Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FWiK_OcwCuAu4nKwsfSxqkRXf6A.roa
File: FWiK_OcwCuAu4nKwsfSxqkRXf6A.roa (raw, json)
Hash identifier: 0fJcv2R5/ayPhu89bt3t+P9uZ7+txsoZWx91Tj0PQr8=
Subject key identifier: 15:68:8A:FC:E7:30:0A:E0:2E:E2:72:B0:B1:F4:B1:AA:44:57:7F:A0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420684BAC8D91B4E5D7435DB5C98CE2CF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FWiK_OcwCuAu4nKwsfSxqkRXf6A.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137263
IP address blocks: 193.233.194.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4b:ac:8d:91:b4:e5:d7:43:5d:b5:c9:8c:e2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15688afce7300ae02ee272b0b1f4b1aa44577fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:df:14:0e:75:5c:e6:80:47:74:66:12:3c:
af:00:b0:3a:3f:38:f0:17:bc:10:f0:dd:71:4d:16:
32:c8:57:aa:df:7e:64:2b:4b:0a:19:57:be:a2:a5:
ad:69:3f:31:8c:fd:34:27:45:39:95:37:ed:0f:dd:
f4:87:6a:a9:a8:81:da:15:4d:75:bf:c4:36:d9:80:
39:46:7b:a5:6a:f9:b8:0d:43:2f:88:75:77:4a:34:
b6:90:d8:8a:e2:9d:0c:58:a9:83:b7:d5:5a:c4:7e:
b7:b9:5d:d5:e9:95:27:1a:26:c1:4e:16:6d:93:c1:
02:22:36:ae:0f:e6:82:ae:f9:4a:7e:70:3d:68:8a:
19:ab:bd:33:ab:10:47:5e:66:22:96:19:de:12:a4:
16:bb:0a:0e:39:dc:09:a8:33:c3:e3:6b:53:bc:25:
00:12:b7:cc:fe:a8:8d:65:cc:81:c8:21:47:01:41:
33:3e:2a:f3:f2:1c:94:09:23:3a:3a:aa:71:90:d5:
dc:a2:d1:15:b4:15:5f:d1:5f:f0:90:bc:d5:4f:80:
5f:1b:32:8c:a0:4c:61:1e:db:bc:5d:38:94:e8:05:
a7:85:48:e5:ba:89:b9:ae:f1:3d:e2:70:f2:63:0d:
b5:b3:6d:c6:3a:9a:59:f9:86:66:7d:39:b2:d9:e4:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:8A:FC:E7:30:0A:E0:2E:E2:72:B0:B1:F4:B1:AA:44:57:7F:A0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FWiK_OcwCuAu4nKwsfSxqkRXf6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.194.0/23
Signature Algorithm: sha256WithRSAEncryption
70:02:05:76:1d:27:ae:0d:3b:d5:b1:3d:ea:1f:c0:dc:7a:4b:
93:e3:db:0a:9c:41:23:ea:5f:be:a4:6a:06:00:9a:e5:13:79:
42:38:ef:81:86:30:ef:35:e7:c7:d9:e6:b8:e5:a0:fa:ef:a9:
64:cc:a6:e7:64:ff:e6:4c:66:8d:0e:22:13:b3:e4:86:d9:72:
93:a4:89:c0:52:69:0b:5f:14:72:7e:70:b6:07:ca:b0:1c:33:
66:1f:bc:5b:0c:4d:d3:8b:75:d0:5c:05:2c:43:5d:d9:f5:95:
b5:97:8d:45:87:c2:33:df:21:61:1d:88:0c:67:51:da:1a:18:
62:10:27:60:12:ec:3a:4b:16:4f:40:5e:69:ee:bc:19:8d:bd:
4f:a6:d1:af:cf:08:d1:79:f9:c8:c2:de:1f:22:53:0c:01:6c:
4f:62:59:19:5e:f0:5e:28:20:f4:62:35:d7:71:7b:8f:2e:b2:
34:88:f4:20:c7:6f:7c:23:b5:e3:d7:28:5b:2e:6b:b0:f9:d5:
69:e4:52:fc:8a:86:f8:9f:5c:ee:8d:62:03:c2:9e:f6:59:c0:
fb:ea:39:02:82:44:4e:f6:02:90:a2:7f:4d:f6:cc:de:f0:3c:
2d:c6:4b:20:d8:07:65:40:5e:e2:a3:eb:d6:f0:9d:ad:95:82:
85:42:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:30:09 2025 by rpki-client