Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Frt-wjIJBE4PbTwB77W_GHFQijo.roa
File: Frt-wjIJBE4PbTwB77W_GHFQijo.roa (raw, json)
Hash identifier: H6ilHmvfxbh6t7MQ03kGg9bdKIFAsfhucpML1pE88GI=
Subject key identifier: 16:BB:7E:C2:32:09:04:4E:0F:6D:3C:01:EF:B5:BF:18:71:50:8A:3A
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 450B1398
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Frt-wjIJBE4PbTwB77W_GHFQijo.roa
Signing time: Sat 12 Feb 2022 00:04:49 +0000
ROA not before: Sat 12 Feb 2022 00:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197530
IP address blocks: 193.138.118.0/24 maxlen: 24
46.21.208.0/20 maxlen: 20
94.232.152.0/21 maxlen: 21
158.255.88.0/21 maxlen: 24
2a02:2928::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158353816 (0x450b1398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Feb 12 00:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16bb7ec23209044e0f6d3c01efb5bf1871508a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:25:73:ac:57:95:b4:af:bc:44:b9:24:e5:
fb:06:53:66:dc:8f:cc:00:34:f0:1e:ea:35:bc:f5:
db:22:03:e1:97:2c:04:fe:fd:05:75:90:fd:71:62:
59:93:56:64:33:c2:b5:92:2e:a5:e8:fd:e5:1f:b0:
4d:77:00:82:d5:1a:36:b6:5c:9a:ba:56:14:b3:d4:
c7:e7:f2:b5:96:33:98:78:c8:ea:f8:0c:2a:c9:a4:
c2:1e:f3:7f:63:a2:be:1a:aa:78:26:8b:ea:c7:62:
b5:cd:5b:00:72:55:f1:69:fd:a8:35:7d:3a:27:57:
af:fb:8c:2e:22:55:7d:aa:9b:8d:2a:0a:33:d4:ac:
9f:85:ee:73:92:a9:37:5a:0f:df:83:1f:0d:8d:9e:
9b:01:bf:b5:0b:09:d3:86:ca:83:e1:7b:4f:b3:49:
5e:49:21:90:7d:45:ce:ff:0a:46:56:30:b6:0d:96:
19:aa:09:eb:0b:da:64:e7:eb:eb:6a:66:a7:15:8a:
80:e0:a6:ef:28:95:1c:d0:4f:ef:bd:d4:e7:a3:e0:
01:b6:91:40:c7:25:f0:1c:5a:9e:47:cd:28:45:94:
50:08:5f:44:da:c8:be:98:88:67:a1:82:e5:5b:e5:
12:c8:fe:1a:cc:3b:c4:fa:02:3b:b5:dd:23:09:89:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:7E:C2:32:09:04:4E:0F:6D:3C:01:EF:B5:BF:18:71:50:8A:3A
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Frt-wjIJBE4PbTwB77W_GHFQijo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.208.0/20
94.232.152.0/21
158.255.88.0/21
193.138.118.0/24
IPv6:
2a02:2928::/32
Signature Algorithm: sha256WithRSAEncryption
95:61:f5:d6:13:01:a1:71:e6:f6:f2:fc:d0:28:ad:2f:96:1f:
c3:0f:0c:42:31:49:b7:e7:a0:ca:f3:79:59:14:16:ab:b6:26:
16:c5:e9:18:07:6f:26:bc:44:78:3b:14:20:c2:7c:42:89:64:
8b:43:85:93:13:ac:ad:f2:be:18:f0:ba:5a:02:7f:b9:2e:2e:
26:18:4c:0e:11:86:45:72:9a:b0:23:62:9e:41:51:46:29:72:
70:85:96:90:8f:f0:c6:c7:99:19:3e:d1:f7:d7:b2:8a:99:31:
79:97:54:8a:2e:6b:fa:88:be:77:56:68:f1:e5:e0:9a:ac:c8:
42:95:5b:61:7a:da:a8:67:8a:50:b1:c8:7a:34:d6:41:20:ac:
df:39:a7:0e:bf:77:62:28:4e:43:1d:b8:28:03:63:97:52:79:
d4:8d:6b:e0:a1:66:fa:c8:6c:20:62:87:3a:07:b0:25:2d:0b:
46:ae:d0:54:4f:ae:c8:f0:98:4f:30:62:3f:61:ac:02:5d:f0:
5b:d2:d5:b5:3f:7a:59:d9:a3:b5:0a:df:d1:b8:ca:b5:d9:44:
dc:a6:10:6c:3b:d5:65:2f:43:40:64:8f:bd:9b:23:0c:ed:81:
20:cc:f6:bd:3c:6a:83:a5:15:f7:a5:52:28:3b:db:13:f0:83:
d9:56:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:43:54 2025 by rpki-client