Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa
File: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (raw, json)
Hash identifier: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=
Subject key identifier: 7F:14:8F:4E:CF:CA:AD:92:9A:F8:D9:42:6C:4E:AE:E2:C9:AA:E8:84
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 019420D59BAF25E050D4625ADE6A2AE8194E
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 193.93.64.0/24 maxlen: 24
193.93.65.0/24 maxlen: 24
193.93.66.0/24 maxlen: 24
193.93.67.0/24 maxlen: 24
2001:678:890::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9b:af:25:e0:50:d4:62:5a:de:6a:2a:e8:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f148f4ecfcaad929af8d9426c4eaee2c9aae884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:c3:85:3e:a7:2c:e0:cd:47:3a:aa:96:29:
4b:48:6c:d4:a5:f3:0f:04:29:aa:1b:99:4e:3a:0a:
62:57:38:9c:47:e0:aa:2f:6f:b7:c5:9e:5e:9c:d5:
2e:ff:55:38:82:9f:15:fe:a4:3f:c2:78:bd:04:2d:
0c:50:c0:49:a3:d1:44:50:1a:f8:74:62:e0:f1:62:
c3:9f:d7:2a:5b:e3:07:07:57:94:e3:d4:99:68:43:
45:ab:17:39:a4:fe:4f:a7:22:89:3f:5a:bc:35:dc:
93:ef:e3:36:6a:41:50:7e:45:04:d6:72:b1:ed:5b:
14:e1:10:19:1c:8d:32:5e:66:ce:36:a1:ac:d3:91:
40:c1:13:00:e5:5a:3b:be:01:35:ab:07:ae:35:dc:
c5:70:e5:29:ee:84:37:ee:7f:ca:99:d6:ee:cf:90:
30:2d:42:9d:91:86:69:86:f4:07:bd:2f:7c:b8:dd:
ca:13:08:ab:57:2b:0d:91:33:2c:55:07:cb:ee:6d:
9f:c2:17:ee:29:de:c4:c6:63:3d:38:7d:c0:a4:5c:
99:c3:39:fb:23:d9:7d:61:0d:f3:b7:5b:27:ef:63:
4b:8d:45:9f:3b:46:2a:26:61:b3:36:93:00:d3:39:
a8:77:69:4c:4a:50:34:96:2b:99:5c:2b:1c:9a:d9:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:8F:4E:CF:CA:AD:92:9A:F8:D9:42:6C:4E:AE:E2:C9:AA:E8:84
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
IPv6:
2001:678:890::/48
Signature Algorithm: sha256WithRSAEncryption
59:05:3f:26:fa:2c:b9:d4:d9:cf:5d:ec:98:66:c8:70:67:0b:
f8:d5:b5:3d:c1:2c:87:fd:39:02:dc:46:d7:5f:4d:d4:4d:73:
c1:d6:b9:a9:48:41:f6:6f:20:98:6c:f5:08:6d:92:60:73:b5:
9c:8e:65:e7:a0:26:99:42:21:30:40:6b:14:83:6c:f0:6f:2b:
06:75:48:26:17:19:ca:e8:a0:a9:af:9a:cc:bd:e7:f3:ab:5c:
17:a1:58:9d:b8:ca:36:14:11:bc:01:f0:11:cb:29:5e:0b:fa:
41:f2:ea:6a:ba:d6:07:b5:7a:2b:47:0b:39:31:04:80:24:24:
68:eb:40:62:d8:d7:51:e3:44:99:89:26:dd:9a:5f:6d:ef:e7:
ab:de:c5:6a:b7:29:c7:56:dc:13:54:2e:e7:6f:6a:f1:fb:26:
34:51:56:5b:f1:37:28:d7:c6:57:ad:8d:e6:16:4a:18:3a:0f:
4a:3f:52:84:a5:58:c4:31:f9:4f:f4:28:9e:95:a4:bd:dd:ff:
de:0f:24:3e:07:48:85:95:42:2b:3e:99:d9:99:c5:6f:a8:ce:
8b:2b:c9:cb:8f:95:3b:31:fd:e0:19:13:40:c3:43:99:03:c6:
7c:bb:61:a9:63:03:28:78:8f:7c:ce:5b:02:90:f2:5b:90:22:
a5:ee:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:09:44 2025 by rpki-client