Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-fnf3ojkPEBdOndyXuGkGQzHCsA.roa
File: 1-fnf3ojkPEBdOndyXuGkGQzHCsA.roa (raw, json)
Hash identifier: dvftArEU6BPCTuzocoRVmHtfjUNew6Pec7rHwWIgCQ8=
Subject key identifier: F9:F9:DF:DE:88:E4:3C:40:5D:3A:77:72:5E:E1:A4:19:0C:C7:0A:C0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0195A87F9B13454AFF8A2361E67F08CFC337
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-fnf3ojkPEBdOndyXuGkGQzHCsA.roa
Signing time: Tue 18 Mar 2025 09:04:49 +0000
ROA not before: Tue 18 Mar 2025 09:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 185.132.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:7f:9b:13:45:4a:ff:8a:23:61:e6:7f:08:cf:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 18 09:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f9dfde88e43c405d3a77725ee1a4190cc70ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7b:eb:d3:cd:e1:7f:80:7b:1a:2c:6b:07:0c:
10:4f:48:4e:20:cf:0a:02:30:d1:02:e5:96:6d:54:
00:36:c9:fb:01:88:09:3d:92:82:06:8f:aa:5e:ee:
d9:05:a8:a0:a3:e3:b1:f2:08:7a:2e:7d:ec:3b:5e:
40:1b:9d:ac:a6:53:ec:be:fb:86:bd:00:40:3c:9c:
21:0f:43:72:4d:34:1c:49:ff:25:56:35:f4:58:f0:
1b:0a:17:a5:11:b4:be:2d:a5:ce:f2:6b:f7:a7:be:
b6:a7:00:6b:47:9e:cc:a4:9a:85:6b:10:08:60:fc:
9d:16:0f:8e:28:25:f3:4f:ac:94:43:6a:a8:2a:b2:
0d:10:8d:2e:1b:34:e0:08:2c:38:03:c5:a5:e4:0a:
df:61:da:ea:12:6f:5a:71:0f:da:1b:f6:6d:77:68:
f5:6b:91:74:c7:12:89:14:53:1f:6f:83:13:87:e7:
a2:79:5f:9e:41:63:14:1c:b3:ca:01:62:66:58:6e:
80:01:2d:81:6f:a0:1b:0c:74:77:e4:77:1f:21:ba:
65:37:c1:2c:2f:eb:26:64:8f:67:a6:c2:61:10:72:
f5:b8:0a:7d:aa:2f:5c:0a:53:18:03:65:78:47:45:
14:62:1a:c0:4a:e0:53:71:2e:f1:1e:95:94:60:e2:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:DF:DE:88:E4:3C:40:5D:3A:77:72:5E:E1:A4:19:0C:C7:0A:C0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-fnf3ojkPEBdOndyXuGkGQzHCsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.53.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:d7:c0:43:1d:7c:96:87:7e:9a:8d:a6:c5:a0:3e:ca:b9:
6a:87:11:37:ec:bb:49:78:ea:61:07:5a:20:f8:d2:ab:9f:ff:
69:49:f1:ab:02:6e:ca:f8:b5:09:02:b2:06:a4:58:6b:45:6d:
12:e2:84:a1:72:0a:44:f3:32:a3:2f:9a:9a:95:d2:ca:f3:15:
6a:e5:05:11:30:5e:2d:05:89:21:cb:0f:03:d8:86:b2:2c:65:
0e:af:aa:76:ad:c3:6d:f0:23:07:af:b3:22:1a:8b:cb:37:16:
91:49:c3:51:d7:86:4d:d3:bf:a3:01:5b:90:29:81:1a:03:ac:
de:e8:4e:21:f6:99:d6:a7:44:8d:7b:2b:a9:1a:03:e3:0d:90:
74:eb:b4:4e:01:3c:ee:b3:eb:ce:b6:8e:05:7c:c1:2e:7e:9f:
78:29:34:9b:21:c9:17:f2:63:10:6d:c8:e5:45:83:99:bb:7c:
dd:f4:ce:4c:03:a3:78:e3:e4:d3:fd:75:e3:30:b5:32:3f:19:
dd:49:d5:87:ca:f6:b6:50:16:65:3f:9f:7e:22:40:aa:fa:61:
a3:fa:1d:a9:54:42:5d:19:56:2d:95:4e:82:f8:a2:8b:2f:07:
27:6d:7b:ab:87:20:6b:31:b2:0c:5d:07:e7:a3:b7:e7:cb:b3:
08:72:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:58 2025 by rpki-client