Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa
File: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (raw, json)
Hash identifier: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=
Subject key identifier: 70:57:34:80:D2:0E:2B:95:B1:05:EB:92:17:97:A2:42:45:E8:38:A1
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019423D7D38DDDD46E3DFF5AE0C414A6BF8D
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14413
IP address blocks: 185.154.80.0/22 maxlen: 22
2a05:f500::/30 maxlen: 48
2a05:f504::/32 maxlen: 48
2a05:f505::/32 maxlen: 48
2a05:f506::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d3:8d:dd:d4:6e:3d:ff:5a:e0:c4:14:a6:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70573480d20e2b95b105eb921797a24245e838a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:36:14:18:4f:d6:80:02:7b:f5:f2:cc:b3:
86:07:77:61:51:f2:d6:cc:a8:5c:0e:45:4a:70:50:
a4:17:b0:2a:ad:e2:f6:04:01:f9:1c:ea:c5:14:80:
7d:f1:29:e8:52:a0:85:cf:08:38:7b:f2:67:62:52:
68:e4:86:2d:35:5c:91:80:82:25:55:6f:d3:07:3d:
c7:14:37:c1:b1:57:54:25:4e:9c:a0:9b:04:19:c4:
61:9e:4c:e5:ab:e0:0b:33:ca:3a:4e:80:f5:47:52:
bf:8c:24:86:ee:99:fa:d1:d6:2d:5f:17:52:4e:98:
6d:05:5e:3c:49:a0:95:22:e7:a8:3a:fc:51:78:75:
4c:46:99:b8:62:b0:0d:95:70:e5:61:ee:95:ff:a8:
2e:cb:88:7c:d2:81:52:83:b0:8f:cd:9d:4d:e6:e5:
81:93:09:91:fa:41:f7:b3:a9:35:b7:a3:06:b8:60:
10:15:28:3a:eb:af:c8:61:19:03:3b:fd:13:81:3f:
f1:e4:c3:49:83:c8:45:d1:2f:7c:f4:c1:42:b8:d8:
b9:7e:b5:02:00:fb:01:e6:68:62:e4:da:e3:59:51:
7e:be:db:23:94:c1:e9:c1:c7:85:d7:1e:68:1c:b7:
a5:74:eb:60:bc:6e:92:c7:95:ba:1f:58:cf:8c:29:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:34:80:D2:0E:2B:95:B1:05:EB:92:17:97:A2:42:45:E8:38:A1
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.80.0/22
IPv6:
2a05:f500::-2a05:f506:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:9a:42:74:23:b0:04:d4:7b:e5:3f:13:49:32:e3:4c:a6:a5:
b0:0b:8c:80:06:37:b7:6b:27:2d:84:e6:07:0c:bb:73:1d:d3:
c5:61:9d:4e:9e:50:5f:2a:b5:11:a6:f8:88:74:4b:b4:11:8f:
80:95:ec:64:71:9e:12:22:2c:a5:b8:3d:19:32:bf:ce:82:62:
ad:18:5f:e0:c2:fe:fd:2a:8c:5b:79:1d:cb:df:1d:5d:54:24:
fd:df:44:9e:87:ed:9d:58:e4:2a:f7:23:f9:7a:62:dd:90:42:
f8:7b:f2:68:36:74:38:49:c1:0b:16:4b:20:65:4a:b1:6b:6d:
6f:e4:82:5a:d8:60:92:f0:6c:18:fb:d6:d1:30:08:e3:aa:25:
23:aa:c1:b3:a9:1b:7a:c8:d5:f8:0d:d9:ea:88:e8:51:b0:f9:
b7:8b:38:70:60:9f:97:40:5d:9b:44:dc:78:c1:b5:9d:9e:39:
80:86:d4:2e:d3:c1:ed:8e:25:ba:e1:cc:1f:41:58:72:ae:ce:
03:fe:9f:65:d7:3f:fe:94:d6:90:c4:a1:2e:36:37:08:a0:ee:
9b:17:db:b9:88:e3:b7:df:da:c0:b9:75:1e:87:2f:c9:d2:5b:
a7:ad:59:cb:e2:68:62:f0:98:ba:61:a3:c3:eb:d7:16:ee:a2:
71:49:f2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:18:33 2025 by rpki-client