Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa
File: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (raw, json)
Hash identifier: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=
Subject key identifier: 15:C3:E7:C7:D3:57:D6:41:F9:45:8A:81:46:3E:4D:27:20:AD:25:E6
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01941FFA1D3B71A8D3CD105C65370918CB62
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 178.212.92.0/24 maxlen: 24
193.37.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:3b:71:a8:d3:cd:10:5c:65:37:09:18:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c3e7c7d357d641f9458a81463e4d2720ad25e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:19:c6:7d:c5:9f:5a:25:16:96:f1:c5:f6:
4b:6c:da:70:ea:19:2e:aa:18:df:42:6e:eb:dd:2b:
c7:a2:94:5f:6e:ab:ef:d1:77:0c:87:90:8a:4e:87:
68:df:a9:dc:46:0b:67:e5:2c:f0:c0:13:c2:74:8d:
0e:a6:17:c9:f2:8c:ad:7d:11:9a:c4:5b:21:9c:aa:
c9:3a:2e:57:66:09:c9:8e:f0:eb:ec:fd:bb:93:eb:
ec:26:fa:59:dd:bb:4c:d9:07:a1:38:7c:98:34:82:
40:fb:ac:9b:ea:9e:e0:89:ca:57:da:69:d5:79:0b:
f3:58:92:6d:d7:c5:3c:ef:f8:4e:a4:9e:4c:c7:a4:
8a:57:04:8f:f9:19:b5:2c:08:55:eb:6e:15:b1:60:
d8:15:33:99:29:a6:11:25:6b:95:fe:b7:1b:d8:06:
81:17:11:68:f0:53:8f:1c:d0:e9:e2:e6:64:7b:2b:
5d:c4:9f:19:9d:f8:1a:b4:f6:f7:c1:fc:50:71:c3:
e6:af:95:02:5b:d9:84:74:0c:b4:f9:8d:70:95:2c:
d1:85:75:aa:07:2c:53:d3:4c:27:40:8b:d3:00:88:
fa:e1:44:4a:a7:08:8e:11:48:21:2e:5c:e8:a2:2c:
ad:9e:6d:de:cc:c1:4c:d8:52:9e:83:ef:f4:1f:37:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:E7:C7:D3:57:D6:41:F9:45:8A:81:46:3E:4D:27:20:AD:25:E6
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.92.0/24
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d6:5c:5e:08:14:29:a1:ef:eb:a9:8e:6b:b9:84:53:2f:f8:
ff:d3:f2:52:c4:a5:73:0a:7e:68:40:52:af:1e:c1:b5:6f:b2:
f4:e7:5c:90:13:e1:e3:70:d5:c0:04:54:32:6e:61:46:6c:a9:
36:fb:3f:22:97:46:fd:34:ea:ac:5f:48:a4:d0:0c:b6:b1:1d:
c4:43:60:2b:49:0c:78:31:7f:58:52:50:a4:0b:bc:f1:c2:33:
70:4c:a7:5a:3e:b8:30:b3:37:a3:f8:a3:0a:94:8d:71:e4:b5:
4f:52:6d:95:7c:db:b3:5f:c4:44:4e:21:7d:d9:5f:7c:e8:7c:
d5:e9:9e:5e:28:9c:0e:eb:c0:17:db:13:32:8e:c0:f5:2c:7d:
e1:77:90:6f:c2:0d:a2:14:93:92:39:31:d2:9b:84:c1:4c:a0:
ea:c4:70:e4:e6:6e:f7:a1:d5:86:94:26:8b:7e:cf:6d:28:b1:
9d:1c:25:ba:0d:79:15:5f:6c:b4:f7:01:9b:e6:fd:24:46:86:
74:70:2a:62:3f:cf:94:28:62:e2:3f:ab:45:66:40:88:6b:54:
1b:f2:06:68:89:8f:cb:0a:45:32:62:e8:4c:32:6d:d5:bc:d5:
1a:d2:eb:15:8e:e5:c4:c4:9d:3c:a6:3b:66:2b:96:83:66:2a:
b2:8f:91:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+h07cajTzRBcZTcJGMtiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl
ZGMwYTcwHhcNMjUwMTAxMDM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWMzZTdjN2QzNTdkNjQxZjk0NThhODE0NjNlNGQyNzIwYWQyNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuMZxn3Fn1olFpbxxfZLbNpw6hku
qhjfQm7r3SvHopRfbqvv0XcMh5CKTodo36ncRgtn5SzwwBPCdI0OphfJ8oytfRGa
xFshnKrJOi5XZgnJjvDr7P27k+vsJvpZ3btM2QehOHyYNIJA+6yb6p7gicpX2mnV
eQvzWJJt18U87/hOpJ5Mx6SKVwSP+Rm1LAhV624VsWDYFTOZKaYRJWuV/rcb2AaB
FxFo8FOPHNDp4uZkeytdxJ8ZnfgatPb3wfxQccPmr5UCW9mEdAy0+Y1wlSzRhXWq
ByxT00wnQIvTAIj64URKpwiOEUghLlzooiytnm3ezMFM2FKeg+/0HzfLYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBXD58fTV9ZB+UWKgUY+TScgrSXmMB8GA1UdIwQY
MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt
Y2U2OTU1Njc2MWJkLzEvRmNQbng5Tlgxa0g1UllxQlJqNU5KeUN0SmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk
LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAstRcAwQA
wSWEMA0GCSqGSIb3DQEBCwUAA4IBAQBk1lxeCBQpoe/rqY5ruYRTL/j/0/JSxKVz
Cn5oQFKvHsG1b7L051yQE+HjcNXABFQybmFGbKk2+z8il0b9NOqsX0ik0Ay2sR3E
Q2ArSQx4MX9YUlCkC7zxwjNwTKdaPrgwszej+KMKlI1x5LVPUm2VfNuzX8RETiF9
2V986HzV6Z5eKJwO68AX2xMyjsD1LH3hd5Bvwg2iFJOSOTHSm4TBTKDqxHDk5m73
odWGlCaLfs9tKLGdHCW6DXkVX2y09wGb5v0kRoZ0cCpiP8+UKGLiP6tFZkCIa1Qb
8gZoiY/LCkUyYuhMMm3VvNUa0usVjuXExJ08pjtmK5aDZiqyj5En
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:50 2025 by rpki-client