Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/_ftIJhWQtm4kZhCn1XKU6Rm2oGs.roa
File: _ftIJhWQtm4kZhCn1XKU6Rm2oGs.roa (raw, json)
Hash identifier: zxIc5fMadxhNiR50JaPNsnzEJVza24oa3H9Vkyjmaxo=
Subject key identifier: FD:FB:48:26:15:90:B6:6E:24:66:10:A7:D5:72:94:E9:19:B6:A0:6B
Certificate issuer: /CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Certificate serial: 01856E1D2D036F1B72CBB76886A043641E54
Authority key identifier: 25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/_ftIJhWQtm4kZhCn1XKU6Rm2oGs.roa
Signing time: Sun 01 Jan 2023 16:14:43 +0000
ROA not before: Sun 01 Jan 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.5.145.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:2d:03:6f:1b:72:cb:b7:68:86:a0:43:64:1e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Validity
Not Before: Jan 1 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdfb48261590b66e246610a7d57294e919b6a06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:fa:c1:93:bb:2b:67:ce:1b:b0:bd:4e:26:
a4:85:b6:24:38:27:58:bd:77:b7:f0:35:20:7d:08:
25:df:9b:ec:d9:37:d4:b9:34:95:ed:75:9f:bc:d5:
15:f5:09:c7:88:c4:f1:ee:a9:5c:61:7a:3a:6e:61:
07:b8:f5:00:11:b8:95:6b:25:a2:1d:eb:1c:03:86:
bb:76:95:04:bf:87:bc:0b:c9:ee:e4:5c:59:a0:19:
6f:6d:22:67:c6:6f:6b:0d:cd:7d:b4:0f:67:71:20:
9d:fd:fc:98:85:96:5a:a8:bc:c7:be:91:84:ad:d2:
05:e0:4d:68:eb:b4:8a:28:33:8d:dd:2b:7e:14:5c:
53:4c:b8:bc:fe:40:7d:45:20:e9:6b:a5:f4:3d:72:
24:90:12:64:61:b6:58:18:36:59:f0:3f:08:ee:94:
71:c8:e9:6a:15:ae:9e:f5:e7:d0:2f:89:65:66:a6:
13:d6:60:fe:2a:ad:7f:f3:49:06:22:aa:4a:99:04:
a0:18:13:4d:5f:7f:35:f0:f8:7c:1f:5e:d2:90:d7:
35:e3:a7:a2:d0:ce:03:3e:76:2e:31:65:cc:74:86:
37:71:0e:26:5b:a0:53:1f:c3:b4:8e:97:58:a8:3e:
7a:36:c7:b6:10:46:be:8f:35:4a:e0:26:e1:e0:d1:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:48:26:15:90:B6:6E:24:66:10:A7:D5:72:94:E9:19:B6:A0:6B
X509v3 Authority Key Identifier:
keyid:25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/_ftIJhWQtm4kZhCn1XKU6Rm2oGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bf:20:bb:70:bd:d6:fc:a3:55:da:7c:d6:34:ba:0f:5a:84:
46:2c:f4:58:2a:eb:84:1f:8a:73:2c:df:e6:d8:df:f1:1e:fb:
3d:9e:f0:eb:26:21:ab:f9:f9:a8:47:c2:6c:63:5d:71:3e:8a:
d9:74:54:48:5d:aa:a1:2b:76:cd:f6:32:07:b1:26:f0:ef:c8:
77:d5:5b:36:e8:b3:56:36:44:cd:17:8e:55:4c:5f:2c:a0:8d:
ad:93:2d:6d:f0:e0:c2:0d:26:54:50:d1:fa:d3:ea:98:91:18:
21:52:59:22:e2:df:9c:ee:7e:05:55:94:0a:09:d8:a2:d5:8b:
d0:00:ce:a4:26:12:d2:85:bb:94:bb:e7:9b:ca:70:cd:04:0b:
4a:bc:0b:55:91:a5:3a:db:31:88:a3:07:eb:32:b1:1a:7b:ad:
58:ff:96:da:d6:1e:4a:ed:39:09:27:5e:f1:a8:57:8b:ce:e2:
b4:d5:04:ba:d5:98:c8:b6:7f:5c:e6:b2:70:d9:1b:2f:a6:ae:
94:e1:29:2c:b0:0a:0f:3c:3a:c2:7e:e1:60:10:ef:26:91:fd:
c1:8b:dc:3e:98:43:fb:7e:36:af:25:66:23:fc:82:d3:a7:ff:
fe:da:f4:14:4b:a5:94:9e:16:5e:55:d1:d7:db:fd:60:4d:7f:
27:67:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:48 2025 by rpki-client