Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/fkq-oahmsSqrVUTtF-STfDckmnU.roa
File: fkq-oahmsSqrVUTtF-STfDckmnU.roa (raw, json)
Hash identifier: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=
Subject key identifier: 7E:4A:BE:A1:A8:66:B1:2A:AB:55:44:ED:17:E4:93:7C:37:24:9A:75
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01941FFA1DDFA8BF819DD6F9C24D6E0361A4
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/fkq-oahmsSqrVUTtF-STfDckmnU.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26380
IP address blocks: 5.32.43.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:df:a8:bf:81:9d:d6:f9:c2:4d:6e:03:61:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4abea1a866b12aab5544ed17e4937c37249a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:d4:00:6a:48:7b:6e:30:be:1a:b5:38:af:
0e:5b:c1:e5:93:59:34:bc:ed:be:bc:a4:57:36:18:
82:21:42:b3:3c:40:9e:67:06:eb:4c:41:76:41:76:
6a:63:27:09:67:df:7a:72:3d:25:42:9d:08:dc:eb:
0c:6d:89:e1:28:11:8b:2e:08:1c:6f:77:64:5a:31:
43:c8:16:9a:22:dc:9d:e2:b2:2d:ed:8b:cd:67:92:
58:81:ad:77:5e:49:de:fc:80:56:50:2b:5b:72:0e:
e7:75:5f:e9:bd:b4:82:ed:52:b3:a2:89:bb:ed:be:
0e:a3:35:59:31:8f:1e:7e:f9:b1:9f:50:bf:35:b7:
41:7a:e4:a8:3c:3b:a5:b3:92:f1:3c:fa:e6:14:8d:
97:13:5c:36:5a:b0:1e:fc:1a:29:89:0c:fe:9b:df:
97:73:8f:f7:1e:7c:02:0b:1d:dc:dc:56:52:0b:ef:
f1:c4:41:59:70:24:78:f6:3e:72:06:cc:a6:33:75:
43:52:38:e4:0b:0a:72:02:ec:14:1b:08:c0:07:4c:
6e:1c:33:2b:44:01:33:d2:f5:e1:93:cf:1a:1d:e5:
9b:25:01:b1:1e:63:32:8a:c0:51:7e:6e:79:0c:7d:
d9:bb:16:2b:eb:b5:77:cb:ab:f8:35:15:a2:45:4a:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:BE:A1:A8:66:B1:2A:AB:55:44:ED:17:E4:93:7C:37:24:9A:75
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/fkq-oahmsSqrVUTtF-STfDckmnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.43.128/25
Signature Algorithm: sha256WithRSAEncryption
47:51:1e:e2:71:07:ed:e2:ef:f5:fb:cd:f8:93:20:a2:fa:bd:
b2:f0:2e:99:22:13:19:8f:1f:0c:4b:0c:90:be:74:93:1d:21:
bf:6c:6e:a7:60:84:2e:f9:a8:05:85:fa:0b:3c:af:58:16:20:
85:0c:e2:d7:7f:53:be:36:2d:e0:0a:15:1e:93:e7:28:84:09:
c0:69:bb:15:03:bb:cb:6f:44:04:e9:5d:3a:09:bf:b0:ae:bd:
61:cf:0f:37:cc:58:a5:64:d3:35:e2:e7:b2:60:de:5e:d2:0b:
8b:c8:de:dc:1f:02:1b:31:b1:23:7f:11:ec:5a:e9:ea:0b:43:
72:20:c7:f7:72:cd:fa:a4:eb:c2:fc:67:3d:1a:e4:59:cb:c5:
4d:27:cc:c5:4f:78:14:47:7e:12:d3:ec:e1:a4:66:04:ca:12:
3e:1d:2b:63:26:80:62:94:ce:4d:eb:f9:04:22:ed:1b:3f:ed:
de:37:93:69:c6:89:04:c6:86:56:c5:d3:e3:bc:7f:8c:9e:26:
05:ee:cb:3f:52:94:03:e1:d1:c1:46:a4:75:1b:ca:aa:dd:36:
0e:31:6c:80:04:f6:4c:83:4d:26:d6:5d:ed:55:64:ae:15:60:
a8:d4:57:68:19:b0:bd:66:87:19:c1:db:23:0e:05:8b:77:c5:
79:33:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:31 2025 by rpki-client