Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa
File: f6hUC1SdvEQvD-1dlICMK-jhUMk.roa (raw, json)
Hash identifier: ehi0yhNtopafLVZDPQKnhjpb1fSXORmWQOJI8GnSkqw=
Subject key identifier: 7F:A8:54:0B:54:9D:BC:44:2F:0F:ED:5D:94:80:8C:2B:E8:E1:50:C9
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 022F14E5
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa
Signing time: Fri 01 Apr 2022 10:13:31 +0000
ROA not before: Fri 01 Apr 2022 10:13:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 83.171.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36639973 (0x22f14e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Apr 1 10:13:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fa8540b549dbc442f0fed5d94808c2be8e150c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:b0:56:5f:82:23:92:00:04:1f:72:a0:48:
1e:af:75:22:e7:8b:fa:1c:fd:82:b3:13:5b:30:e3:
07:c8:4e:55:9d:b5:83:b3:63:ef:f1:df:34:1c:1e:
f6:c3:ca:9d:2b:73:c3:27:2c:1a:89:73:a5:30:48:
4b:23:b6:c3:c3:98:db:71:53:a8:86:4a:d0:06:6f:
d8:63:9c:59:93:80:30:c7:34:3d:49:49:d2:84:c3:
5c:1f:2b:cd:de:83:98:1c:a6:b9:24:00:c8:ac:1f:
c3:01:a9:8e:61:7c:32:ae:21:e3:77:75:19:68:c8:
6a:28:8c:3d:c6:42:0b:df:f8:91:de:35:01:a0:46:
f4:ef:aa:88:e7:84:15:b1:d0:8e:f4:a7:1b:56:13:
b5:32:25:3e:5e:38:96:0a:66:fa:89:20:63:41:c6:
0c:c5:0c:36:09:52:78:aa:4c:ee:6f:3b:5b:40:5a:
d3:e5:4e:42:ac:20:55:01:ab:ee:00:f2:13:c7:bd:
cf:5a:2e:75:ca:85:62:7f:0a:7b:c9:a0:ea:b9:13:
97:78:31:8a:29:e1:54:1d:75:36:e8:9a:1d:f2:40:
21:e5:58:9e:1d:65:81:84:89:6a:92:ab:22:5e:5e:
6c:aa:1e:c1:1d:b3:a0:6e:89:23:4a:3e:e4:1a:00:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:54:0B:54:9D:BC:44:2F:0F:ED:5D:94:80:8C:2B:E8:E1:50:C9
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:6b:2f:d4:bf:ef:ad:80:86:2f:a6:2e:99:49:8b:22:f7:34:
93:d5:97:55:46:fe:54:b2:8d:80:08:bc:e5:76:28:d7:b4:58:
e9:7e:df:14:90:e4:66:82:31:45:6c:30:2c:be:e1:bb:46:b9:
68:d4:9e:ee:1a:80:10:89:33:bd:2d:19:94:15:53:bb:b3:fe:
f1:1b:eb:bb:1e:d7:07:95:3b:f3:e2:34:26:ae:a1:9e:1a:7e:
06:39:6d:03:10:89:f2:ba:a3:2b:08:a4:e3:4f:ea:12:60:49:
59:a4:24:d5:2f:72:dd:0b:00:5c:19:b8:9b:12:5c:92:6b:12:
73:de:f7:65:d9:cb:86:38:d3:70:19:fb:ba:25:9b:8d:92:82:
6f:41:a6:15:a0:4c:9d:03:f3:d9:28:3c:2a:65:b7:8c:3d:f1:
26:36:73:38:bf:6b:89:06:9f:ed:3b:37:6a:5f:d5:d2:24:63:
b6:58:c7:ed:e6:eb:bd:64:50:31:a2:56:ba:73:8e:d8:26:db:
2c:16:00:57:d0:5a:ac:47:75:cb:bc:3c:d0:d4:a1:7b:d8:f0:
10:a8:8d:94:e7:60:79:0e:7b:12:60:d0:ec:a0:83:53:22:34:
d8:a1:94:eb:61:56:85:5b:cb:c7:fd:d4:0e:13:0b:70:23:d4:
07:49:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:34:56 2025 by rpki-client