Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/fsRjNoJDy9POHF18ZkBOzQiMl94.roa
File: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (raw, json)
Hash identifier: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=
Subject key identifier: 7E:C4:63:36:82:43:CB:D3:CE:1C:5D:7C:66:40:4E:CD:08:8C:97:DE
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0194236A254FFAD310A496D5AEE6F96BFD7F
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/fsRjNoJDy9POHF18ZkBOzQiMl94.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 2.56.32.0/22 maxlen: 22
45.81.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:25:4f:fa:d3:10:a4:96:d5:ae:e6:f9:6b:fd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ec463368243cbd3ce1c5d7c66404ecd088c97de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:80:1b:d6:50:d8:68:97:8a:ca:cb:20:35:
f4:27:ef:75:8f:db:1f:51:fa:e4:01:25:c6:4d:92:
5a:9d:9e:a2:57:8e:3d:2d:74:41:7e:68:ad:b5:34:
40:cc:7a:19:5f:39:f8:89:73:67:d0:15:73:e2:9e:
a6:35:b1:75:31:d9:37:e6:32:19:8d:09:6d:dc:40:
76:15:8e:58:69:d4:7d:f9:b7:20:b9:53:95:62:87:
c7:43:45:80:b6:c9:af:0c:67:5d:58:e1:7c:d7:e0:
24:a6:50:20:7f:95:e6:c9:18:e5:f3:e9:58:82:ce:
6b:48:2b:6f:ff:17:ee:01:5b:93:d7:63:cd:a6:a2:
3e:d9:d0:14:e5:71:86:f3:ac:7e:b7:f1:34:c9:a0:
fa:ab:af:f3:b2:fa:87:16:d6:6d:7a:eb:dd:6b:32:
48:d0:52:46:76:22:a6:96:01:87:d9:19:3f:d6:99:
56:23:a4:e2:36:a8:e6:70:c7:7a:9b:b3:31:7c:41:
84:9c:24:f4:da:7b:e0:3a:89:36:d7:ea:12:81:02:
93:f6:7c:55:d9:a4:da:9e:6a:c0:21:cd:be:63:8a:
25:7f:04:9e:46:3b:b0:ab:36:ce:f1:0a:49:c8:f4:
d4:72:fc:59:e8:00:23:68:f9:47:c4:41:51:a9:80:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C4:63:36:82:43:CB:D3:CE:1C:5D:7C:66:40:4E:CD:08:8C:97:DE
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/fsRjNoJDy9POHF18ZkBOzQiMl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
45.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ea:96:db:fd:4c:7f:b2:99:c9:41:e8:0d:f0:b8:4b:12:20:
98:95:30:a2:0a:b3:8f:c3:6c:03:5d:ab:83:30:bd:57:70:9d:
ad:b8:92:51:a8:6b:b9:34:9d:02:85:20:c4:c9:98:4a:b1:f7:
f1:9a:e7:36:75:73:09:67:07:d9:0c:7a:15:fe:06:2b:89:4b:
f4:71:9e:29:16:ee:d3:4f:77:81:49:54:63:43:89:53:5b:a4:
60:07:a0:81:ea:79:77:4f:c7:c7:2f:a7:4c:ca:62:0f:04:11:
a8:c6:df:06:9e:de:58:d1:d0:6b:34:4e:b9:a2:c2:03:70:ce:
14:db:e9:9e:fb:69:29:5e:b7:d4:1e:4a:db:94:6c:d8:d7:76:
1d:30:7c:fc:75:dd:0f:55:a8:e8:1d:7b:d2:89:68:e1:3b:8a:
70:02:17:e2:3e:45:cf:c8:7b:43:0a:49:97:3a:05:57:af:34:
08:85:7f:1b:ae:5a:aa:bc:95:53:0b:4f:28:11:b0:1b:83:10:
1a:61:3c:ec:26:ec:96:59:d7:a8:68:5e:b0:83:b3:c2:af:17:
bb:05:7f:66:2c:7b:ff:61:0c:60:61:e9:dc:5f:30:e2:a2:4f:
b5:df:12:c1:21:0c:36:a2:f0:a8:e8:1e:08:42:9d:bf:02:85:
93:11:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:14 2025 by rpki-client