Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/FR3a7fbq59iIo0zAlvy5kzi1iZU.roa
File: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (raw, json)
Hash identifier: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=
Subject key identifier: 15:1D:DA:ED:F6:EA:E7:D8:88:A3:4C:C0:96:FC:B9:93:38:B5:89:95
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019423D6E59FB2BBC69E95FA27164A5432A5
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/FR3a7fbq59iIo0zAlvy5kzi1iZU.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29484
IP address blocks: 192.35.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e5:9f:b2:bb:c6:9e:95:fa:27:16:4a:54:32:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151ddaedf6eae7d888a34cc096fcb99338b58995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:6a:e3:20:5e:df:62:a1:b1:92:66:8a:3e:
d0:dd:c0:1a:d1:ec:26:a9:b7:5e:9a:a4:8d:ff:4a:
0d:1d:46:22:4e:b1:a0:79:8b:9f:72:4f:55:61:b1:
3d:76:61:99:57:c1:4a:eb:f9:e4:b1:7e:ff:fb:e2:
cf:85:d7:76:96:a0:55:52:0a:69:53:1f:b0:e9:64:
17:21:5c:82:e6:76:2b:40:c2:f8:9c:4a:ee:f7:d3:
13:2b:ae:b1:cb:83:b5:f3:ac:34:85:86:81:92:8b:
72:4a:6a:18:4c:e8:51:1c:a1:c7:d7:2b:79:27:ea:
7b:d7:b0:39:90:e8:55:f5:9a:3b:69:5e:f2:f4:f7:
3e:cf:7b:da:7c:71:7c:4a:25:67:e6:48:65:c5:9f:
da:2f:df:55:3d:27:3d:a3:12:c2:9f:48:37:7e:cd:
24:6b:6f:ba:14:0f:51:f8:61:6e:30:f8:9b:07:92:
7e:f2:3e:97:4d:35:37:98:eb:18:70:a7:20:e3:48:
fa:ad:2a:bd:84:fa:be:7c:5c:0c:7a:bf:08:40:43:
19:ca:ee:4a:76:8f:c2:40:cc:15:f8:5e:42:9c:4a:
13:90:1f:8b:08:1b:a0:e6:e8:fb:b8:7b:6b:07:20:
c5:44:a2:55:e4:da:d7:04:41:59:1a:bf:cf:3a:7b:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:DA:ED:F6:EA:E7:D8:88:A3:4C:C0:96:FC:B9:93:38:B5:89:95
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/FR3a7fbq59iIo0zAlvy5kzi1iZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.72.0/24
Signature Algorithm: sha256WithRSAEncryption
19:74:1c:12:50:b1:c1:50:c4:92:85:b3:5c:82:09:e7:98:05:
14:2b:5f:f2:8e:4f:90:3c:18:46:c1:2b:9c:25:d6:ca:06:1a:
bc:df:59:e4:10:9d:21:bf:c4:6a:85:ba:f7:8c:48:7a:56:e4:
c8:e1:4b:14:99:92:3f:20:d3:d8:f7:91:e8:b9:49:50:45:be:
4c:98:a8:71:5b:17:51:a3:56:71:02:1b:83:2f:75:cc:bf:1a:
a8:24:fb:5b:0c:40:03:42:ff:de:e6:d8:13:3d:74:59:64:47:
ae:f7:1f:10:a3:f5:04:06:ec:22:76:ff:29:b8:27:52:bf:95:
8b:70:a0:03:b1:85:2d:58:83:61:e9:8a:77:af:57:88:70:cd:
5f:63:9c:6e:3f:97:2b:c0:fa:d1:4a:a4:d5:39:eb:e5:cf:70:
17:c4:72:0a:53:90:7e:62:e6:8a:20:10:d4:21:df:f8:d5:6c:
48:ea:62:4a:82:ff:5b:8a:5d:a8:31:f1:3b:4b:d7:5f:83:8c:
4f:b8:52:76:8f:92:75:6d:f3:38:a8:04:77:1b:54:e4:fd:33:
a9:78:e2:31:00:6a:a2:a9:67:b8:da:6c:9a:03:f6:83:df:a6:
c1:e3:97:55:5c:c8:bc:4e:d3:e1:bd:75:36:d3:72:2f:80:65:
49:c8:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net