Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/fa5Ut2bfTKfGjIW2vJtyqNsqmwo.roa
File: fa5Ut2bfTKfGjIW2vJtyqNsqmwo.roa (raw, json)
Hash identifier: btD2jb2Zlo7uoENAbG16l4Fnr2LOY4lV0iUStHjXsoM=
Subject key identifier: 7D:AE:54:B7:66:DF:4C:A7:C6:8C:85:B6:BC:9B:72:A8:DB:2A:9B:0A
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0194C657BEAD1B8B4AA2375A694D1C3EEB78
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/fa5Ut2bfTKfGjIW2vJtyqNsqmwo.roa
Signing time: Sun 02 Feb 2025 11:07:06 +0000
ROA not before: Sun 02 Feb 2025 11:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48474
IP address blocks: 178.17.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:57:be:ad:1b:8b:4a:a2:37:5a:69:4d:1c:3e:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Feb 2 11:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dae54b766df4ca7c68c85b6bc9b72a8db2a9b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:a1:de:43:12:12:56:8e:d2:bc:7e:fc:ad:
71:99:d5:86:3b:26:be:5f:08:89:4c:13:cc:27:b5:
a4:14:f5:36:d5:88:49:27:38:42:81:a6:a1:6a:0c:
2a:1d:e3:a2:90:c4:19:0f:be:3f:44:18:69:17:4f:
f7:e0:b5:c0:13:9a:65:78:d1:e3:ff:0b:f4:e1:0a:
c5:f7:c2:11:b4:55:49:6a:65:37:25:6a:c0:70:f6:
5e:9b:ad:b1:4b:36:76:2a:e0:8e:c0:50:74:1f:21:
59:e4:f2:f7:f7:26:cb:da:7c:9f:fa:8c:89:4c:2f:
37:82:cd:af:c9:e3:7f:2e:6f:ff:97:6a:5b:ba:9f:
ea:66:0a:45:ed:b7:29:cc:b2:d5:7e:c5:fe:ad:da:
c3:71:61:12:6a:08:62:0f:ec:e3:7b:63:84:16:df:
4e:bc:e4:4b:8b:d4:c9:c6:03:75:d1:49:8b:10:65:
6f:3b:56:db:65:ea:d8:79:c7:5d:78:08:31:65:6f:
1c:8e:44:15:e0:8a:26:90:5a:23:5c:e5:96:9b:c0:
58:0d:42:51:02:b5:91:ab:c2:fa:35:c8:f8:af:6b:
9b:05:b9:83:86:ae:2a:00:8c:32:1c:aa:bb:93:5f:
67:32:28:5e:9b:49:f1:d3:ce:e2:e1:70:0a:75:f0:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:54:B7:66:DF:4C:A7:C6:8C:85:B6:BC:9B:72:A8:DB:2A:9B:0A
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/fa5Ut2bfTKfGjIW2vJtyqNsqmwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.80.0/20
Signature Algorithm: sha256WithRSAEncryption
97:77:96:98:4b:47:68:43:3d:15:8e:d1:cf:6b:05:87:a7:3d:
0f:74:b2:38:31:18:08:50:27:dc:0e:14:b7:9d:35:b8:86:5f:
16:06:20:d3:d5:7a:13:a0:eb:a0:d8:17:c8:90:01:08:33:fa:
4a:12:0f:e5:f8:b0:01:fc:cd:8f:4f:e6:ac:1a:98:f5:e6:8d:
37:89:3d:b6:7f:11:59:60:e3:e9:93:e3:6a:40:96:85:83:07:
10:71:10:3c:2b:17:5e:58:86:4f:73:1c:84:8a:cc:ad:9b:2b:
c9:b4:b2:11:40:bf:e3:9f:f8:73:2b:42:d5:e6:15:10:fa:22:
e2:cd:87:fc:d8:e6:9f:69:1a:16:09:f4:d8:9f:20:31:20:8e:
10:43:ae:b3:80:c3:ca:9a:e4:d5:6f:3e:95:ed:30:1c:e5:7c:
1c:82:61:4b:e9:74:af:04:17:32:55:39:33:a7:58:77:2d:d1:
a5:2d:4f:4d:f8:96:e9:a8:ae:b7:2e:b5:c8:f3:f3:ad:5c:1c:
3c:98:15:1b:02:31:9a:78:81:f1:0c:67:91:f0:0e:e8:44:83:
47:0a:ad:bf:94:aa:10:49:62:12:f1:53:db:02:71:dd:2a:2f:
51:8b:c2:94:d3:87:1d:e9:61:90:08:fd:31:61:2f:c4:72:e6:
8e:78:11:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:03:51 2025 by rpki-client