Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/FjfstKCf1e-16oFUANHb8PBjFpc.roa
File: FjfstKCf1e-16oFUANHb8PBjFpc.roa (raw, json)
Hash identifier: W7D/N+7UjAkdXPG5fN6ie2qOLUlFS0Le2mHr/WVCBeA=
Subject key identifier: 16:37:EC:B4:A0:9F:D5:EF:B5:EA:81:54:00:D1:DB:F0:F0:63:16:97
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E836EA57A0CFC890674F2E6AF52A7F
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/FjfstKCf1e-16oFUANHb8PBjFpc.roa
Signing time: Mon 02 Jan 2023 14:34:59 +0000
ROA not before: Mon 02 Jan 2023 14:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48680
IP address blocks: 94.100.3.0/24 maxlen: 24
213.175.103.0/24 maxlen: 24
213.175.102.0/24 maxlen: 24
213.175.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:36:ea:57:a0:cf:c8:90:67:4f:2e:6a:f5:2a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1637ecb4a09fd5efb5ea815400d1dbf0f0631697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:09:2f:a3:50:83:c7:8f:2f:f5:cf:bc:93:
e5:c5:ad:08:a3:61:2f:2c:18:ea:d6:86:de:39:10:
38:32:3e:f3:62:ba:65:62:71:33:52:8b:43:d3:03:
e1:10:26:ab:48:3a:ca:5c:b1:c2:85:39:d5:9e:16:
65:b6:4a:40:e8:d9:ef:ee:ee:28:12:ec:6e:dd:fd:
a6:e8:c6:a9:c7:9d:e5:39:59:30:04:8a:ca:c4:ea:
1a:82:54:11:59:3f:cd:58:05:27:d1:10:42:fe:73:
7f:b8:15:e7:c2:79:84:18:87:b4:9e:4e:e5:30:4d:
61:9c:05:4c:0f:cb:0f:92:b5:05:0a:74:51:e8:fc:
9d:71:54:e0:b4:9f:72:40:64:da:60:4f:08:b0:7d:
22:63:9c:2b:6d:4f:d5:50:06:23:83:bc:8d:c9:2f:
12:ae:2a:a8:dc:99:e8:62:9e:e6:30:6c:77:a4:05:
13:5b:0d:b7:b1:40:1e:3c:c4:58:49:cf:d5:d4:67:
ee:50:bc:89:65:a3:7f:69:47:ad:52:e4:2f:16:cc:
72:1e:b0:be:d7:51:4a:4c:14:f3:66:0a:ef:28:be:
1e:e7:14:94:2d:5a:12:91:08:d3:50:8a:3e:17:2f:
a7:99:f5:d7:41:81:6a:9b:54:60:57:9c:f8:22:96:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:EC:B4:A0:9F:D5:EF:B5:EA:81:54:00:D1:DB:F0:F0:63:16:97
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/FjfstKCf1e-16oFUANHb8PBjFpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.3.0/24
213.175.72.0/24
213.175.102.0/23
Signature Algorithm: sha256WithRSAEncryption
20:3f:ad:ce:45:62:75:e1:31:9b:21:35:22:2f:67:1a:96:fb:
aa:88:8e:73:2c:e8:8d:04:f3:0f:84:b2:c6:0f:88:5d:68:c3:
84:b7:43:d1:68:df:23:0b:37:9b:96:17:30:5c:fe:1c:1e:f5:
a1:bf:52:9d:e1:08:ab:e7:40:71:6f:94:8d:dd:f8:a7:c8:51:
2d:8a:08:3b:ab:d0:a3:ad:58:52:10:37:bc:da:5e:d4:27:a6:
26:05:3c:96:fd:6b:aa:e9:66:10:f0:58:9d:cd:51:35:2b:1a:
f3:04:a7:6b:c4:78:61:e5:27:7a:f1:67:2d:f7:e7:db:51:dc:
38:55:3b:d7:b5:d5:1a:fc:b4:f3:3c:7a:f9:f7:f9:bc:5f:24:
8e:0d:13:eb:22:3a:fe:49:1e:1a:e0:ba:03:6e:75:0e:71:64:
8f:4e:b7:cf:35:9f:9f:93:a3:39:c7:ca:09:71:b9:02:c6:dd:
d0:34:2a:df:73:8e:87:de:99:e6:91:b5:21:d7:8e:db:4d:90:
8e:9f:69:5b:57:e3:0a:1b:23:07:20:81:c7:a2:c5:98:18:f9:
a0:10:27:20:ec:5b:16:a6:04:6c:e6:a7:53:bd:73:41:7c:5c:
b0:79:4f:66:ac:1e:40:b2:5d:1c:cc:96:bd:a7:22:3a:35:48:
2a:42:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:49:23 2025 by rpki-client