Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/flrC_8zXbr01pJXgtmy__huZXOA.roa
File: flrC_8zXbr01pJXgtmy__huZXOA.roa (raw, json)
Hash identifier: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=
Subject key identifier: 7E:5A:C2:FF:CC:D7:6E:BD:35:A4:95:E0:B6:6C:BF:FE:1B:99:5C:E0
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019421B259D92AFEB68925A67E0A96573699
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/flrC_8zXbr01pJXgtmy__huZXOA.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 185.126.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:59:d9:2a:fe:b6:89:25:a6:7e:0a:96:57:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5ac2ffccd76ebd35a495e0b66cbffe1b995ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:2c:f4:7d:ab:61:a2:db:17:fb:bc:26:01:
7c:cf:72:fd:73:2f:2e:7e:3a:23:ef:31:6d:7c:d7:
b3:52:1c:44:ac:38:2b:36:1c:15:3e:85:8e:3c:9b:
40:9c:2c:ff:b6:b2:59:6c:c6:96:f0:68:1f:e5:8d:
5c:81:09:f6:3d:1e:97:aa:2b:18:c8:9b:86:be:90:
c2:2a:12:7d:b5:8a:76:f0:c4:bd:9a:8b:2c:84:e6:
a9:b5:70:3c:78:75:92:38:b5:d2:fb:cc:93:9e:b3:
65:5b:42:51:6f:3c:f2:f0:47:97:01:ee:c6:39:a1:
b8:19:ce:af:78:62:c5:73:2b:f3:8c:8e:cf:e7:bd:
0d:8f:f8:1c:9f:16:b2:6c:7c:d9:e3:b4:e4:0a:7c:
19:69:f7:ea:9f:30:98:85:a4:32:87:9e:62:8a:43:
ea:5e:fe:1a:ad:be:38:65:4d:c9:32:2c:7b:63:96:
33:79:ca:4e:a1:25:d3:40:2e:c5:d6:f3:c5:73:54:
9f:a8:8d:74:58:e1:4b:59:42:a6:3d:bb:dc:10:67:
55:c8:66:c1:b1:69:73:24:a8:15:2f:c3:b5:d9:56:
97:30:a0:b9:cd:39:23:35:dc:54:e8:d5:f9:80:88:
d1:42:97:a5:eb:d7:58:54:c7:25:ae:55:7b:10:a9:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:C2:FF:CC:D7:6E:BD:35:A4:95:E0:B6:6C:BF:FE:1B:99:5C:E0
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/flrC_8zXbr01pJXgtmy__huZXOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.134.0/23
Signature Algorithm: sha256WithRSAEncryption
20:88:5c:6c:5b:e0:8f:dd:aa:0e:fc:13:20:03:b0:a7:3e:6f:
c5:f3:e0:e3:11:51:38:ed:ff:f2:32:be:b1:3e:b0:6d:69:2e:
65:64:2e:71:5a:81:ba:a8:ac:79:bf:5f:ce:eb:4e:c1:4e:6f:
65:a7:89:97:0b:a3:2d:46:c5:90:3a:04:ad:fb:22:ce:38:4d:
be:4f:f3:26:cd:b8:51:22:e1:8b:41:5c:ae:f7:e3:dd:1b:a6:
2c:ca:54:59:55:c0:85:6f:fc:65:42:6e:10:6e:ca:4d:6a:48:
25:10:d9:32:d5:af:34:14:6d:48:76:10:61:99:89:04:aa:e1:
ac:9b:ee:10:39:a7:0a:43:48:f0:b8:51:8f:8d:e1:6e:6a:aa:
5b:b6:a4:44:ee:e7:7e:51:cd:8a:53:9a:ff:4f:8e:d1:12:3b:
3a:04:a6:21:9f:74:d2:6f:17:be:63:5e:a5:3f:6b:ca:a6:f0:
6c:ef:fc:59:10:f8:33:5d:c8:58:0a:fd:1a:f5:53:de:72:47:
8b:5a:88:6c:e2:f7:c0:86:4a:39:5f:43:0b:b6:03:ad:d2:54:
a6:cc:36:7f:72:be:16:49:f1:94:d7:b6:19:3c:e4:17:2a:7a:
9f:23:0b:af:9f:c5:f5:9b:b3:80:91:8e:9d:43:d9:7f:95:4f:
26:18:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:18:17 2025 by rpki-client