Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/f0MAEZDCU8stwqEc7dJafJEPwgo.roa
File: f0MAEZDCU8stwqEc7dJafJEPwgo.roa (raw, json)
Hash identifier: aDArgd4hR2x7w8L5fv16L4GPahn6ETDEAqMkibLrjbw=
Subject key identifier: 7F:43:00:11:90:C2:53:CB:2D:C2:A1:1C:ED:D2:5A:7C:91:0F:C2:0A
Certificate issuer: /CN=e9d61587d6fd7c816b71014d73d397883cde2aba
Certificate serial: 018CC5DCCC9FE942BCCC581D8AFFE2EA079B
Authority key identifier: E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dYVh9b9fIFrcQFNc9OXiDzeKro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/f0MAEZDCU8stwqEc7dJafJEPwgo.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61981
IP address blocks: 185.53.4.0/22 maxlen: 22
185.53.6.0/23 maxlen: 23
2a01:bda0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cc:9f:e9:42:bc:cc:58:1d:8a:ff:e2:ea:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d61587d6fd7c816b71014d73d397883cde2aba
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f43001190c253cb2dc2a11cedd25a7c910fc20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:98:86:8f:dc:09:ce:64:2b:6b:e8:7d:21:
a7:de:73:e5:ff:0f:f5:ed:97:19:57:ef:ef:53:4e:
d0:21:4c:78:42:76:89:d7:b5:a5:4c:3b:d0:3b:3f:
5c:0f:cb:5f:c7:42:9f:ee:cb:94:b1:ba:e1:39:fc:
13:5e:07:f2:70:48:1d:6f:4f:d4:47:f0:fc:b7:02:
c1:4f:0f:dd:13:06:c9:82:d2:99:ca:55:fe:e5:66:
f8:0d:e8:ea:54:ae:d3:8f:19:b7:4a:6b:90:40:64:
52:af:c2:11:35:8d:c7:fc:a6:91:a8:2b:5c:21:71:
51:24:cb:70:63:c5:79:90:24:90:17:83:15:d1:a1:
6a:ae:f5:5b:3e:d8:9f:a7:85:2c:bd:59:32:17:2b:
63:a5:6d:f8:1d:7a:49:f2:3d:09:15:38:3c:05:b3:
6f:59:25:6c:aa:35:63:26:65:11:ee:1f:52:d8:3e:
0a:ea:76:3a:79:a3:85:cf:94:c4:b5:fe:74:86:50:
2e:cc:92:82:66:2c:52:24:15:a9:ef:64:eb:d8:89:
66:2d:a8:a2:49:ed:e1:be:32:c1:80:65:0f:8a:71:
8b:06:36:f0:7b:d9:a4:67:8e:0d:ed:07:71:5e:40:
42:24:58:21:72:66:61:64:20:63:80:aa:e5:aa:31:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:43:00:11:90:C2:53:CB:2D:C2:A1:1C:ED:D2:5A:7C:91:0F:C2:0A
X509v3 Authority Key Identifier:
keyid:E9:D6:15:87:D6:FD:7C:81:6B:71:01:4D:73:D3:97:88:3C:DE:2A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dYVh9b9fIFrcQFNc9OXiDzeKro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/f0MAEZDCU8stwqEc7dJafJEPwgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1b0ded-d592-4645-a3e1-d42f11df80cc/1/6dYVh9b9fIFrcQFNc9OXiDzeKro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.4.0/22
IPv6:
2a01:bda0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:00:4a:77:9a:88:08:d0:1e:9b:ad:71:fe:ac:c5:8a:e1:50:
44:76:46:83:e8:4e:4e:76:d2:88:b8:67:89:b9:31:36:1b:ef:
47:30:17:69:3b:a9:eb:40:02:61:73:96:44:03:f4:4c:f6:bf:
35:db:21:c7:cb:72:58:8d:df:43:7e:46:a8:8f:70:53:53:c3:
9e:4f:ca:66:dc:cf:90:63:47:8e:1d:6d:67:6e:da:9d:b9:5a:
86:a9:d7:55:5f:70:a1:f9:3d:6a:09:1c:e6:71:ea:e5:c1:62:
87:df:05:1e:85:40:c8:f4:c9:8e:90:a3:50:ce:37:d2:ba:10:
14:53:26:82:71:47:8e:44:ef:38:f1:e5:9b:1e:1e:60:5b:5f:
e9:59:6c:8e:5d:40:29:f1:88:dc:92:99:0c:e7:4b:74:bf:41:
68:d6:84:f9:27:41:03:4d:65:54:80:79:2b:b8:5f:59:d5:61:
ac:c5:c7:18:ba:48:60:4b:27:4f:39:de:dd:51:a7:6b:41:78:
9b:39:f2:47:62:3a:44:8a:8f:e0:ff:d7:7b:a4:f0:5c:ef:f1:
9d:77:59:e4:e6:60:9d:3c:7e:35:ff:ab:d6:69:ed:3a:53:60:
7e:51:7b:ec:48:d0:36:8d:57:24:1c:04:ef:e4:32:9b:4f:28:
fe:90:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:23 2025 by rpki-client