Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FWnTVatonay_ac1l9FxpqnsKGw0.roa
File: FWnTVatonay_ac1l9FxpqnsKGw0.roa (raw, json)
Hash identifier: IXO3lqqNfeKkrYfNVLrdnppoy2IGgn8ngwzvSUnIE40=
Subject key identifier: 15:69:D3:55:AB:68:9D:AC:BF:69:CD:65:F4:5C:69:AA:7B:0A:1B:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195CDB86AF785EA79B399B6EB1650CC138D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FWnTVatonay_ac1l9FxpqnsKGw0.roa
Signing time: Tue 25 Mar 2025 14:32:50 +0000
ROA not before: Tue 25 Mar 2025 14:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 212.192.250.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:b8:6a:f7:85:ea:79:b3:99:b6:eb:16:50:cc:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 25 14:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1569d355ab689dacbf69cd65f45c69aa7b0a1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:75:26:53:f6:ba:0e:36:94:85:7b:2e:e7:
0a:0e:b0:71:84:ee:7e:57:b1:b4:98:7d:68:f5:3a:
ba:b2:83:6d:57:62:ac:71:e3:37:51:86:d0:7f:40:
13:df:82:2e:1a:97:55:fc:b2:81:04:36:68:55:56:
a2:f6:45:07:da:74:7a:46:e5:a7:a5:fb:11:4a:53:
a5:92:f2:00:8d:29:25:64:35:8d:71:53:f3:9f:ad:
d7:6b:1b:df:e3:11:fd:4a:c7:47:e4:d4:6a:5f:a5:
b9:eb:35:7b:02:ec:dd:03:7f:b8:00:03:cb:11:20:
91:7c:08:51:26:17:b8:04:82:2f:ce:31:6e:6f:6e:
a1:cd:06:22:a4:07:9c:c8:96:c0:fc:79:61:68:00:
b0:93:5f:20:16:8b:65:b6:5d:95:a5:38:1a:32:bb:
77:7d:75:b0:07:f5:cf:16:0d:97:95:5c:42:c0:68:
6a:06:f3:53:23:f5:7e:16:bc:24:84:e9:8d:a2:ac:
f7:ff:60:d5:10:2e:16:e0:24:71:06:c6:65:b5:35:
05:7b:1d:18:94:53:ec:1b:23:d5:a5:97:3d:80:8f:
e2:a0:20:0d:9b:ad:28:85:60:37:7d:80:8f:9a:a8:
36:b6:a0:81:6e:d0:4e:87:15:51:2f:88:ad:ca:e9:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:D3:55:AB:68:9D:AC:BF:69:CD:65:F4:5C:69:AA:7B:0A:1B:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FWnTVatonay_ac1l9FxpqnsKGw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.250.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a4:10:52:cf:b6:f9:7c:51:da:bb:0e:26:0c:a1:d4:59:79:
b6:a9:6f:d2:2a:bd:b2:75:d5:bb:7f:89:e1:15:c6:80:54:f6:
e9:ab:a4:7f:ae:f9:5c:9b:6f:b2:96:7c:d9:c5:ea:2b:fa:24:
12:be:8b:ff:2b:30:9d:64:37:e4:c8:2d:0c:3f:f4:56:3a:7d:
0b:7a:bf:43:93:2a:0c:de:fe:54:48:d9:e0:17:2f:9c:f1:58:
ba:c8:78:ee:15:44:63:b4:35:49:ba:11:a8:40:58:e1:9b:af:
23:81:af:5a:f5:25:e8:9b:25:1c:ee:1d:7d:e0:51:f1:e3:f3:
06:d1:c1:c7:83:4d:a0:75:9e:44:15:09:d1:dd:23:a7:2e:2f:
b5:fb:48:25:17:f8:31:5e:02:27:2a:07:44:23:b4:b3:61:24:
4b:42:77:5c:ee:20:0c:dd:15:ce:20:7e:13:34:df:a3:3f:5f:
c5:d2:3c:8e:63:81:9d:0e:53:7c:9f:e2:a3:80:a4:4f:b1:d3:
21:4c:79:50:39:aa:79:85:74:d4:99:9d:7b:04:87:3a:3f:9d:
6b:1c:47:c2:87:e0:9c:8b:6f:22:c1:6e:9e:bf:94:ac:e5:66:
40:6f:4c:4c:6e:6f:2e:55:ac:e7:43:88:62:8e:15:f1:5a:30:
f5:78:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:26 2025 by rpki-client