Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Fu5f16STNy51C9N4gHVSsWBTip0.roa
File: Fu5f16STNy51C9N4gHVSsWBTip0.roa (raw, json)
Hash identifier: 59bVQyATUE6BSe3JUsp3r9cW9rpSEWrGHKaTfKV1QQg=
Subject key identifier: 16:EE:5F:D7:A4:93:37:2E:75:0B:D3:78:80:75:52:B1:60:53:8A:9D
Certificate issuer: /CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Certificate serial: 018F288C1EF23B4D1151BBEAC93904066DBD
Authority key identifier: CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Fu5f16STNy51C9N4gHVSsWBTip0.roa
Signing time: Mon 29 Apr 2024 06:30:22 +0000
ROA not before: Mon 29 Apr 2024 06:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 185.136.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:8c:1e:f2:3b:4d:11:51:bb:ea:c9:39:04:06:6d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf44942a29fac612cd44f83ad317a1c0f5b8eea
Validity
Not Before: Apr 29 06:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ee5fd7a493372e750bd378807552b160538a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:cb:8c:d8:5b:b1:87:97:e6:27:79:4a:ed:
07:88:60:f8:0e:84:80:d1:40:43:c8:32:a3:80:81:
0c:d5:32:94:1c:1f:85:95:aa:f9:b1:b0:8b:f3:1f:
16:56:58:d8:16:af:79:d7:a5:a2:d9:34:4c:56:c3:
69:29:55:b8:d2:c4:a5:d6:bf:f5:e2:dd:59:e6:55:
f0:22:08:c7:84:a1:ab:c7:6d:04:9a:31:69:1b:2b:
c0:e1:70:96:13:46:a4:9e:95:b7:bd:18:cc:f3:0c:
7d:16:34:a5:ab:6d:da:1e:e6:46:d4:01:40:2c:6f:
4e:3b:7a:51:ef:4b:98:8b:87:e9:86:e0:c6:53:26:
80:8d:4d:a2:9d:bf:7e:b6:79:03:2f:dd:a4:dc:d2:
b0:69:28:ed:0f:49:83:b6:20:da:48:c0:7f:c2:32:
04:e4:37:1c:5c:f0:40:36:18:c4:57:a2:86:61:b3:
f0:76:d0:ca:fb:8e:59:b4:bf:c1:c9:04:50:01:c5:
e1:39:e2:e4:58:91:98:b1:b0:3c:a2:1d:f6:23:8a:
a3:22:37:d7:8f:e2:8d:ff:c9:eb:88:30:e8:cc:58:
c3:e5:ce:9f:c9:92:6d:97:04:1d:bd:b0:aa:a4:42:
45:38:6d:e9:0f:54:71:22:c5:e9:16:f7:a5:1c:17:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:5F:D7:A4:93:37:2E:75:0B:D3:78:80:75:52:B1:60:53:8A:9D
X509v3 Authority Key Identifier:
keyid:CA:F4:49:42:A2:9F:AC:61:2C:D4:4F:83:AD:31:7A:1C:0F:5B:8E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvRJQqKfrGEs1E-DrTF6HA9bjuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/Fu5f16STNy51C9N4gHVSsWBTip0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/02cb5f-c669-4fb0-92e5-4836bad61ba2/1/yvRJQqKfrGEs1E-DrTF6HA9bjuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
Signature Algorithm: sha256WithRSAEncryption
53:03:6e:9c:47:90:a8:43:30:1c:ad:8e:c0:4f:1a:35:0b:ae:
61:67:84:dc:aa:36:a4:2f:73:82:4c:91:c7:12:83:ae:f0:c6:
5d:5e:8a:f4:8c:47:e1:18:30:c1:68:85:31:9d:cd:aa:77:04:
65:f3:c5:3c:2f:c9:9a:73:e7:1b:82:4c:af:de:bd:ef:da:b3:
53:47:df:53:f0:8b:05:ec:50:34:83:8b:c2:9f:ef:ce:db:89:
de:c7:49:d2:ea:c3:39:97:ae:71:fe:0e:a0:22:be:68:53:33:
bc:28:08:47:f3:1e:75:32:53:e7:3e:2b:a5:19:72:ae:30:5f:
86:47:b1:b8:64:b0:ea:bc:90:c6:ba:13:1c:08:1a:49:f7:2d:
c0:30:29:a6:e9:2c:c7:f7:58:8a:be:98:3f:6a:18:b9:ae:88:
e1:69:40:5d:56:40:fd:ed:db:69:fe:e7:41:7c:a3:8c:e3:ce:
a2:46:33:dd:f2:39:0f:2f:81:d8:e5:88:d4:2f:a2:19:33:83:
f4:2a:a2:79:6c:4a:bc:8b:d7:d5:cc:dc:06:4d:ac:48:d7:e4:
ee:a5:74:77:0e:55:74:89:b6:72:79:c1:8a:b3:2a:6b:5d:dd:
83:ab:ee:87:61:10:a9:69:23:4c:50:b5:ea:53:c6:ec:ec:51:
38:6a:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:46 2025 by rpki-client