Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/FVhFb16UunLoFdVn-HOmuCPu28U.roa
File: FVhFb16UunLoFdVn-HOmuCPu28U.roa (raw, json)
Hash identifier: 1GoxA8kMQN54TP5CBZdQZuRNErhQNNNfLYmZA5pvOWA=
Subject key identifier: 15:58:45:6F:5E:94:BA:72:E8:15:D5:67:F8:73:A6:B8:23:EE:DB:C5
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0189AF9D95EEBE16AECD95BC959CF7C2C925
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/FVhFb16UunLoFdVn-HOmuCPu28U.roa
Signing time: Tue 01 Aug 2023 05:41:27 +0000
ROA not before: Tue 01 Aug 2023 05:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 109.94.144.0/20 maxlen: 24
94.24.64.0/21 maxlen: 24
94.26.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:9d:95:ee:be:16:ae:cd:95:bc:95:9c:f7:c2:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Aug 1 05:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1558456f5e94ba72e815d567f873a6b823eedbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:6e:25:03:dc:d5:14:10:d5:fb:12:52:6f:
f6:4e:9f:0e:6f:3f:f4:a0:4e:cb:af:bb:dd:29:f9:
90:ce:99:15:c0:eb:01:62:5b:15:8e:44:5d:da:05:
e7:ca:86:b4:ea:5e:22:80:b2:16:6b:cf:cd:63:4e:
ad:d7:75:82:cb:2e:87:93:75:cb:e2:3d:2d:46:c7:
15:84:5c:41:42:4b:2d:21:4e:77:64:18:67:2f:b3:
f2:b3:16:c5:18:d3:35:b2:08:1a:25:d5:79:24:2f:
f6:d2:3a:81:27:9d:9c:5f:9d:ac:87:25:8c:31:4b:
83:18:0c:01:5c:e1:c5:0a:4a:d1:be:10:5f:f2:29:
5a:78:b3:91:0f:97:49:1f:c5:67:95:59:cc:bf:0b:
d0:ea:8d:b5:d9:02:51:a8:b8:a8:95:69:9b:a3:30:
f0:26:3a:84:91:b7:f9:30:12:7a:b1:e5:ce:cc:3f:
28:7b:45:fb:b9:90:d4:73:6b:3a:29:97:fa:78:8f:
12:72:16:2e:0b:b8:45:09:5d:99:8b:65:1f:23:4c:
03:fd:3e:d9:db:fe:21:1d:ad:0b:26:ec:db:b7:fd:
cd:30:0a:58:64:bd:25:6c:16:f2:12:bb:9e:69:e9:
82:92:ca:3c:b7:20:4c:bd:26:ac:70:f7:9c:7a:2f:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:45:6F:5E:94:BA:72:E8:15:D5:67:F8:73:A6:B8:23:EE:DB:C5
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/FVhFb16UunLoFdVn-HOmuCPu28U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.24.64.0/21
94.26.24.0/23
109.94.144.0/20
Signature Algorithm: sha256WithRSAEncryption
93:e3:bd:12:a5:7c:d2:cc:8d:b3:d4:40:e0:89:b8:de:a2:6c:
2f:4f:9b:cd:bd:06:9c:2e:5b:57:bf:fc:dc:ed:a9:45:73:4f:
d1:44:d5:bf:7d:38:42:50:ed:0c:3b:bd:16:f6:bd:76:03:05:
5b:fa:97:53:c2:40:10:d7:ae:77:8f:43:69:a2:c4:a4:30:ae:
4d:8c:29:c3:9d:74:72:60:14:98:27:c9:1a:d3:35:8c:b8:fd:
09:c2:8b:4b:0d:88:65:02:05:12:dd:ab:79:fa:b4:88:fb:d8:
ed:5b:e4:f0:72:8b:0d:98:74:99:f4:e9:ef:09:5f:11:e2:96:
10:b1:00:8e:be:2e:1e:1a:2d:0d:5e:25:c1:e5:d3:e1:ca:e7:
bf:d2:f1:2c:17:22:be:6f:93:51:c9:da:00:1f:37:d6:23:3f:
36:d0:6b:65:55:7a:22:79:5c:c7:3b:1c:54:e0:df:0f:fa:9f:
b7:97:ab:a7:aa:55:e7:ad:ef:2a:10:2c:9b:99:a6:38:ec:9b:
fa:4c:72:bf:7b:89:9a:04:2c:af:3f:cb:f5:24:94:24:53:5c:
28:1d:0c:56:e5:5a:bb:80:4b:37:33:6f:b1:5c:49:2a:da:7e:
64:5c:79:4a:ab:bc:41:c5:26:4f:13:e1:0f:45:36:dd:5b:1c:
ab:d3:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:56 2025 by rpki-client