Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/FpKKPofiudOty7FxUMr6flRZ1Yw.roa
File: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (raw, json)
Hash identifier: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=
Subject key identifier: 16:92:8A:3E:87:E2:B9:D3:AD:CB:B1:71:50:CA:FA:7E:54:59:D5:8C
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0194228E27549ABF26831C63E658EC44AD9A
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/FpKKPofiudOty7FxUMr6flRZ1Yw.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48220
IP address blocks: 185.102.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:54:9a:bf:26:83:1c:63:e6:58:ec:44:ad:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16928a3e87e2b9d3adcbb17150cafa7e5459d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:3e:4d:eb:94:36:53:63:20:5c:30:fd:bd:
9f:32:1c:18:af:ee:1c:cb:dd:f9:4e:82:bf:44:3d:
34:fd:96:63:30:8b:4f:de:78:00:e8:67:47:c8:33:
70:81:bc:86:70:77:d8:e8:e8:3a:8a:3b:6b:5f:05:
28:b2:4d:f0:02:6f:12:b5:7d:06:95:67:07:4f:6d:
aa:de:63:7c:11:75:5e:ad:06:14:7d:2e:ae:b7:cb:
8d:cc:e5:c1:a1:60:e1:49:9e:67:b2:e7:93:57:c3:
c3:2b:4a:19:a3:76:b0:91:64:63:55:7d:83:0c:32:
ad:73:c5:68:c1:b4:53:bc:f0:a2:92:82:bf:00:bf:
15:f5:5f:3c:a4:25:09:70:98:01:95:5c:ac:72:74:
59:4f:17:68:b7:64:97:dd:58:f0:76:8d:a5:71:2f:
26:19:a8:c6:56:c4:6c:55:08:11:b6:72:a7:e8:b0:
87:a7:a6:12:62:31:ba:15:85:ce:5f:53:c9:15:d4:
d5:1c:f4:7f:8b:04:af:75:15:96:dc:f4:f0:11:e2:
23:f1:66:d0:28:bc:79:ed:fe:54:b5:af:e9:d7:9a:
31:e8:c4:d1:52:f6:bf:24:6c:15:d6:c6:14:46:c4:
e8:88:8b:fc:93:46:46:1f:54:56:62:9b:d5:c8:03:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:8A:3E:87:E2:B9:D3:AD:CB:B1:71:50:CA:FA:7E:54:59:D5:8C
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/FpKKPofiudOty7FxUMr6flRZ1Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:ea:75:8a:78:21:ab:ff:63:10:0b:f5:22:c2:b9:5a:d4:42:
1a:4a:7e:69:61:cf:a3:38:52:a8:9c:d9:e2:48:30:7f:e1:73:
d3:04:98:e1:cc:e3:8d:41:20:df:fc:fc:c2:4f:a5:93:68:f5:
f1:db:3f:e5:db:ee:49:0b:5b:cd:2e:f6:84:64:c4:4e:56:d9:
79:e7:f4:d5:a6:10:eb:5c:fe:53:a7:81:f7:fe:22:70:7c:13:
2b:ab:b1:de:f9:ce:9b:72:12:b5:9c:5e:26:7a:bd:82:ad:32:
11:5d:ff:17:84:8a:54:a4:83:20:9f:05:45:7b:79:fd:9f:0a:
0e:43:1e:8e:54:39:e0:50:98:a2:13:5a:6e:70:f2:16:33:cf:
80:ef:51:25:1b:19:99:1b:bf:0d:da:eb:3f:40:60:8f:15:ff:
e1:a0:21:dd:58:7f:8a:2a:ce:85:ba:df:d5:ae:aa:71:71:d6:
47:a6:15:a1:ad:b7:2d:b5:d2:d3:21:ba:53:d5:1e:ce:66:80:
e5:2d:77:ed:84:31:ec:6c:b1:66:d2:d7:a2:db:14:08:89:54:
d3:79:0a:9b:d2:02:cb:c4:ad:0a:5b:38:c2:d1:c3:c5:50:68:
7f:1c:13:8e:84:05:be:e5:e6:c0:c0:5d:8b:e9:be:62:b3:6f:
7e:0c:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:33 2025 by rpki-client