Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa
File: fc2f9M3F1zskOGvfp9h3YrkR7dw.roa (raw, json)
Hash identifier: DzXPOOzIqFHHlJDJH56dAz4vrMYsUMtYZZ5osRxOd8g=
Subject key identifier: 7D:CD:9F:F4:CD:C5:D7:3B:24:38:6B:DF:A7:D8:77:62:B9:11:ED:DC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14BF41C0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa
Signing time: Wed 20 Apr 2022 09:55:22 +0000
ROA not before: Wed 20 Apr 2022 09:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209868
IP address blocks: 5.253.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348078528 (0x14bf41c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 20 09:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dcd9ff4cdc5d73b24386bdfa7d87762b911eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:ac:8a:8c:f0:b8:0c:44:4a:39:e2:a6:3c:
27:09:76:03:7f:b5:32:cb:05:1b:d8:94:fc:7f:90:
a3:4a:95:03:fb:62:8c:ee:22:be:06:4d:7d:d6:86:
62:cd:37:8b:f2:5a:a0:44:a4:16:48:a1:48:97:f9:
47:ab:c4:dc:b8:77:65:b8:53:38:2e:8c:78:95:87:
7b:3a:b1:4e:1f:18:93:be:36:1a:28:12:17:09:9e:
8c:5a:e2:25:a3:c6:48:45:bd:46:cc:ad:80:dc:a0:
d6:1a:5f:40:86:95:d7:ee:16:f2:95:3b:9a:ce:5e:
4a:7f:06:1e:f8:ed:ff:13:1a:fe:f9:3f:1a:47:2f:
79:85:41:b6:0e:23:d2:19:72:16:52:cf:bd:7a:6d:
01:e0:09:e2:e8:77:99:01:d2:d7:11:8a:c5:a7:42:
0b:dd:48:22:e1:f0:97:61:16:ee:98:85:4c:9d:3b:
7e:09:c6:a2:68:a3:b4:1e:04:ad:6e:ac:f1:9d:d3:
9a:5d:5e:51:8e:a0:3f:87:19:db:28:74:d3:6e:8e:
ec:81:37:3e:9e:87:fc:60:19:58:4d:fc:86:42:73:
67:7a:3c:8d:a9:1c:11:30:b6:64:39:65:ec:d1:db:
af:f5:e8:60:4f:e9:83:c1:4b:eb:7f:4a:35:66:ff:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CD:9F:F4:CD:C5:D7:3B:24:38:6B:DF:A7:D8:77:62:B9:11:ED:DC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/fc2f9M3F1zskOGvfp9h3YrkR7dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.228.0/22
Signature Algorithm: sha256WithRSAEncryption
76:62:d8:3b:63:de:21:69:d9:f1:fc:ce:aa:95:d3:c9:01:05:
e0:6a:d9:62:43:7a:c9:eb:ef:56:73:15:ce:3c:26:ea:41:15:
c2:24:06:ad:7e:c3:89:b5:df:6b:52:01:40:12:55:88:f0:45:
0f:40:93:53:0b:9e:3e:24:e4:d3:f7:8e:47:1d:40:3f:39:1e:
6d:c6:54:04:e0:c4:66:85:e5:87:7a:08:0f:44:59:a7:7a:5b:
68:d2:b4:8f:50:3a:ca:e3:0f:23:46:46:12:dc:11:ce:6c:03:
06:74:46:7d:db:e8:69:fe:9e:77:b4:ae:1d:3b:69:88:3a:87:
7d:fc:0c:08:e7:34:76:d4:23:b5:18:a6:6f:cf:15:d8:21:e4:
ce:06:50:46:fa:80:9e:82:61:6f:cf:70:25:b0:6d:89:2d:2d:
e1:45:fc:78:d7:11:2c:3c:cc:d0:08:1f:83:a0:41:f6:db:0d:
5d:b8:30:7b:7a:e0:29:ec:3c:28:4a:7a:b6:18:a1:a4:5e:ef:
e1:f3:3c:fc:aa:1c:33:8c:85:dc:3f:5d:c3:0e:57:91:c2:3e:
8b:06:4b:65:e8:da:c7:34:c9:76:ce:95:39:0f:f5:0e:21:e6:
57:b8:c8:da:db:6f:3d:de:24:6f:2e:e5:2b:1f:ab:07:73:8a:
7f:2f:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:59:20 2025 by rpki-client