Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/FVhNsBUcQISu7FECj90NXv790nI.roa
File: FVhNsBUcQISu7FECj90NXv790nI.roa (raw, json)
Hash identifier: hvnksppkNidBeynZQUaAVydCeFhL2ptzJXiybPAN0S8=
Subject key identifier: 15:58:4D:B0:15:1C:40:84:AE:EC:51:02:8F:DD:0D:5E:FE:FD:D2:72
Certificate issuer: /CN=a11a491d1a37062b46ee8df165e053421477d63f
Certificate serial: 0189D5151DF4374A44E54BCB1EA6D92E1329
Authority key identifier: A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/FVhNsBUcQISu7FECj90NXv790nI.roa
Signing time: Tue 08 Aug 2023 12:17:58 +0000
ROA not before: Tue 08 Aug 2023 12:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29396
IP address blocks: 185.184.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:15:1d:f4:37:4a:44:e5:4b:cb:1e:a6:d9:2e:13:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11a491d1a37062b46ee8df165e053421477d63f
Validity
Not Before: Aug 8 12:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15584db0151c4084aeec51028fdd0d5efefdd272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:0a:df:59:7a:00:07:7b:bb:e3:be:46:ed:
f9:40:30:d1:c8:5e:1f:ff:ce:6d:e7:40:bb:23:0c:
bd:94:f9:01:73:67:82:70:ed:e8:01:b4:82:98:5c:
b0:c6:f0:20:39:f2:2c:71:27:b3:ea:b2:3f:66:1b:
dd:aa:28:a9:f2:85:41:f9:72:2e:42:4e:88:be:c9:
d8:d2:bd:f5:9b:34:6f:7d:57:f5:75:59:c0:06:8b:
ec:ee:39:56:ff:c8:97:d5:44:69:10:c4:d0:00:9a:
ec:a1:67:de:4e:6a:51:87:7a:fe:11:b1:ca:ee:75:
82:7b:93:45:8f:69:15:bd:4a:96:f3:77:60:c1:e8:
72:21:17:11:5c:dc:ce:75:e2:0f:b5:d8:64:5a:42:
a5:1e:bf:2f:42:f6:f7:ba:47:2d:ac:ad:2b:13:49:
d7:9e:93:a8:93:6d:c3:5c:e7:4d:8a:0f:e2:a7:7f:
2a:99:b1:ca:99:6e:9d:62:62:ce:57:83:0e:4e:2f:
5f:67:13:b5:37:91:b3:31:23:cf:c9:af:ed:ba:b5:
17:b7:72:ba:96:44:3c:88:54:2a:a4:f2:62:7e:23:
24:19:62:dd:3e:a9:9b:75:a4:9f:d4:85:5e:08:8b:
6d:63:8c:b4:7d:73:f8:c5:e1:30:ac:90:29:72:31:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:4D:B0:15:1C:40:84:AE:EC:51:02:8F:DD:0D:5E:FE:FD:D2:72
X509v3 Authority Key Identifier:
keyid:A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/FVhNsBUcQISu7FECj90NXv790nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cf:0b:3f:48:fc:43:2b:87:7a:e0:58:7a:d0:30:68:1b:90:
25:09:11:2a:b7:0b:ca:9a:9c:b9:43:ea:6f:0d:08:f9:03:fc:
db:32:66:31:c6:f8:bb:46:6c:99:01:0a:17:7f:15:2b:95:20:
a3:92:7a:64:16:49:fe:a0:d6:a5:6b:b4:ae:d7:c6:73:9f:4c:
79:8b:d3:db:65:67:be:15:8a:ad:e0:87:79:8c:00:46:36:a2:
0a:3a:19:ab:bb:06:68:d0:91:be:08:b6:39:98:e6:3a:73:d9:
31:4f:cf:67:bb:31:bd:a5:75:32:ed:28:76:a3:be:c8:c6:6b:
2c:40:5b:9a:c0:b8:41:d8:51:c4:75:ad:6a:87:36:7d:77:27:
ec:fd:bf:23:bf:b8:00:83:ec:55:da:2a:9d:c3:b6:98:2f:f4:
a8:4f:be:19:b3:0e:eb:1e:8e:db:c0:44:f3:05:7f:1f:44:2a:
5a:ca:2c:78:88:27:61:1b:2d:2a:9e:ce:a2:c6:ea:58:5b:66:
a5:dd:c8:47:8b:29:3d:12:11:53:0e:97:3e:51:1e:4c:c1:c9:
85:76:9e:76:00:23:61:df:a3:21:a2:20:25:40:83:a0:85:e5:
d5:34:d8:18:73:c6:65:17:b5:14:0a:33:28:24:c8:99:14:31:
e2:b4:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:00 2025 by rpki-client