Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/F_vaOKUje6wVSmmdNWKQj90pJEs.roa
File: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (raw, json)
Hash identifier: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=
Subject key identifier: 17:FB:DA:38:A5:23:7B:AC:15:4A:69:9D:35:62:90:8F:DD:29:24:4B
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019427B5C635C724AB17D542D82B41D64E47
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/F_vaOKUje6wVSmmdNWKQj90pJEs.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206898
IP address blocks: 185.172.110.0/23 maxlen: 24
185.172.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c6:35:c7:24:ab:17:d5:42:d8:2b:41:d6:4e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17fbda38a5237bac154a699d3562908fdd29244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:ce:86:87:1e:74:aa:b0:86:c6:da:ee:cf:
97:2c:92:ed:94:89:3c:4e:f7:c6:44:10:5a:be:1d:
06:61:45:09:63:9c:e9:01:df:a6:a5:43:be:37:51:
66:f8:bd:01:35:44:45:c9:43:b8:6c:f9:f8:53:62:
4d:82:80:de:10:fe:8a:53:a0:15:ff:30:63:d7:6b:
91:bb:22:36:ad:64:43:26:d7:f2:7f:af:6f:87:2a:
22:2f:63:1d:87:e9:17:61:36:51:9c:7b:e3:48:5e:
07:e9:79:9c:c7:11:c4:18:34:82:f7:45:49:b4:ad:
3e:36:6d:be:ba:44:ec:b6:2b:1f:96:ca:87:b2:7e:
63:cf:a2:3a:af:cf:e9:0e:11:4e:17:a9:4b:95:82:
4e:3e:bc:b2:9a:be:ac:a9:f3:92:76:bc:10:b5:bc:
b2:59:b3:bc:f6:36:3b:6f:fd:78:2b:a0:89:7f:e8:
16:b4:86:0f:00:7e:1e:c7:1d:74:72:ae:f4:9e:ea:
28:08:03:e5:21:ac:1e:8c:86:88:7d:76:cc:56:83:
06:8a:0f:e2:af:25:ff:e2:fc:26:40:32:0d:b6:a7:
9c:44:7a:9c:65:41:4e:37:f5:dd:ec:67:bc:06:af:
59:ea:71:3c:6b:83:9e:47:20:5f:ac:1c:a4:ec:40:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:DA:38:A5:23:7B:AC:15:4A:69:9D:35:62:90:8F:DD:29:24:4B
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/F_vaOKUje6wVSmmdNWKQj90pJEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.110.0/23
Signature Algorithm: sha256WithRSAEncryption
86:fd:8d:8c:f5:74:d7:0e:76:f0:3d:15:fc:e0:c0:6e:5c:93:
99:49:c8:3f:44:87:42:5b:c0:09:fd:22:f1:15:bb:06:ff:86:
e7:90:28:5c:80:90:d5:1b:85:1e:34:54:a9:50:6a:fd:c2:07:
e0:34:6a:f8:e2:06:13:e7:cf:d3:13:b1:b8:96:6f:19:82:68:
57:2f:26:99:45:e3:7b:de:27:91:ba:d6:c5:ee:e3:d3:a6:e6:
32:cd:18:bd:97:b4:45:ec:a9:d1:3c:89:af:a4:7a:7e:95:e8:
8b:c3:8d:0e:cb:4f:cd:d7:6a:42:f8:6d:20:89:b2:f0:27:44:
44:9c:2a:97:20:3b:4a:a4:94:67:ca:7d:3a:c3:01:a4:66:aa:
a8:c1:8c:17:82:d5:a3:72:96:cb:20:5b:8a:33:aa:b3:49:12:
7b:92:ab:fa:f7:ba:36:6d:c3:29:34:58:0d:37:5c:26:a3:d4:
a3:22:f5:40:65:10:17:70:8b:f0:a1:ce:c2:e5:63:9a:7a:9a:
4b:32:02:22:ca:74:57:31:e3:f5:9b:d5:04:1e:6f:b5:bc:d2:
f3:16:a6:0e:1e:eb:67:0c:12:f9:54:32:95:f5:87:f5:d1:dc:
5b:9a:db:26:33:b8:7b:e1:4c:e0:5e:17:b0:38:ed:1d:85:64:
da:3c:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:07 2025 by rpki-client