Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa
File: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (raw, json)
Hash identifier: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=
Subject key identifier: 16:1F:A0:DF:26:F1:B9:03:CC:06:30:1B:A1:28:32:58:AD:AF:02:87
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 0194266B532BC70668074E95CAE70359397B
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.54.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:2b:c7:06:68:07:4e:95:ca:e7:03:59:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=161fa0df26f1b903cc06301ba1283258adaf0287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:d3:f0:88:0d:2a:7f:67:3f:04:da:03:95:
3a:63:ab:c4:ab:ec:8a:8c:63:7a:83:cc:72:a2:6c:
ad:a3:fc:5d:d9:6e:40:52:6f:ce:56:ec:b7:83:a5:
b7:f2:9c:1a:e3:6d:f0:aa:d5:52:c9:6f:ab:e3:ee:
be:62:9b:bb:eb:02:b2:b1:b4:3e:0e:55:95:77:e9:
42:99:e6:d9:88:f7:a1:96:aa:30:ee:25:c3:c9:b7:
2f:2c:ce:e6:61:87:a7:60:68:8d:80:dc:95:a2:7a:
1b:d8:64:98:85:b0:62:17:b7:6f:05:fe:c6:83:7c:
25:dc:65:5d:3c:4b:eb:30:04:d8:9b:d3:9a:67:4a:
04:5e:22:20:0b:62:59:cf:fb:5d:0f:27:69:a9:f4:
dd:85:37:cd:be:4d:6b:7e:8e:29:a6:95:e7:2b:07:
0d:a3:5a:8a:ae:fc:94:a7:e3:e4:3d:e6:3c:25:7a:
16:7e:9c:2c:9f:fb:4f:a2:2c:49:69:5e:f0:db:21:
b8:bc:10:e6:57:e9:3c:ca:b0:75:2a:26:4d:18:02:
c2:aa:88:c1:bc:35:b5:33:69:62:8c:94:65:6e:5e:
23:bf:66:d0:0a:74:08:4c:22:e9:0a:84:5b:ca:9c:
42:6f:29:f7:63:d5:b2:a9:94:51:f9:6d:e6:55:d7:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1F:A0:DF:26:F1:B9:03:CC:06:30:1B:A1:28:32:58:AD:AF:02:87
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.12.0/23
Signature Algorithm: sha256WithRSAEncryption
65:65:cb:59:00:cd:6a:26:36:50:27:e9:d1:44:31:82:63:89:
3e:2d:94:38:39:3a:5c:50:15:01:cc:dc:ef:ce:1a:06:fa:9d:
5e:96:76:cc:e6:ce:89:a5:bb:8e:dc:ab:74:5a:a7:3e:ad:97:
02:f9:93:79:b5:6a:a9:c9:95:65:37:ba:ea:00:e5:25:52:e0:
ce:cf:59:d5:81:a3:a0:3e:2c:d4:6b:c6:22:e4:e1:5c:ec:87:
26:36:58:31:0e:90:9f:2f:40:9b:25:a3:45:4a:4c:8c:b7:9a:
24:e9:3a:36:35:6a:d0:91:b2:e5:73:13:4b:d4:45:fc:87:9b:
52:57:3c:b6:bd:fd:7a:fa:a8:67:83:65:16:eb:fe:11:f0:19:
34:14:89:68:98:0e:21:2f:08:3f:09:d6:1d:60:89:78:34:5f:
c4:be:e2:f6:4d:c8:9c:d1:52:f4:eb:40:71:6c:40:c3:d6:2b:
cb:85:35:8f:98:74:19:bd:b1:1a:87:22:05:ae:16:b7:c3:d8:
bf:ad:08:f6:2b:bd:43:2e:5a:d7:eb:88:02:5c:fd:75:65:55:
4e:7f:67:97:9a:35:04:a8:0e:14:48:62:1c:bd:38:11:d2:b6:
57:9a:12:bc:67:7d:41:6c:65:cf:42:bd:0b:ad:90:9a:f9:72:
67:0d:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:28 2025 by rpki-client