Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/fp-LIMQ80k5YBVtTaX91n-J89eo.roa
File: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (raw, json)
Hash identifier: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=
Subject key identifier: 7E:9F:8B:20:C4:3C:D2:4E:58:05:5B:53:69:7F:75:9F:E2:7C:F5:EA
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0194221F81EC3957A6348E2DD6D71674BCA2
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/fp-LIMQ80k5YBVtTaX91n-J89eo.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28878
IP address blocks: 185.75.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:81:ec:39:57:a6:34:8e:2d:d6:d7:16:74:bc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e9f8b20c43cd24e58055b53697f759fe27cf5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:f1:17:eb:fc:8f:df:cd:15:92:44:68:4f:
ba:55:49:38:06:cc:96:bc:11:97:81:85:dc:4e:f5:
0f:3c:85:79:b0:35:7b:44:53:d8:2e:2f:f7:0d:60:
96:76:73:b2:8f:88:78:12:e5:2e:29:be:8f:13:69:
32:d7:86:6c:eb:b2:07:70:fc:75:44:b0:8a:24:55:
89:e2:06:46:3d:ec:d6:1a:c9:59:4e:90:60:3b:22:
b2:c9:82:49:e7:b0:bc:eb:9e:0a:e4:fa:1b:25:e1:
56:e0:ca:cd:f6:08:71:42:c4:c8:d4:6b:55:e7:ef:
8b:5e:53:9b:71:1f:60:23:19:a2:1f:38:d4:ab:f8:
b4:11:4a:69:bd:f8:1f:af:70:3a:d3:8d:79:17:86:
52:62:dd:e2:df:7d:64:48:22:84:d3:64:d0:00:44:
1e:28:2e:ed:ff:63:60:e0:be:6c:26:2d:6d:b2:17:
35:3f:3e:7d:63:a1:3e:ff:e3:e9:86:d3:73:8c:71:
2b:1a:31:dc:d6:84:3f:8a:7f:d1:fb:66:76:93:ee:
73:60:b7:5e:e0:97:f1:97:7f:c9:51:d5:42:d7:a1:
16:ea:9a:99:74:5d:12:9f:7f:42:28:88:e6:44:c0:
cd:f3:8b:45:e9:cb:36:58:4a:f1:27:d1:4f:84:e0:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:8B:20:C4:3C:D2:4E:58:05:5B:53:69:7F:75:9F:E2:7C:F5:EA
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/fp-LIMQ80k5YBVtTaX91n-J89eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.156.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ac:3a:91:3c:f3:c9:a0:fb:eb:97:e0:f9:19:ce:74:52:ce:
36:6f:a5:9b:9d:54:bf:f4:7d:1c:29:a3:db:48:7a:c6:98:98:
ca:01:3e:98:d3:64:db:c8:7d:22:d2:45:9a:7a:d4:e8:36:c1:
f9:02:07:4e:7e:c2:17:19:ad:51:82:7f:a7:06:dd:a2:8d:e4:
27:6d:a8:62:e4:d1:53:d0:10:e4:88:5c:11:87:73:b9:fc:93:
c8:53:c9:1d:bd:d3:8e:ec:eb:2d:62:25:cc:b9:76:22:63:d0:
1d:fd:24:cd:3a:c1:85:91:3d:b6:04:2a:26:22:8b:be:eb:2d:
ac:d1:74:09:cc:f7:d4:b2:35:2a:aa:95:ea:ef:2d:b8:18:18:
18:d7:02:65:a7:a4:7d:ad:1e:03:6b:f4:00:da:b3:f8:5c:33:
0e:00:03:e7:f1:e1:47:88:25:0c:ea:22:e0:b1:50:f1:f7:7d:
82:45:79:e0:89:12:65:ab:d9:2a:88:82:e0:a4:da:da:d2:dc:
4f:53:05:d0:41:41:7c:7f:c0:49:2c:1c:d7:ed:bb:d8:74:bc:
80:bb:55:96:83:14:fd:3e:74:d4:64:92:ff:7a:09:21:98:8f:
e5:4a:c0:d2:ed:32:19:e1:c1:73:dc:79:32:d9:4b:a8:f2:48:
4d:6b:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:32 2025 by rpki-client