Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/F1_yNsQ_cuvvhJRJMTAoztiZLBY.roa
File: F1_yNsQ_cuvvhJRJMTAoztiZLBY.roa (raw, json)
Hash identifier: hSjkhVMoH9zt3z99w4K0gArmcZaLHIzN28EU8vGpcJ0=
Subject key identifier: 17:5F:F2:36:C4:3F:72:EB:EF:84:94:49:31:30:28:CE:D8:99:2C:16
Certificate issuer: /CN=738aa04c3b8c2a2931ae9c4f0bca08f312dd9dc2
Certificate serial: 067A1336
Authority key identifier: 73:8A:A0:4C:3B:8C:2A:29:31:AE:9C:4F:0B:CA:08:F3:12:DD:9D:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4qgTDuMKikxrpxPC8oI8xLdncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/F1_yNsQ_cuvvhJRJMTAoztiZLBY.roa
Signing time: Sat 01 Jan 2022 08:05:53 +0000
ROA not before: Sat 01 Jan 2022 08:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 152.96.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108663606 (0x67a1336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738aa04c3b8c2a2931ae9c4f0bca08f312dd9dc2
Validity
Not Before: Jan 1 08:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=175ff236c43f72ebef849449313028ced8992c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:a1:43:70:87:89:28:04:da:70:de:14:58:
0e:c4:14:5b:26:44:07:22:f6:a9:cf:24:14:0a:11:
ae:4c:45:c8:d3:73:75:c1:89:35:f9:e8:e6:a7:de:
6c:e3:d0:00:5d:23:87:8e:56:69:cd:2d:e9:5e:c9:
57:26:37:30:9e:d2:67:15:76:ea:36:e1:d1:e4:44:
48:ee:88:48:c6:0a:6e:a0:cd:17:39:94:7b:b9:0c:
16:c8:b7:cb:35:e5:e1:2b:4d:e9:9e:7f:7b:30:ea:
a1:9a:46:99:16:06:f0:76:e6:67:08:e4:4c:e3:a3:
1a:fc:6a:f6:b8:12:ce:ac:e4:10:5d:c7:5c:1b:bb:
e6:31:a8:7c:a6:9a:4e:67:c1:73:76:4e:1a:b1:f6:
e2:5b:ee:e9:00:1b:ba:1d:55:1f:34:7f:f2:68:ff:
40:ce:0b:e3:aa:64:a6:3d:74:75:2e:b0:85:87:d9:
08:29:53:ab:7a:a7:8e:31:22:d5:d1:e4:a7:49:03:
5b:91:b4:9a:94:c7:51:e0:a5:2b:d3:8d:ed:f3:34:
d2:3b:92:22:6d:01:76:d0:42:40:87:b9:c4:9b:9c:
eb:f9:a6:fa:99:d2:aa:38:6f:29:fe:e1:3b:63:bb:
de:84:37:6e:c4:f4:09:56:5a:fe:1e:e9:bb:43:14:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:F2:36:C4:3F:72:EB:EF:84:94:49:31:30:28:CE:D8:99:2C:16
X509v3 Authority Key Identifier:
keyid:73:8A:A0:4C:3B:8C:2A:29:31:AE:9C:4F:0B:CA:08:F3:12:DD:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4qgTDuMKikxrpxPC8oI8xLdncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/F1_yNsQ_cuvvhJRJMTAoztiZLBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9d068e-f442-4717-9333-10184bdf41d8/1/c4qgTDuMKikxrpxPC8oI8xLdncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.96.0.0/16
Signature Algorithm: sha256WithRSAEncryption
e5:31:39:97:4e:c2:ec:3d:bd:58:8e:db:4a:54:cc:1a:5e:83:
51:36:42:39:d3:33:e1:2f:69:db:3e:60:ea:9d:95:82:04:9a:
41:e1:c4:bd:0e:3e:4f:24:e9:81:90:99:cb:3e:65:e8:d1:f1:
9b:46:9e:fe:b7:61:3f:14:98:b8:d2:ee:95:a0:f2:91:8d:a2:
a4:c3:5b:97:49:71:87:39:de:bf:1d:dc:48:20:5f:be:67:ef:
2f:d3:a8:fc:16:42:d4:dd:c6:e4:e9:e9:06:57:93:9b:15:f2:
10:53:cd:3e:23:f1:1a:2a:56:f1:94:d9:74:dc:a7:b4:18:cd:
c7:97:02:18:e6:e2:60:fe:ed:b3:c3:84:c7:e2:82:b6:e4:29:
ab:5e:27:af:76:a4:e9:75:3b:d7:33:d0:84:00:57:3d:ba:2d:
df:cb:9e:be:3c:9c:c0:72:75:1a:5d:21:19:ff:df:55:90:cb:
8e:85:f3:4c:f9:e0:74:57:81:a1:bd:64:44:45:bd:9d:2c:7a:
37:05:fe:bf:a5:f0:88:52:51:58:64:21:1e:02:2a:41:8f:2b:
cd:b4:2c:d1:6e:0f:8d:86:b6:ab:7c:00:4e:a0:39:85:bb:1f:
30:5e:56:82:67:c5:a7:1b:87:26:4a:46:c2:2e:a5:4d:8f:6b:
7d:7c:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:55:56 2025 by rpki-client