Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/FNBtDziAIANjYCRYc4CVRy1nJyc.roa
File: FNBtDziAIANjYCRYc4CVRy1nJyc.roa (raw, json)
Hash identifier: NocSr/8xiJz7zrZGhIxvMcAwGrGm7wl9mzw5JTfj4Y0=
Subject key identifier: 14:D0:6D:0F:38:80:20:03:63:60:24:58:73:80:95:47:2D:67:27:27
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D60C2E8178794FDFAAE17956B799CE
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/FNBtDziAIANjYCRYc4CVRy1nJyc.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31017
IP address blocks: 86.104.128.0/22 maxlen: 22
89.43.136.0/22 maxlen: 22
2a05:b680:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0c:2e:81:78:79:4f:df:aa:e1:79:56:b7:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d06d0f3880200363602458738095472d672727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:39:b4:5d:84:68:8b:6d:ea:37:6b:6f:84:
4f:9b:51:99:3a:14:30:05:7b:b0:7b:30:66:4e:79:
9e:63:b2:90:7b:02:97:4e:87:94:e5:6e:17:59:81:
17:a4:09:73:dc:d2:87:a4:a5:90:f2:12:38:b3:e6:
43:bd:d2:74:30:ed:a6:a9:8c:cf:fb:d3:57:55:6c:
93:2a:d6:a9:2b:2a:84:f2:a3:78:c2:64:48:f7:c9:
1a:cc:25:2a:f5:7d:41:31:33:1a:55:b0:08:30:27:
57:75:ce:f9:86:3e:3d:2e:ba:aa:9f:1b:ee:a7:f5:
7d:40:a3:ea:98:a1:99:6d:15:90:ea:c9:e2:c0:8a:
59:cf:e5:8c:ad:18:43:7b:dd:90:a0:b4:72:cc:82:
c3:98:1b:03:89:61:33:3d:23:49:40:fc:3e:55:dd:
33:d0:c2:8c:4d:df:95:a3:8e:87:40:11:ed:d3:7e:
2e:59:d2:52:80:66:96:42:7c:a7:19:a5:73:2b:23:
3a:a8:b4:95:63:55:ea:80:9d:d3:82:8c:9a:61:02:
06:b5:44:01:7a:00:7c:7a:99:91:8b:64:ce:fd:4b:
b8:1a:e5:a4:dd:42:13:d1:45:8d:bd:a6:44:08:47:
f3:80:f3:5d:47:72:55:23:6a:2b:5c:08:4f:05:66:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:6D:0F:38:80:20:03:63:60:24:58:73:80:95:47:2D:67:27:27
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/FNBtDziAIANjYCRYc4CVRy1nJyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.128.0/22
89.43.136.0/22
IPv6:
2a05:b680:6::/48
Signature Algorithm: sha256WithRSAEncryption
93:3a:40:e7:df:e3:2e:11:d5:00:ef:3c:cc:36:cb:13:43:39:
67:4f:16:50:67:d7:26:e1:cb:27:ad:71:39:57:4c:b9:6f:ac:
9a:bf:e4:de:e3:17:d2:e1:9f:e2:08:dd:1d:c4:b8:a0:09:9d:
84:48:a4:b2:87:8c:50:42:1f:2a:c6:cb:dc:6e:4e:3d:b3:a6:
4a:a9:2f:72:21:7c:dd:d0:dd:f4:b2:3f:97:fe:95:f2:a1:13:
74:d9:23:12:7e:df:40:4c:cd:14:89:e3:91:e1:98:0f:09:42:
99:33:f7:78:10:d5:52:b3:35:6b:bd:c6:b9:a6:b6:22:01:5a:
19:2d:87:9e:19:ee:31:47:3d:48:a7:f2:a7:59:94:24:fa:80:
ee:f9:65:96:6d:10:dd:86:aa:c9:b4:62:62:a9:55:a3:34:a4:
e4:c8:75:a1:f4:a6:54:f5:37:e7:bb:35:dc:61:f2:42:b9:ab:
c4:77:2b:47:a9:82:c4:21:6a:ff:80:df:18:11:76:31:55:a3:
b4:92:96:2b:86:c8:8a:72:9c:e3:d5:e8:e4:4c:a4:79:19:d4:
16:4f:37:e0:56:c6:fa:ce:40:e0:c7:1a:5d:ba:29:d3:25:57:
b0:a1:a2:48:ad:41:23:7b:b4:e4:b3:c4:8a:e1:9b:1e:be:cc:
55:0e:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:52 2025 by rpki-client