Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/_IXdfWr6zkRHvvtOwKChXW-xGb8.roa
File: _IXdfWr6zkRHvvtOwKChXW-xGb8.roa (raw, json)
Hash identifier: dZ5MdEiCdBo4i/7TUHKfpgmJ2QhfFaFR7s65LvkZg3k=
Subject key identifier: FC:85:DD:7D:6A:FA:CE:44:47:BE:FB:4E:C0:A0:A1:5D:6F:B1:19:BF
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01958DBE8B90175CC74D2754044A412CE070
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/_IXdfWr6zkRHvvtOwKChXW-xGb8.roa
Signing time: Thu 13 Mar 2025 04:23:49 +0000
ROA not before: Thu 13 Mar 2025 04:23:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 192.53.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8d:be:8b:90:17:5c:c7:4d:27:54:04:4a:41:2c:e0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Mar 13 04:23:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc85dd7d6aface4447befb4ec0a0a15d6fb119bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:25:38:44:de:f5:46:6b:1c:b4:1d:12:56:
e0:7b:06:62:e7:e4:34:ea:3c:e6:e9:ff:1a:69:9d:
61:2b:58:40:2c:ed:db:5f:1c:49:58:51:b8:89:3b:
92:e0:94:d0:b8:d8:aa:07:ec:73:48:e8:03:b3:e6:
79:6d:80:11:e4:08:70:33:4c:51:b7:b5:ba:c3:8b:
8c:7d:3e:79:ac:aa:ec:11:94:47:42:47:df:23:3e:
b9:5c:ec:e9:41:32:6d:99:c4:c7:ef:88:fb:a2:ce:
6e:b7:df:53:de:57:11:d5:95:8b:d2:4c:8a:16:73:
30:76:4d:f0:4f:73:29:1a:5f:b6:06:71:cf:7d:cd:
c6:60:1f:47:28:31:f8:80:a9:98:d2:f8:2e:cb:56:
9b:f7:d1:f3:47:22:00:82:12:ca:f9:66:2e:2d:65:
19:96:2c:8e:8e:61:c9:d5:2d:67:f6:84:17:76:d2:
c5:e2:4c:16:29:96:cb:93:8a:34:85:e9:85:44:f3:
4c:ce:84:8a:d1:e4:0c:75:9b:be:75:1c:5e:8b:e5:
39:30:68:35:ce:a5:1c:56:ee:f3:83:fa:9b:44:c2:
18:05:b2:3e:2e:77:54:3f:f8:d1:aa:ea:28:ca:7b:
9b:dc:cd:68:e2:98:7c:5c:db:7a:0c:b9:cf:b2:13:
5f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:DD:7D:6A:FA:CE:44:47:BE:FB:4E:C0:A0:A1:5D:6F:B1:19:BF
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/_IXdfWr6zkRHvvtOwKChXW-xGb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.53.64.0/21
Signature Algorithm: sha256WithRSAEncryption
94:6f:83:2f:94:36:75:75:3a:3a:ec:5d:fb:93:30:6b:b9:52:
9e:5d:67:1b:7c:78:70:68:10:ab:0b:53:16:57:15:34:8f:31:
22:3e:d1:0f:65:17:ca:17:2d:15:ae:88:e8:6d:44:69:ce:71:
b4:d2:a2:60:ab:b9:de:a0:fd:04:af:f2:42:f7:bb:a9:75:3f:
54:27:09:1b:cf:8f:f5:39:df:60:c7:52:62:19:73:98:11:74:
ab:be:c5:8b:08:88:87:3b:4b:8c:b0:1f:07:a2:8e:3f:a0:65:
a3:2f:e6:9d:23:21:e3:aa:af:06:d3:0d:d5:5b:cd:54:1b:5f:
0b:72:08:df:1d:6f:98:3d:c8:b3:69:46:cd:8f:01:16:30:21:
cd:b3:c1:42:d7:a2:31:da:d1:ab:e0:4e:9d:b1:b2:e8:53:05:
46:96:61:96:bd:04:26:f7:de:aa:41:f0:85:04:cb:0e:1a:fa:
97:31:a0:7e:01:54:6f:86:b6:f8:6c:43:28:3f:5f:e6:05:b0:
ec:ef:a5:4b:93:98:2c:25:c6:17:71:c8:6c:82:53:f7:d2:bf:
ea:ee:d1:36:7c:16:bf:8e:5d:45:86:64:72:5e:c1:f5:57:93:
90:a8:9d:4d:e6:73:43:51:a1:35:13:48:25:1f:e3:79:8c:5e:
fb:93:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:07 2025 by rpki-client