Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/_FvcWqpPnC67dcRfr6oFtjfSTSI.roa
File: _FvcWqpPnC67dcRfr6oFtjfSTSI.roa (raw, json)
Hash identifier: +hitYXTcub11ILRa+IzUS/24W/KPdl6P9pAgKvtGoaI=
Subject key identifier: FC:5B:DC:5A:AA:4F:9C:2E:BB:75:C4:5F:AF:AA:05:B6:37:D2:4D:22
Certificate issuer: /CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Certificate serial: 01833C855A91757D2F2574C726922F12D396
Authority key identifier: 6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/_FvcWqpPnC67dcRfr6oFtjfSTSI.roa
Signing time: Wed 14 Sep 2022 15:01:55 +0000
ROA not before: Wed 14 Sep 2022 15:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197412
IP address blocks: 185.230.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:85:5a:91:75:7d:2f:25:74:c7:26:92:2f:12:d3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec946cb4f9f8fb43a6d8feecfc27c1c213b1905
Validity
Not Before: Sep 14 15:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc5bdc5aaa4f9c2ebb75c45fafaa05b637d24d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:9b:ca:61:24:d7:c2:ab:cf:05:d3:76:f4:
67:ec:32:9f:81:ff:ab:b5:15:d6:77:9d:0e:5a:0a:
82:0a:6c:cd:56:c1:24:ae:72:57:67:9b:2d:da:fe:
81:c2:a3:65:b7:3a:87:5d:7d:65:74:b6:01:09:61:
fc:18:af:d1:55:5c:88:89:ef:00:c7:cf:04:e4:6d:
63:d0:40:68:e3:d1:43:93:59:77:ad:f5:ba:8e:df:
db:2d:9d:a2:71:82:ac:56:3b:2a:2f:7f:ac:63:d0:
5f:48:16:24:11:64:18:dc:73:d7:e8:fe:cc:9d:2c:
8d:4c:43:13:c5:bf:5c:37:14:6f:f9:6e:f2:18:9a:
60:4b:ff:cb:39:81:5a:9a:b8:f8:cd:c4:3c:47:33:
5b:22:16:e0:d5:d6:78:ca:29:f7:4a:08:f9:d2:14:
4a:e7:b8:e9:d5:36:94:bf:84:7e:75:60:57:d4:b8:
75:64:03:c7:96:21:76:30:cc:39:0c:a4:f9:c6:c9:
c6:2e:a1:6c:e3:c3:15:28:d4:29:b4:b4:23:68:32:
d0:2d:1f:c2:9e:78:d3:3e:57:88:e8:d7:fe:f6:8f:
fd:94:55:c0:74:57:02:6c:94:b0:f8:c3:fd:49:30:
a8:7b:6d:83:a4:7b:6e:b2:13:16:50:07:82:37:d5:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:DC:5A:AA:4F:9C:2E:BB:75:C4:5F:AF:AA:05:B6:37:D2:4D:22
X509v3 Authority Key Identifier:
keyid:6E:C9:46:CB:4F:9F:8F:B4:3A:6D:8F:EE:CF:C2:7C:1C:21:3B:19:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bslGy0-fj7Q6bY_uz8J8HCE7GQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/_FvcWqpPnC67dcRfr6oFtjfSTSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e962bb-6e43-43d8-9040-3e8f108163f0/1/bslGy0-fj7Q6bY_uz8J8HCE7GQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.172.0/22
Signature Algorithm: sha256WithRSAEncryption
54:09:a4:e2:48:c3:68:9f:4c:95:fa:d9:f2:84:8d:55:e9:d6:
00:ae:c7:69:01:97:b2:f7:9a:81:79:01:c9:7b:c3:ef:8a:ba:
10:2e:86:ec:96:76:b6:9e:17:8f:aa:2d:5a:4b:72:ef:7b:eb:
0f:a2:d2:91:2f:21:fc:da:11:8e:72:16:0b:6e:7b:62:41:1f:
c0:39:70:68:87:47:f9:0e:fd:2a:dc:97:16:80:5c:cf:ff:93:
ed:46:0e:63:60:c2:d5:57:6a:13:b9:42:fa:44:95:e4:e5:d6:
3a:10:e8:4f:d1:3b:d0:4a:6c:26:9a:47:e8:cf:a7:d8:41:45:
21:52:a1:04:fc:c1:96:06:33:04:34:77:60:15:b8:5e:50:3d:
16:64:1c:3b:f0:72:1d:5d:6e:f8:ee:02:d6:92:27:fd:a4:a3:
1f:5a:e4:41:9f:08:cf:82:39:2f:fa:d5:9e:57:6c:a0:53:06:
6d:df:89:ad:34:16:46:52:2f:96:30:bb:a7:ee:62:9e:11:2c:
2a:d2:44:cf:c7:56:c2:73:c9:cd:ae:9f:74:9c:a6:9d:45:34:
91:87:a8:fb:cf:c2:8b:9c:80:98:74:7f:5a:35:13:d7:73:3d:
39:06:a6:18:5e:a9:2b:d8:9c:86:4a:2a:85:11:d3:fd:3d:68:
15:1f:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:47 2025 by rpki-client