Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa
File: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (raw, json)
Hash identifier: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=
Subject key identifier: 5C:5E:F7:0B:E1:5C:49:2C:49:43:EF:31:60:09:53:17:20:0F:E7:F2
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019422FBEA915BA4D3459CD7603B9B76A459
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201928
IP address blocks: 185.59.44.0/24 maxlen: 24
185.59.45.0/24 maxlen: 24
185.59.46.0/24 maxlen: 24
185.59.47.0/24 maxlen: 24
185.115.40.0/24 maxlen: 24
185.115.41.0/24 maxlen: 24
185.115.42.0/24 maxlen: 24
185.115.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:91:5b:a4:d3:45:9c:d7:60:3b:9b:76:a4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c5ef70be15c492c4943ef3160095317200fe7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:cf:61:1e:a1:4c:da:70:5a:86:bd:57:14:
67:25:21:db:fb:d2:e7:05:c8:1e:9e:45:06:9a:b9:
31:6f:2e:15:ef:e6:fe:76:04:8e:30:3e:b4:c6:61:
99:7b:9a:24:75:74:6a:14:58:9f:c1:51:8a:57:5c:
8e:55:c9:f2:cf:73:0c:a4:ee:3c:05:a8:62:8c:8e:
5b:77:5e:b9:b7:d4:02:11:09:16:8b:e0:6e:a9:e4:
88:98:3c:4a:07:a9:9a:b3:be:1b:72:24:a7:ad:5b:
88:4d:2e:f2:f6:06:1c:c0:0f:35:20:87:e9:80:14:
2b:b9:2b:11:41:88:73:e0:d1:9c:3d:a9:52:24:c2:
81:66:dd:c2:bb:69:fe:d3:c1:af:ea:85:a5:59:ea:
bc:9d:29:e8:52:6f:0c:c4:1d:b5:66:52:97:46:4c:
4b:3b:7e:cf:e4:60:63:72:05:ac:33:b3:62:3f:d6:
ea:d7:55:28:ca:aa:c3:46:e1:0b:02:68:77:19:fe:
49:8e:73:93:a6:78:94:8f:89:39:31:93:ca:9e:ff:
e3:f8:74:68:b3:77:a4:5e:23:80:16:5f:90:1a:70:
3e:dd:61:98:d1:d3:41:d0:4c:13:5b:1d:48:28:41:
81:53:20:9f:63:0c:79:46:3e:2d:a8:da:81:0f:a1:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:F7:0B:E1:5C:49:2C:49:43:EF:31:60:09:53:17:20:0F:E7:F2
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.44.0/22
185.115.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:09:31:e0:e9:f1:31:cf:d9:29:bc:0a:b2:3c:6a:c8:d1:95:
6e:8d:37:dc:b9:63:86:1e:07:2d:ce:aa:19:d3:77:da:3b:37:
de:50:32:c2:ac:bd:49:e3:30:25:c6:0b:9c:be:d6:83:f8:33:
05:25:14:85:01:59:e7:5e:fd:49:aa:77:aa:4f:0c:03:67:af:
18:2c:75:66:a6:97:0a:40:89:f5:98:31:6d:c2:07:34:7a:d8:
c6:e1:db:8f:7c:9c:76:62:3a:77:9e:27:ea:cc:70:ca:1e:8c:
7a:ca:50:93:5b:6b:94:ad:7a:97:7e:c4:e9:18:b6:d3:37:e5:
9e:b4:55:55:03:4a:33:5c:d5:f5:9e:d6:e8:94:81:4e:b9:87:
06:d4:e4:2e:15:3f:ca:27:66:b0:1c:cd:3c:65:9d:a4:b8:9b:
50:08:a1:5e:e6:17:b9:9b:7d:03:b9:6c:35:71:af:21:cc:26:
d2:93:3d:df:b5:1e:22:d2:fb:f2:4d:4f:d9:f3:4b:da:76:8c:
39:9d:c5:03:29:79:08:cd:00:a6:dc:e9:a5:18:c4:9f:05:bb:
ec:0e:bd:f6:86:27:af:9e:7a:e8:c1:c0:48:78:07:fd:f6:4f:
d7:85:7e:a4:fb:36:36:ac:3f:f3:33:71:e9:d6:2e:5c:fa:b9:
f7:cd:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:28 2025 by rpki-client