Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/FSmmrpxZI8I6yFXDm_U4fcT1E-k.roa
File: FSmmrpxZI8I6yFXDm_U4fcT1E-k.roa (raw, json)
Hash identifier: AXH4Lw2C9cnClxjUqX9S682PcucTz/r7DENq0iywhnQ=
Subject key identifier: 15:29:A6:AE:9C:59:23:C2:3A:C8:55:C3:9B:F5:38:7D:C4:F5:13:E9
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 01938D36F733955793926F7D5977833D72D2
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/FSmmrpxZI8I6yFXDm_U4fcT1E-k.roa
Signing time: Tue 03 Dec 2024 15:50:09 +0000
ROA not before: Tue 03 Dec 2024 15:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 82.112.64.0/19 maxlen: 24
94.198.48.0/23 maxlen: 24
160.20.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:36:f7:33:95:57:93:92:6f:7d:59:77:83:3d:72:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Dec 3 15:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1529a6ae9c5923c23ac855c39bf5387dc4f513e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:82:3a:df:e0:87:f2:6c:f5:63:42:f7:77:
bb:de:1c:59:a0:d2:90:ce:b6:16:42:72:28:9b:a1:
04:2d:bb:46:bd:00:5f:7f:54:b8:72:e1:0e:2d:d7:
eb:a5:3b:af:74:00:8a:bd:4e:e6:77:58:46:cd:34:
94:f1:38:0a:a1:78:c1:2d:25:30:e0:e2:eb:5a:58:
6a:41:70:eb:d7:14:de:9f:42:90:b9:c8:5b:4f:29:
a2:95:39:a6:17:05:cf:f1:ab:f5:70:f9:71:d0:22:
6a:c4:6d:53:08:01:aa:3d:7b:c0:ee:4e:56:1c:ab:
84:cd:b0:7c:aa:c9:08:16:ed:d7:f4:d7:05:55:7a:
57:2d:c4:15:1b:c9:42:86:61:a0:91:fe:6a:75:c8:
e9:16:c0:1c:50:27:1e:56:07:50:a9:e3:e9:23:45:
2d:e9:5a:49:30:1c:eb:4d:00:19:2b:dc:f3:a2:b3:
31:49:b8:ee:65:57:bc:60:ee:1a:cf:38:0e:70:19:
74:50:56:13:71:50:05:c0:6b:c8:7a:51:09:4f:7f:
2d:8e:55:60:d7:36:26:bb:86:fb:3e:e9:70:11:21:
1b:0d:a9:c9:6a:90:05:28:aa:a1:3c:96:db:f7:28:
ea:90:b0:b0:90:31:86:22:03:e8:2d:ac:22:24:07:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:A6:AE:9C:59:23:C2:3A:C8:55:C3:9B:F5:38:7D:C4:F5:13:E9
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/FSmmrpxZI8I6yFXDm_U4fcT1E-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.64.0/19
94.198.48.0/23
160.20.214.0/23
Signature Algorithm: sha256WithRSAEncryption
20:c2:74:4e:ce:05:84:b4:d8:c1:89:6f:60:e6:d3:1d:f3:75:
74:c3:ba:7d:da:4f:ed:aa:80:37:c0:c8:4e:b6:16:de:5b:58:
ee:38:a7:d7:a6:6b:06:db:9b:9e:f2:4f:c6:72:5b:17:2d:5b:
b6:1c:64:57:55:58:9f:2d:34:ec:fe:e6:29:5d:61:ec:ec:fd:
14:87:7d:37:2d:70:cb:61:0a:13:bd:69:d8:2d:8e:51:25:b8:
6f:f4:61:e0:8f:b7:01:54:db:d0:cf:2e:5d:da:99:4f:97:35:
2f:c3:06:e6:e1:42:f7:05:2b:7d:68:3c:2c:e6:31:7d:80:bc:
55:9e:28:f2:16:da:c1:f1:4e:6e:cc:66:85:76:c2:93:2b:f7:
f7:07:df:b0:07:0e:68:2e:dd:6f:02:d2:46:36:98:dc:cc:21:
3f:f2:ea:02:af:c2:61:a6:c0:25:a1:39:6e:ee:e1:e8:36:f2:
e4:5d:8a:d4:b8:a6:b2:a9:f1:07:e6:17:9e:12:18:e7:4f:3a:
bc:49:a9:4f:12:82:ed:99:bb:1e:0b:bb:ea:a2:89:01:f7:d6:
40:5f:47:e4:51:ea:c2:e1:d1:94:83:c4:84:41:e6:bb:02:04:
2a:02:35:3a:d3:60:8a:90:86:8e:ee:95:bd:b0:ea:ca:2c:fd:
ff:24:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:19 2025 by rpki-client