Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa
File: FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa (raw, json)
Hash identifier: 19Vo/+e85FEDOozBk9ulyjhvlWCZUEMrSObfkurwei4=
Subject key identifier: 15:5C:8E:B4:C4:A4:C3:ED:15:83:AD:80:08:C2:9C:7D:8B:45:4D:98
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 0194258F7B5021C1FED16781A6C335495CA7
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.212.127.0/24 maxlen: 24
91.238.107.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
193.138.90.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7b:50:21:c1:fe:d1:67:81:a6:c3:35:49:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155c8eb4c4a4c3ed1583ad8008c29c7d8b454d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:85:fa:fc:ae:dc:c1:8b:8a:4d:99:60:37:
bd:38:b8:58:5d:11:fa:8d:90:af:39:39:01:3a:9a:
c9:64:e4:dc:46:52:82:be:04:d8:6e:4f:69:4f:c4:
7a:2a:d0:55:c7:6e:8b:6a:07:29:df:8b:8b:c2:2d:
bd:7d:e2:ea:74:c3:55:fd:75:17:bb:6b:83:f6:75:
19:1e:c0:27:f7:e3:60:36:ba:7c:90:e2:a2:92:69:
78:38:d3:54:dc:4a:78:82:7a:6d:89:f7:b9:58:c1:
c0:91:9e:01:17:8b:f8:01:e0:f3:7e:24:9c:b6:e4:
87:f8:e4:22:48:91:39:6b:80:c6:92:05:3c:87:67:
8c:53:0b:af:bb:27:e4:25:8c:7a:ff:b6:ad:88:e5:
e6:7d:7a:3b:25:ad:e5:8c:82:e4:b1:ac:86:ac:a5:
ab:af:81:0b:d0:7b:f0:c5:1f:8a:cf:ea:c1:a3:3d:
57:4b:35:65:6b:4b:06:78:75:4d:0a:4c:9a:26:bd:
72:7e:37:d5:b2:b6:3d:f5:73:c3:52:e4:c9:2b:47:
3d:50:24:09:75:e8:89:ec:d1:fb:4b:d2:c3:f1:72:
5e:b5:cc:83:e7:b0:8d:67:e0:74:d2:56:98:78:15:
c2:3d:d9:bf:c7:5e:b4:76:ad:b4:65:76:82:d4:a1:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:8E:B4:C4:A4:C3:ED:15:83:AD:80:08:C2:9C:7D:8B:45:4D:98
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/FVyOtMSkw-0Vg62ACMKcfYtFTZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.127.0/24
91.238.107.0/24
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:93:48:c2:8a:d8:88:f8:de:66:48:a9:1e:36:e8:eb:f9:74:
bd:03:25:8d:78:4b:4d:ce:37:15:3b:f9:8b:4d:63:ae:57:0c:
d6:6a:18:6b:b9:76:86:ba:8d:5d:ad:76:f6:78:d4:89:ad:96:
52:8c:61:ff:4c:2b:e3:6c:e4:fa:d6:53:f9:85:ef:db:7d:0f:
04:20:7c:7f:b0:95:ba:6f:f7:e2:38:ac:07:05:4f:fc:47:16:
14:9b:34:66:c9:5b:e5:1b:82:c0:aa:fe:63:79:5e:5b:58:e5:
ba:7b:69:25:2d:59:68:a3:4d:51:87:e9:b0:df:cc:e9:08:17:
23:ce:56:b6:c1:e4:c0:b1:d4:9f:ed:da:90:0e:0c:8c:ed:95:
0a:17:31:5c:ef:75:9d:55:cb:24:59:d0:98:70:8f:51:32:ae:
33:7e:ac:28:90:03:46:a4:32:f3:f4:5a:2b:40:8d:f0:b6:e6:
2a:1d:47:f3:8a:c5:f6:7b:9e:a5:9d:3e:2d:c5:8a:97:e3:c4:
f1:85:a1:a7:3b:e9:fa:c5:ce:d5:69:93:a5:75:4b:25:6b:e8:
4e:72:db:85:f2:89:97:8f:a5:3a:3f:3b:bf:77:70:bd:53:4c:
03:70:2c:c3:72:bb:51:0e:83:de:29:60:f8:14:71:44:ef:7c:
78:07:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:32 2025 by rpki-client