Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/fcyT5TdBuZSpYCMKnr2rChuJmjI.roa
File: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (raw, json)
Hash identifier: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=
Subject key identifier: 7D:CC:93:E5:37:41:B9:94:A9:60:23:0A:9E:BD:AB:0A:1B:89:9A:32
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 019425FC3119A84E4C90838A0DE113AEE49D
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/fcyT5TdBuZSpYCMKnr2rChuJmjI.roa
Signing time: Thu 02 Jan 2025 07:47:52 +0000
ROA not before: Thu 02 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 132.187.0.0/16 maxlen: 16
141.27.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:31:19:a8:4e:4c:90:83:8a:0d:e1:13:ae:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dcc93e53741b994a960230a9ebdab0a1b899a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:55:30:4a:8b:dc:d9:f3:0f:49:d9:d2:13:
38:f9:bb:a9:d7:51:6d:fa:f9:4e:e2:61:23:a3:b6:
99:dd:a4:a2:50:05:3f:c9:79:58:b8:73:0b:97:60:
48:94:7f:60:7f:f7:21:00:20:6d:52:02:fe:63:c1:
d6:33:32:e8:e2:3c:f3:b1:78:16:83:7a:1e:8a:bb:
22:ba:01:6c:c7:22:29:57:1a:09:11:a5:55:35:0b:
c5:51:4a:01:2e:d8:35:94:8e:29:54:3b:b0:e8:61:
72:b8:99:f1:36:25:93:02:0a:61:63:d5:ae:56:e5:
95:31:24:0d:d0:92:90:f9:28:7c:b7:b9:32:b2:4f:
15:16:43:c8:04:95:83:5e:b5:b8:a1:ff:32:54:98:
7b:f4:e6:8c:f1:f2:a6:a3:50:42:21:7b:aa:8b:eb:
f9:01:e2:c0:2b:af:8e:63:5b:60:5a:6f:12:c6:ca:
0f:9d:76:68:58:25:98:72:ab:4b:33:48:b8:93:54:
4a:02:52:f5:a5:d5:60:27:36:34:3f:54:fb:e0:14:
16:57:48:02:d6:e5:05:f8:1e:d6:2f:4c:61:f1:68:
37:24:df:cb:fc:c9:2a:0b:f1:84:d2:cb:bd:5b:9a:
85:2d:0b:74:d7:71:10:87:2b:e8:91:51:87:9c:a6:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:93:E5:37:41:B9:94:A9:60:23:0A:9E:BD:AB:0A:1B:89:9A:32
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/fcyT5TdBuZSpYCMKnr2rChuJmjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.187.0.0/16
141.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:93:1b:8e:b7:01:a6:f9:c8:a7:d2:bd:18:c7:ba:a9:2c:46:
61:64:63:d7:52:9c:e5:5d:89:3d:15:66:2a:e0:0d:b0:2b:44:
2f:69:6e:cf:1f:33:f6:13:93:4c:e6:bb:bc:a1:ca:e3:e1:d2:
09:48:8f:d4:75:f5:29:48:8e:c9:06:52:e1:6b:4a:b3:1e:f7:
d6:94:f4:6b:d8:d6:33:66:1e:4e:b1:0c:0b:44:1b:d9:af:98:
0e:b1:e2:e5:7f:da:de:85:03:04:4b:fe:70:a9:be:7c:da:86:
20:21:e7:b2:7b:ef:53:ba:4e:83:18:ef:b1:9b:f6:f7:93:43:
b6:92:3f:56:f0:13:42:b4:10:fd:81:44:f4:88:ec:cb:ad:b1:
94:e3:e1:97:d4:2a:ab:3b:50:7f:48:ac:e9:46:3d:7d:04:3a:
76:1a:b5:c9:4e:00:df:b3:f1:bf:75:e2:73:d0:5e:67:16:80:
3f:d0:46:2f:1d:f1:96:29:9b:12:b6:95:17:0a:b8:80:ab:55:
60:f4:61:c2:27:a2:a0:fb:55:60:66:13:8b:69:f1:48:dc:92:
05:05:02:2d:d9:fb:d9:62:5a:6d:42:b8:51:7a:16:1f:1f:87:
68:1b:a6:87:28:80:bb:c5:29:67:19:0d:f6:6f:6d:1b:5a:05:
0d:d7:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:43 2025 by rpki-client