Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa
File: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (raw, json)
Hash identifier: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=
Subject key identifier: 56:6D:C5:65:CC:32:37:94:31:12:28:BF:B2:CC:5B:FB:36:B9:16:49
Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial: 0194F4DA1D9472EA39FF3906F215F4731989
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa
Signing time: Tue 11 Feb 2025 11:52:02 +0000
ROA not before: Tue 11 Feb 2025 11:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 185.241.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:da:1d:94:72:ea:39:ff:39:06:f2:15:f4:73:19:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Validity
Not Before: Feb 11 11:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=566dc565cc323794311228bfb2cc5bfb36b91649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:67:64:fb:ec:f2:5f:ba:61:d0:8b:c3:22:
6a:90:b9:ab:66:db:ff:f7:c6:af:75:fe:e9:b2:61:
fc:56:ef:ee:10:0e:e0:e5:cf:93:f6:61:76:cf:b4:
5b:16:6f:3a:50:8f:fb:d2:a0:74:4c:de:94:4c:aa:
6e:6b:97:99:11:aa:8b:06:64:21:50:54:60:92:ef:
9f:77:bc:55:ce:06:39:22:c8:31:15:b3:d6:ec:96:
58:f3:8d:18:eb:ac:87:e5:18:5d:c1:12:ca:26:1d:
7e:1f:87:76:2d:4c:b7:52:e5:08:3d:bf:50:2e:49:
86:fd:ad:34:0c:10:5a:84:28:f7:05:ca:35:9b:6e:
72:4c:f5:f2:fe:1a:cd:a5:4a:7b:08:b8:cb:da:85:
59:17:25:ad:64:a6:17:27:7e:b8:e4:9a:14:61:77:
16:63:21:33:b8:61:29:4b:23:41:6c:95:55:32:df:
2f:69:21:e8:61:63:5c:3f:a8:a9:17:c7:76:6f:03:
56:d5:fe:97:7a:02:ee:19:39:77:3c:3a:f2:49:23:
5f:4d:44:88:ba:d0:7d:b5:5b:2c:dc:c8:e6:59:bb:
7a:9d:f7:c3:22:d8:b8:f0:31:9b:92:94:dc:f8:35:
a0:81:70:4e:d9:c7:6f:33:9f:c1:41:3c:d8:e3:0a:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6D:C5:65:CC:32:37:94:31:12:28:BF:B2:CC:5B:FB:36:B9:16:49
X509v3 Authority Key Identifier:
keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:af:71:20:8a:4c:20:e8:58:10:a6:f7:d2:2c:1f:44:95:e3:
88:4c:f5:c0:f6:6a:35:37:df:97:69:c2:86:04:de:7e:51:87:
c4:08:2a:e7:80:0e:c4:82:0d:92:3c:50:0c:81:25:7b:05:00:
a3:a4:6d:ba:3d:1b:dc:d7:5f:0e:58:b4:4b:60:b9:1a:10:bd:
50:c3:81:f1:b1:bd:68:d0:a3:57:36:53:b2:53:1c:7c:fe:50:
d8:d7:68:93:0a:65:65:09:c2:b3:12:8f:fc:34:11:06:6a:43:
ed:b8:bc:59:f5:d5:56:d7:fe:17:a2:5f:19:59:e2:fa:5c:8d:
d8:74:d2:7f:9a:ba:42:b3:39:ea:4b:3d:8b:7d:d4:4d:a5:28:
70:aa:47:91:18:3c:52:4c:ef:e6:b2:b1:ec:78:d7:54:54:7f:
0a:e9:4a:28:1d:0a:fd:67:aa:03:d6:b2:9c:96:c5:32:ef:c8:
cb:90:53:9a:65:48:db:bb:31:ad:51:cb:78:06:dd:35:85:3b:
81:02:70:e9:39:ef:4c:ca:ef:bd:e4:14:dd:3f:8b:f5:4d:3c:
fb:3f:24:37:e1:d7:77:1a:ec:1b:ae:a2:f7:f6:a3:9a:f5:1f:
d1:de:38:88:85:b2:46:77:6d:c4:ab:37:46:2d:c9:37:51:5a:
54:82:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:17 2025 by rpki-client