Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/FR9MfFqpLiVuFujJBtFbhJmONI4.roa
File: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (raw, json)
Hash identifier: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=
Subject key identifier: 15:1F:4C:7C:5A:A9:2E:25:6E:16:E8:C9:06:D1:5B:84:99:8E:34:8E
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 0194266A4E1C2730AF6B806EC1022B110DC1
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/FR9MfFqpLiVuFujJBtFbhJmONI4.roa
Signing time: Thu 02 Jan 2025 09:48:08 +0000
ROA not before: Thu 02 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 155.45.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4e:1c:27:30:af:6b:80:6e:c1:02:2b:11:0d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 2 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151f4c7c5aa92e256e16e8c906d15b84998e348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:15:48:c2:9b:89:3c:41:63:7e:61:82:82:
d1:10:9f:17:f1:78:ee:b2:d2:96:d1:ee:1b:98:b1:
ae:76:88:05:a6:bd:95:49:92:6b:1e:25:ac:23:71:
93:36:3f:35:b9:7d:01:6a:04:2d:c7:0d:97:50:b6:
2f:90:2d:f1:3d:13:c1:e6:25:a1:79:f9:fc:a5:b9:
2b:59:c9:ac:76:59:5e:2a:ba:35:11:74:15:84:b8:
10:b9:ec:37:84:a5:69:8c:da:f4:9c:1c:65:a3:c0:
17:8c:cc:46:d6:c4:f2:a5:d0:e6:14:9e:1d:62:8e:
42:2b:c0:00:90:25:ec:48:a5:31:e7:a9:cf:f2:27:
8a:00:3b:9b:69:e9:fe:e8:f9:f0:2f:d7:0e:c3:d4:
6e:04:c1:6a:b4:3e:6f:3b:99:f5:11:f7:07:89:87:
4f:81:0f:50:0a:a5:a1:38:b0:c1:59:48:d4:f9:86:
ec:d9:f4:93:93:95:e2:ec:ab:95:91:c2:f6:04:94:
f3:8a:4d:3a:25:11:4e:e7:6b:2a:61:53:4a:b1:91:
74:29:bf:8e:eb:7d:89:4b:95:de:09:56:bb:8c:10:
89:46:a5:da:1e:08:d0:ae:db:af:4c:97:58:23:77:
af:22:ef:a5:4a:71:5a:63:9e:1a:9d:e0:1e:b8:f5:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:4C:7C:5A:A9:2E:25:6E:16:E8:C9:06:D1:5B:84:99:8E:34:8E
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/FR9MfFqpLiVuFujJBtFbhJmONI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5e:b6:8a:73:e3:50:78:ed:31:b7:82:c9:c5:87:83:ac:57:
27:6f:7c:3b:ad:30:16:30:a0:1d:44:72:4c:a2:e4:06:b7:d7:
af:2d:dc:80:97:5e:52:53:5e:7d:10:62:33:e0:a5:b1:c2:be:
90:d3:31:d4:56:4a:96:b9:f2:db:10:a5:b0:1d:3d:5f:49:aa:
c5:6a:25:76:85:05:18:71:1a:03:da:23:13:e1:af:31:37:fc:
d1:a1:53:1e:69:10:06:e5:b7:2f:cd:b4:96:fa:5a:a7:ef:5e:
77:45:cb:51:cf:bb:1f:f1:cb:4b:c5:5d:24:03:14:d3:7d:8c:
5e:f5:46:bc:5f:2b:85:c4:af:bc:0a:4b:c1:c0:41:ab:74:1f:
ad:86:3c:e4:ac:97:9a:c3:e2:93:d4:78:56:84:c4:6e:e5:85:
08:ff:8a:2b:c4:e2:02:ed:3f:1c:94:8b:07:82:b9:d3:0e:97:
5b:de:b7:0b:92:8a:a2:58:47:5e:e2:15:72:33:c7:46:48:65:
13:00:f1:2e:70:08:39:e5:99:33:34:a9:69:10:ee:f2:e7:8a:
6f:63:4c:e3:eb:dd:2f:c8:15:75:cd:23:36:98:c8:4c:aa:ef:
5d:1e:ff:82:8e:83:a0:fd:19:5c:64:a5:7a:c0:33:c9:46:fc:
6d:0a:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:32 2025 by rpki-client