Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/_PRSgnmqbyU5eXF169zu1ptiGgM.roa
File: _PRSgnmqbyU5eXF169zu1ptiGgM.roa (raw, json)
Hash identifier: DHzCEw50QnKKwirP5Bglaw7bA5L8Cn96+BgObUXo8Do=
Subject key identifier: FC:F4:52:82:79:AA:6F:25:39:79:71:75:EB:DC:EE:D6:9B:62:1A:03
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 01955B680A62D1EE333C90307F022330793F
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/_PRSgnmqbyU5eXF169zu1ptiGgM.roa
Signing time: Mon 03 Mar 2025 09:48:19 +0000
ROA not before: Mon 03 Mar 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 62.239.0.0/16 maxlen: 16
193.113.0.0/16 maxlen: 16
217.15.64.0/20 maxlen: 20
2a00:2380::/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:68:0a:62:d1:ee:33:3c:90:30:7f:02:23:30:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Mar 3 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf4528279aa6f2539797175ebdceed69b621a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:f2:f9:2e:bf:ab:5a:96:3e:3b:8e:04:df:
e5:15:4f:1d:d1:31:98:ce:7f:6b:7f:87:b2:6a:6c:
a7:4d:38:9e:54:4c:06:c3:92:32:79:55:d8:a6:6f:
e8:0d:c1:a9:e8:ac:34:16:12:23:55:34:68:10:0e:
bc:10:25:4b:bd:ae:13:13:52:96:5b:38:a3:bf:2f:
22:42:b0:68:08:d9:ba:0f:b7:6b:67:b7:f8:a3:03:
a3:8b:12:bd:6c:bb:52:8d:47:a1:78:82:26:47:bf:
b2:92:0c:18:88:3c:16:1e:45:96:49:cc:93:1a:c4:
ae:c4:2b:d8:32:dd:b0:8a:99:ba:2a:d3:29:09:8c:
d6:70:03:75:23:31:a9:dc:a7:08:c4:fc:9c:12:05:
2e:bb:d5:a1:2d:b9:79:40:9a:b2:78:54:b5:09:d3:
51:ef:b9:e6:ec:c5:1e:f8:78:c1:5d:51:93:45:5e:
b3:36:a2:d9:ff:ef:f4:7b:59:ba:73:b1:85:fc:b2:
f0:43:98:8a:f2:a0:57:d3:c7:f7:4d:e9:72:f6:65:
23:9a:ba:83:4c:90:b7:2d:2a:1d:be:60:a0:b8:11:
32:20:e3:de:7a:34:f6:32:0d:30:36:77:9c:0e:2c:
e2:6a:a5:40:f3:44:54:b9:09:97:6a:38:9c:06:16:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:52:82:79:AA:6F:25:39:79:71:75:EB:DC:EE:D6:9B:62:1A:03
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/_PRSgnmqbyU5eXF169zu1ptiGgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.239.0.0/16
193.113.0.0/16
217.15.64.0/20
IPv6:
2a00:2380::/25
Signature Algorithm: sha256WithRSAEncryption
e8:ab:df:09:d9:e7:ba:3b:8f:a9:fd:59:2d:57:4c:f8:bb:c9:
33:05:af:a0:d3:ee:8c:ad:4b:74:fa:2c:e5:2b:ec:ca:90:5a:
30:33:af:af:eb:38:23:75:b1:16:50:7f:da:e1:17:5d:9e:c9:
06:9e:63:d8:b1:31:14:8a:d3:e5:4c:30:10:33:fc:d8:db:cd:
1e:01:d2:97:4e:c0:35:f8:40:a2:48:1f:d3:3e:f1:1c:03:60:
83:83:72:2d:f8:6b:72:12:94:eb:58:e8:83:21:8d:42:91:3f:
e9:d0:48:57:49:a8:4b:84:80:6e:6b:07:41:6b:72:b3:8e:91:
44:09:76:1e:7a:f8:5a:35:c0:5d:7f:ca:f8:5c:b8:16:69:a7:
ce:2a:94:a4:e9:1c:68:4a:44:68:c7:eb:58:c0:fe:c6:9b:39:
69:ed:21:5a:0f:73:3a:c1:40:6e:e0:0e:dd:16:f9:d8:ed:3b:
ab:1d:cd:c9:66:98:a1:e0:e0:3e:c1:fa:92:91:88:0a:ae:79:
b5:49:01:a2:16:a9:31:15:be:76:63:80:db:98:fc:0d:21:fd:
ce:dc:2e:1f:0e:7f:4e:90:b2:a7:84:d9:16:b4:bc:59:86:5c:
19:26:96:6a:02:db:6f:45:55:31:5c:5c:ed:a3:0b:c4:87:64:
41:74:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:45 2025 by rpki-client