Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa
File: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (raw, json)
Hash identifier: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=
Subject key identifier: 17:19:9C:BB:54:22:D2:78:6C:64:E2:31:56:43:4F:B9:EA:A1:52:5E
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421442DA4A5D9C8BDCDE4AFA3A033945C
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205403
IP address blocks: 145.14.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:a4:a5:d9:c8:bd:cd:e4:af:a3:a0:33:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17199cbb5422d2786c64e23156434fb9eaa1525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:dd:a4:9b:a2:45:b8:d2:2b:fe:ee:d2:25:
cf:e4:45:3c:b4:f7:4e:02:c4:2c:52:26:88:2e:a2:
d7:40:13:23:48:04:af:8e:52:6b:76:c2:7c:95:bc:
6b:a1:89:f3:78:f6:b6:ac:95:a1:93:81:58:bd:29:
e4:13:c1:8f:bc:83:16:13:dd:64:d8:6c:6b:bb:59:
6b:89:4b:12:37:46:2c:29:a1:c7:63:5e:25:a9:87:
4c:89:1c:c2:58:e8:7f:04:34:3c:b4:11:c4:3d:3b:
7f:5a:56:38:1f:ed:ce:5a:b8:bb:38:d4:6f:89:83:
f9:fd:c1:51:72:ce:88:ef:ea:6d:d2:c1:cd:e6:14:
68:01:2b:2b:60:db:fd:5b:61:6e:8b:94:7c:df:5f:
ef:79:69:b1:c4:52:b8:f6:fa:bc:97:83:58:bd:84:
50:97:8f:e3:59:b1:91:d6:75:ce:88:64:f3:67:e8:
65:89:8d:7b:ea:d0:ce:c0:8f:f2:7c:48:72:d1:02:
5b:0f:65:d7:c1:31:0a:8d:b2:9d:96:a7:e8:55:a4:
17:f3:e0:d6:ff:b4:46:78:29:37:4f:a7:1a:1d:ae:
f5:d5:f0:e6:22:8b:91:03:69:f4:5a:5d:43:71:d6:
93:40:6d:48:65:0d:92:7f:50:48:6f:15:7c:7d:52:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:19:9C:BB:54:22:D2:78:6C:64:E2:31:56:43:4F:B9:EA:A1:52:5E
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.6.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2e:45:a1:6c:31:b2:18:50:6f:8b:7a:fc:7c:73:8d:f4:6d:
7e:2e:20:51:ed:14:a4:f5:22:cf:5f:78:0f:29:98:64:f4:8f:
de:bd:8b:13:fb:a3:46:29:46:36:2c:76:25:f6:59:a0:e0:4a:
e3:2b:9b:ca:8a:e0:68:4c:4e:da:c2:40:c8:df:f9:82:46:b3:
80:38:6d:cb:d2:18:f8:83:b7:aa:ce:04:08:98:ed:5c:27:e2:
e1:34:0a:d7:d4:6d:82:e5:20:df:1d:78:54:f6:ca:9f:48:23:
31:cd:32:51:ae:46:f3:f7:96:00:77:2c:61:41:34:f5:b9:b6:
8d:f8:a8:21:31:ac:fb:19:79:6b:3b:f4:58:d6:f2:b0:92:a7:
91:c0:42:9f:18:5e:a9:ad:6c:98:45:49:fd:2f:31:e3:83:3e:
32:4b:36:79:32:ed:cc:e9:af:50:d9:1a:ac:ea:b3:73:29:15:
b6:3e:63:bb:db:a3:82:85:4e:7d:20:be:5d:85:06:23:73:32:
d7:68:2d:e5:10:55:ae:7e:e3:6e:41:cd:2a:fe:b7:dc:e9:3a:
38:e6:92:5b:4d:8e:93:f8:8f:8c:8d:0b:54:7d:d8:f0:f6:e1:
d7:ed:21:49:33:23:f4:48:59:67:7a:96:1e:5f:5f:77:bb:15:
05:32:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:34 2025 by rpki-client