Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa
File: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (raw, json)
Hash identifier: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=
Subject key identifier: 14:E4:CF:87:D0:4F:A0:96:E3:12:F3:BF:5E:A6:30:D0:47:23:F3:0A
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0194266C420A4C1259FED5230E9AC90C239E
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.137.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:42:0a:4c:12:59:fe:d5:23:0e:9a:c9:0c:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14e4cf87d04fa096e312f3bf5ea630d04723f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:7f:2e:ec:d7:9e:d3:49:0d:b4:48:c3:e8:
a0:1b:6c:ad:5a:44:22:a4:69:54:77:7b:60:de:d4:
3a:15:24:a6:cb:8a:c0:36:7e:6f:1e:dd:f6:7e:d7:
74:cb:6c:36:15:e6:e3:b3:5a:1c:1e:c5:45:ec:62:
43:b5:84:2a:3e:1a:c6:0f:6d:b3:0a:3a:ab:17:52:
38:b3:82:8e:e2:63:42:04:7f:16:7b:f7:6d:1a:92:
13:f3:e3:9b:b6:ce:ad:09:29:1e:ed:13:42:f5:64:
25:d7:70:72:a9:38:89:8a:f9:07:f3:3b:ee:b9:71:
20:f1:6c:e1:65:6c:f6:1c:4a:fe:e7:e5:ef:b2:34:
99:40:7d:74:56:5f:06:02:cc:82:10:74:26:1c:d0:
e1:df:c5:44:8e:ff:08:a3:9c:e7:06:c4:b8:79:2c:
bd:ee:42:42:9a:53:dd:e4:bb:2e:f6:8b:87:7c:c0:
3b:5c:fc:4e:1c:62:5a:f5:40:de:cd:df:bd:8a:62:
c8:fe:75:04:93:02:36:df:1b:13:0a:4b:ca:0a:6f:
c2:2f:da:97:20:93:bf:b4:fe:e6:2a:2f:46:51:c3:
0f:a7:45:df:6f:f8:3b:41:40:12:c2:64:c1:61:5c:
45:28:be:8f:18:95:ac:66:fc:a4:3b:1e:19:a8:b0:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E4:CF:87:D0:4F:A0:96:E3:12:F3:BF:5E:A6:30:D0:47:23:F3:0A
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:82:25:9c:31:7b:2b:60:10:37:93:db:a1:5a:fc:f6:57:d3:
e7:5c:e4:25:15:62:dc:42:f7:04:85:39:6c:f4:4c:1c:e0:87:
c9:ca:f7:00:37:73:76:53:7e:e7:93:0a:a2:56:dc:8f:6c:0d:
7d:73:00:d4:5f:f6:f6:aa:67:e9:4f:bf:be:de:60:6f:a6:98:
51:07:f1:d8:8e:a3:f8:41:9d:26:0a:ae:4c:2b:a8:b5:c5:89:
97:92:ac:2f:dd:4b:0a:50:b5:54:dc:01:aa:13:86:02:96:f4:
ce:dd:99:35:f8:98:d8:a7:e1:a7:e0:ae:53:94:54:4d:44:f9:
c6:46:8e:05:a9:80:88:8a:ff:2a:ca:f6:dd:07:25:4d:4d:48:
fd:d7:2a:f4:fb:03:95:5e:31:7d:b3:ad:a8:77:7d:0d:27:52:
f4:bb:8a:98:b5:ef:1b:81:61:63:62:25:50:7e:8d:66:bc:74:
11:61:b6:8b:46:a1:93:60:15:74:03:76:42:2c:da:08:db:f2:
56:05:8a:04:5d:6a:46:6a:31:eb:e1:55:25:3d:24:ff:91:6d:
5b:7d:52:1a:c1:7b:d3:97:75:4d:38:d1:5a:b8:79:b6:15:ce:
35:47:0c:10:60:b0:9f:83:fd:d2:88:6c:3d:d4:84:66:71:2d:
80:61:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:56:17 2025 by rpki-client