Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa
File: Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa (raw, json)
Hash identifier: DyvJm1MsNLqanW4GtBFAMBVCCMC4YL7VCe+zTPcnzYg=
Subject key identifier: 16:9F:2A:51:00:A2:16:98:3B:FD:74:BF:71:14:CD:BC:E4:61:A5:42
Certificate issuer: /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Certificate serial: 019420D61E960460639B661A189FB2B46CCB
Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 195.85.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:96:04:60:63:9b:66:1a:18:9f:b2:b4:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169f2a5100a216983bfd74bf7114cdbce461a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:fd:67:90:0d:ae:26:98:93:8e:0f:4b:d9:
59:42:d0:01:4d:76:29:31:f4:18:73:c2:88:98:9f:
92:46:0f:ee:cd:0d:e2:31:37:22:7f:04:76:79:b8:
db:81:b4:ae:e1:b0:49:11:cd:9c:9d:2c:3d:84:b9:
42:ad:97:cf:de:11:8e:c3:7b:e1:dc:90:7b:6b:2a:
5e:5b:aa:02:6d:a1:14:f6:16:53:91:4e:2c:57:2b:
75:11:21:9e:3a:9c:c8:bd:da:ea:75:cf:0d:32:95:
13:e8:d5:13:29:40:05:73:47:fb:1d:d4:fd:31:d0:
3a:81:40:9e:4b:50:e5:0e:74:c7:5c:67:40:27:0a:
4f:57:2e:42:f6:44:f6:2e:dd:d4:d5:20:50:59:21:
1d:09:3c:6a:b3:3e:56:88:a6:6d:ae:af:cf:f3:32:
80:c3:6d:d1:d5:2a:b1:53:7b:ba:f4:a7:49:13:fa:
86:c5:b8:a8:2b:d5:d1:70:a3:51:5c:03:5b:26:9d:
e5:84:03:de:44:c5:d0:96:96:00:3a:31:5f:81:10:
46:7d:90:0d:5c:e4:da:52:49:3a:28:21:40:e5:dd:
74:86:29:75:18:32:29:4c:e6:bc:e5:49:e3:8d:ad:
c3:8e:80:53:ff:3f:45:d8:d9:f6:a5:a6:cf:21:14:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9F:2A:51:00:A2:16:98:3B:FD:74:BF:71:14:CD:BC:E4:61:A5:42
X509v3 Authority Key Identifier:
keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
79:49:d7:9e:ad:20:7d:eb:36:a1:3a:45:c1:2a:d1:f0:16:b2:
be:e3:ca:ad:17:23:c4:a4:35:50:ad:c4:92:ed:0a:6b:ec:cd:
cb:c9:a3:d5:9d:7a:c6:2e:bc:2d:e6:93:31:33:b1:e8:19:cc:
59:05:8e:9d:c6:30:20:82:ae:f1:38:03:8a:8d:a3:3c:41:69:
70:9d:24:7a:0c:2b:38:e1:13:a7:79:03:f5:fb:0a:1e:3a:16:
5a:eb:c3:a9:04:7f:68:d7:e3:f5:ff:8f:43:85:3c:f2:7a:19:
a4:02:56:db:a0:7a:6f:ba:0c:df:d9:75:53:6c:f3:8a:3b:bb:
81:e0:9c:d2:6d:c7:ea:e8:50:f2:98:b5:98:81:f1:61:6e:a4:
ee:9d:c1:7e:f4:22:26:12:da:2e:a8:91:06:08:e6:a4:17:59:
ba:c8:5c:26:d8:d9:3e:cb:5e:4a:f0:02:28:a7:c5:36:64:04:
8d:ed:ce:22:aa:8c:c6:6a:fd:64:92:6c:2f:1c:4e:e1:82:ee:
ed:dc:e7:ce:de:7f:f7:70:8d:41:d8:b9:65:bf:e5:26:2e:f7:
3f:87:84:f5:66:20:66:7a:33:e1:44:40:a2:bb:92:7e:92:ca:
1f:44:74:b4:f4:89:bc:33:a7:83:ae:ea:35:32:dd:5a:88:7f:
ad:ee:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:21 2025 by rpki-client