Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/r15VgfDzfklLUPcVx6y07YzgPWU.roa
File: r15VgfDzfklLUPcVx6y07YzgPWU.roa (raw, json)
Hash identifier: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=
Subject key identifier: AF:5E:55:81:F0:F3:7E:49:4B:50:F7:15:C7:AC:B4:ED:8C:E0:3D:65
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019425FD81C54732C48CC928051010DE4D23
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/r15VgfDzfklLUPcVx6y07YzgPWU.roa
Signing time: Thu 02 Jan 2025 07:49:18 +0000
ROA not before: Thu 02 Jan 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8414
IP address blocks: 156.106.0.0/16 maxlen: 24
193.5.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:81:c5:47:32:c4:8c:c9:28:05:10:10:de:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Jan 2 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af5e5581f0f37e494b50f715c7acb4ed8ce03d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:ad:a2:c5:65:f0:e0:6b:96:f7:2e:26:82:
6f:2b:f0:47:4b:c8:27:ab:d7:8f:94:29:0b:d5:48:
c1:5d:36:87:54:69:8c:0d:a0:63:2d:f1:e8:f0:9a:
29:27:1b:b2:77:7f:cf:11:6d:ba:98:f6:68:31:b3:
17:80:74:0f:ed:0f:55:55:b9:fe:6d:f7:19:05:c6:
f8:9b:f6:bd:16:6d:d2:dd:7b:21:0d:77:e1:c7:a8:
0c:b4:e5:2d:75:16:f1:46:3c:15:c9:a1:0a:8d:16:
f7:46:67:e7:1a:eb:54:d1:8d:b8:55:dc:5d:30:06:
b6:10:11:ca:44:d6:7b:2b:13:bc:6e:6f:01:69:d0:
91:92:16:48:23:8c:ca:72:54:61:7c:c6:06:1d:3b:
02:4d:46:54:a0:7f:02:e1:a6:4d:1d:6e:17:d0:7a:
44:cd:b8:89:94:4b:7f:f6:e9:11:07:ed:85:a8:46:
68:60:16:37:30:0d:2d:35:52:ec:e9:89:94:0d:2c:
44:cc:28:62:a8:35:4c:23:3e:3a:17:bc:39:05:64:
46:11:f6:5b:5b:22:02:e7:db:6f:b5:18:45:be:36:
22:bf:9b:a1:c7:1e:c6:52:f0:db:22:9b:88:17:a0:
2c:43:17:4d:2b:8a:ce:a3:c5:e9:de:96:aa:b0:dc:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5E:55:81:F0:F3:7E:49:4B:50:F7:15:C7:AC:B4:ED:8C:E0:3D:65
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/r15VgfDzfklLUPcVx6y07YzgPWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.106.0.0/16
193.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9f:a8:00:39:e3:f3:31:0b:e3:19:7d:be:ac:c8:55:45:f5:
46:37:fc:06:41:30:ea:c1:fc:6f:f4:d4:d6:c1:e3:b9:a6:ec:
9a:aa:92:35:fb:ff:be:7b:6d:20:ac:45:8f:79:a4:4b:44:07:
72:12:ab:4d:d5:ce:05:18:80:04:01:9e:7a:a3:90:86:ff:da:
9f:37:86:e3:4e:90:de:70:ca:e9:de:82:42:fb:45:09:78:49:
a1:5f:f5:e8:19:e2:e8:56:f3:f5:77:2f:bb:f1:4c:c4:9c:b2:
b7:c5:ff:21:25:57:53:21:8c:47:0a:6f:3c:18:42:2c:8a:31:
86:66:5a:a2:d2:f6:08:a0:c0:21:47:b8:a6:f2:6f:34:e8:10:
fa:4d:7f:b1:30:4c:08:69:32:db:b4:ea:f6:8e:d5:e7:33:94:
7d:bc:22:76:54:8b:93:7b:0c:d5:95:db:77:55:d8:2e:6a:70:
49:6d:19:00:cf:3d:70:a7:9e:bf:a0:f1:79:0d:67:31:58:94:
65:9a:0c:b9:ad:1a:64:e3:de:b9:65:a3:9c:e2:76:9b:04:db:
d2:cd:b5:6c:4a:54:ef:80:f2:bd:d8:67:ee:f6:5a:84:69:ef:
61:ee:93:05:f8:47:a8:09:68:a7:ce:f7:43:0d:46:bc:b8:22:
2e:fc:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:09 2025 by rpki-client