:b3:5f:00:ff:cf:b4:bb:35:3b:85:04:
84:1c:3e:d6:1e:94:0f:c3:28:eb:52:8a:4d:bd:08:
aa:54:63:c3:96:27:0e:c3:5a:38:1f:22:28:4b:0f:
c5:0c:91:6e:06:2f:41:b4:2e:ba:08:24:6d:84:99:
51:93:61:0b:bd:a8:0f:fa:ce:95:7b:63:40:70:cd:
64:19:a1:e8:bc:0c:80:7b:63:3f:08:2b:bf:31:f2:
23:51:db:87:12:0e:00:c5:88:51:c7:ba:66:15:2c:
b6:8b:80:19:4d:eb:c5:d3:00:83:ad:a8:02:2f:6b:
d6:9f:34:ef:4c:4e:b6:b4:a2:ea:00:7a:57:c1:90:
ac:b4:dc:42:a6:a7:fc:95:ea:5b:f9:07:66:1c:ab:
e4:ed:19:09:a0:c1:10:18:19:f7:6f:80:30:20:a1:
8d:9a:8e:3f:6b:c2:8b:c2:0e:dd:53:45:2e:9c:4e:
81:dc:7f:d9:63:9b:48:e2:92:0e:c1:9b:1a:ea:14:
93:1a:90:3c:19:a1:de:c2:18:a3:ae:43:c7:65:53:
ba:ec:61:db:35:21:40:5d:8f:e7:69:1e:85:19:4e:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:6A:D0:66:86:4C:22:07:81:A1:55:94:74:C7:61:72:FB:48:44
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.12.0/22
185.42.56.0/22
IPv6:
2a04:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
13:03:22:14:66:25:5f:8b:fe:3f:bc:08:ab:2f:c0:44:63:8a:
44:0c:48:39:1a:f8:f3:70:93:2e:61:5d:e5:5d:60:a1:0f:ec:
3e:90:ce:c5:ac:09:a9:89:27:3d:5a:d2:88:77:fd:17:c2:74:
70:b1:ad:da:f5:99:e6:99:5f:72:6b:46:fa:1a:2d:fd:c7:e9:
65:45:d5:77:1a:f4:5f:d1:14:e6:d0:1d:8a:bd:a5:dc:38:ad:
82:cb:22:78:68:a1:33:8c:3c:d6:39:03:db:96:4c:bc:94:84:
5a:35:2e:f8:30:70:5c:66:dd:76:21:dc:c3:68:3c:07:3d:47:
9b:3a:87:32:de:57:bc:75:0d:d9:34:f7:23:cb:2a:98:0b:5d:
0e:08:9e:02:c6:52:87:6f:f6:30:1f:05:59:88:6e:43:3c:e3:
d1:47:0e:21:63:d2:cd:33:cc:63:5c:44:b8:14:5d:23:2f:f8:
bf:fc:0d:1b:da:20:30:0d:6c:aa:4a:98:4b:1b:b9:9e:e8:5f:
7c:a0:d2:65:b9:df:1c:bb:a4:d0:e1:0a:ec:87:12:ee:9e:b7:
42:03:79:cb:4d:28:94:01:7c:df:2c:2c:00:ca:4c:be:f2:ba:
72:93:33:fd:1b:2f:6c:67:6a:42:7f:9a:02:41:a8:40:05:8a:
c3:fa:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:12 2025 by rpki-client