Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/5QVE77uQnSCLbr9iYF89fXdJU-M.roa
File: 5QVE77uQnSCLbr9iYF89fXdJU-M.roa (raw, json)
Hash identifier: IPgTEo7hNu+XjVm/3xLzVMgF8abs7044xMIbnapyQg8=
Subject key identifier: E5:05:44:EF:BB:90:9D:20:8B:6E:BF:62:60:5F:3D:7D:77:49:53:E3
Certificate issuer: /CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Certificate serial: 019425FCB794DBA75C5EDC1031ED11CFEDB6
Authority key identifier: FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/5QVE77uQnSCLbr9iYF89fXdJU-M.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39247
IP address blocks: 195.72.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b7:94:db:a7:5c:5e:dc:10:31:ed:11:cf:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf53402fa76fa06376cdea6bcd395e180079db7
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e50544efbb909d208b6ebf62605f3d7d774953e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:f7:1f:15:d0:f8:88:16:26:64:5b:2a:18:
5a:6e:af:b5:16:44:1d:0b:9d:b6:71:5a:3e:fa:b6:
38:5d:e6:c0:50:7a:92:71:54:c2:52:4e:de:29:28:
5f:e1:d7:7b:df:e4:2e:ae:65:44:99:ce:64:44:aa:
1c:e7:fb:fb:27:04:78:47:d8:25:0c:dc:00:3d:6e:
29:8d:99:0a:fd:c1:d3:2c:93:0b:12:7d:f4:70:be:
24:6b:86:de:79:59:ea:fc:69:ff:59:9d:b8:d9:88:
f6:fe:06:75:6d:7a:82:68:37:13:c3:7e:5b:fd:6f:
cf:60:67:26:36:4f:82:99:d7:bb:8c:c8:7b:26:f4:
b8:a3:98:b9:e1:c5:13:52:55:8a:b0:c8:47:fc:0a:
4f:77:53:f5:e3:44:f9:2f:52:c3:3b:c9:29:00:27:
f2:a0:93:09:e6:12:15:5c:a1:6e:12:ff:b6:d4:af:
51:da:3b:8d:6d:0c:1d:85:a2:35:3e:1b:7f:69:9c:
cf:26:bc:6b:13:ef:35:8f:79:17:53:dc:a6:27:d8:
20:e4:17:d1:4f:7d:22:bd:e1:6b:c1:01:7f:42:81:
6e:b8:33:eb:af:d8:23:39:bf:b7:ac:52:35:e0:45:
17:aa:3f:b7:39:fd:3b:46:1d:ca:3e:12:90:e8:8e:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:05:44:EF:BB:90:9D:20:8B:6E:BF:62:60:5F:3D:7D:77:49:53:E3
X509v3 Authority Key Identifier:
keyid:FC:F5:34:02:FA:76:FA:06:37:6C:DE:A6:BC:D3:95:E1:80:07:9D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PU0Avp2-gY3bN6mvNOV4YAHnbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/5QVE77uQnSCLbr9iYF89fXdJU-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c8313-ed1c-414b-b4cc-5ed057025516/1/_PU0Avp2-gY3bN6mvNOV4YAHnbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.147.0/24
Signature Algorithm: sha256WithRSAEncryption
42:79:0b:25:1a:f7:16:74:43:00:6c:a2:06:a0:de:22:54:f1:
78:38:8d:3a:8f:2c:ee:82:34:d8:da:22:85:36:ac:bb:5f:61:
26:e3:e6:de:0c:ab:fa:bd:7e:ac:e6:fa:7f:cb:39:71:64:e0:
11:ff:5a:91:51:e6:48:80:96:08:58:a6:35:40:ea:ae:e6:c6:
8f:91:55:60:8b:42:33:a9:8e:33:62:88:0d:c6:6d:99:90:0a:
99:ff:b2:c4:cc:0d:eb:73:19:06:50:13:dc:1d:b9:6d:3a:ac:
e4:28:89:6c:b7:b4:e1:9b:ba:36:5d:3f:c6:3f:21:92:2e:40:
78:ee:5e:35:34:75:52:85:b2:0c:0c:c7:09:76:38:0f:6b:20:
70:b1:f5:d4:21:e7:f1:d3:41:9c:fb:e8:66:b6:49:95:fb:64:
71:ed:c1:86:c8:d2:9e:c1:2a:4b:aa:07:df:5c:a0:58:2b:47:
7c:77:c9:ea:5c:5f:b1:c7:1b:d6:47:69:c4:84:2a:13:8f:68:
be:8c:3b:19:d1:ba:1f:fb:a6:36:b6:c6:ee:33:17:96:61:95:
e2:c2:19:d4:c9:39:e3:fe:4c:8b:52:da:0e:f5:16:b8:9b:67:
3c:88:83:ef:bc:8d:09:2d:c3:65:25:ea:33:cd:48:56:bc:ca:
9b:79:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:38 2025 by rpki-client