Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FctdTTvGKTZYkOacN1Xu5NZHLcQ.roa
File: FctdTTvGKTZYkOacN1Xu5NZHLcQ.roa (raw, json)
Hash identifier: dnwiDgs/WdNTpNurKHuaygxyBjYehGIbKOcxfEdT8T0=
Subject key identifier: 15:CB:5D:4D:3B:C6:29:36:58:90:E6:9C:37:55:EE:E4:D6:47:2D:C4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0187470B969C7E44B5FEDC79ECA33830EFFB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FctdTTvGKTZYkOacN1Xu5NZHLcQ.roa
Signing time: Mon 03 Apr 2023 12:15:54 +0000
ROA not before: Mon 03 Apr 2023 12:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 149.126.197.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:0b:96:9c:7e:44:b5:fe:dc:79:ec:a3:38:30:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 3 12:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15cb5d4d3bc629365890e69c3755eee4d6472dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:90:29:de:95:bb:8e:97:14:be:9a:f8:62:
61:bc:87:47:e0:17:e7:a3:a2:d9:87:a0:1f:ee:bf:
bc:49:37:de:4a:7c:03:40:e1:9d:52:ce:a3:78:50:
21:27:79:90:35:96:60:23:5f:c4:08:f3:f8:39:3a:
f9:da:31:76:19:85:38:80:46:a4:2f:cc:3a:67:9d:
b2:c9:90:cb:3b:37:35:3f:70:98:07:e5:64:23:e4:
c8:2e:7f:7a:6c:c9:9e:f2:55:0e:12:32:13:d3:8f:
e8:89:ce:9c:fc:c7:f9:9f:27:3a:c9:16:d0:a7:c0:
32:3e:3c:0a:f6:0f:b2:9d:f1:ad:bc:13:83:cc:93:
22:79:88:9b:01:99:0a:04:01:ba:a9:07:ee:b9:6c:
d8:6b:5a:d9:7a:d4:e6:dc:fe:fa:dd:ad:29:88:3d:
fc:68:5d:a9:1c:f7:9b:c0:6e:22:77:83:0b:46:8d:
5f:39:4d:51:5e:26:39:26:17:88:e6:8a:db:77:e8:
66:d3:1f:bb:23:22:62:b8:17:ad:0d:5a:04:b7:8f:
14:57:dc:4b:36:b5:aa:52:73:3c:70:9a:82:86:a8:
de:37:8e:97:2f:56:f7:67:1a:3b:96:ac:c9:65:24:
40:70:03:33:3c:b8:a9:9f:ce:00:34:db:c4:75:9a:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CB:5D:4D:3B:C6:29:36:58:90:E6:9C:37:55:EE:E4:D6:47:2D:C4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/FctdTTvGKTZYkOacN1Xu5NZHLcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.238.0/24
149.126.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:68:56:e5:a6:b6:cc:6d:99:35:1d:e7:66:f7:4a:48:a3:35:
ba:cd:91:ff:84:7a:89:0f:67:ab:39:91:0e:95:29:fd:67:3f:
f7:d0:c5:23:94:44:af:f4:1b:1a:f9:14:96:cd:70:5a:61:34:
41:a4:a4:3c:aa:bb:1d:5d:fe:d1:cc:f1:0c:2e:08:4e:fc:69:
63:f5:6a:72:f7:e7:3c:43:a9:3c:08:ec:8f:66:6c:25:7c:c4:
77:2f:b0:f6:b9:98:35:ff:c1:46:3c:86:b9:85:ad:34:62:a3:
7d:73:81:5e:8f:1b:2b:3d:f7:67:c8:fb:c7:d8:67:76:55:dc:
99:71:1f:c0:62:8d:dc:6b:b0:85:d9:c4:ad:ce:27:05:79:98:
16:c5:3a:30:e8:42:23:32:d1:d5:e5:60:cb:63:92:3d:d9:1a:
fc:2a:8a:0f:93:84:61:cd:54:e2:37:4a:13:2b:ec:3b:93:06:
7e:a3:bd:5d:9b:bd:bb:de:ea:22:f4:f7:a3:ed:f5:a7:5f:96:
e8:78:12:d3:ae:5d:40:4c:c8:97:96:68:21:10:d8:01:86:7b:
4d:58:b0:78:3f:5f:dd:2c:f4:c1:7b:3b:3e:21:cb:06:a1:36:
92:f7:bd:db:71:cf:11:1e:37:cf:86:97:ab:b4:0d:fd:d7:a5:
9a:94:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:55 2025 by rpki-client