Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/FsnHQCl3YIPQ-Kr--FXccxOvsak.roa
File: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (raw, json)
Hash identifier: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=
Subject key identifier: 16:C9:C7:40:29:77:60:83:D0:F8:AA:FE:F8:55:DC:73:13:AF:B1:A9
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01942521B1225E8A353CA61FF4EA34BD5B6D
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/FsnHQCl3YIPQ-Kr--FXccxOvsak.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208905
IP address blocks: 193.163.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b1:22:5e:8a:35:3c:a6:1f:f4:ea:34:bd:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c9c74029776083d0f8aafef855dc7313afb1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:8e:ed:0f:f9:e5:35:83:21:33:b2:b5:cd:
21:a8:b0:78:e8:a3:28:b0:1d:d1:0b:ad:cb:18:18:
92:02:fa:b4:06:ae:9e:a8:72:3d:67:d6:c7:29:86:
e5:94:b0:59:ca:2f:a7:a7:13:ee:e9:97:02:f6:6d:
a8:f6:61:4d:ea:b7:56:b3:85:c2:9c:f4:bf:44:9d:
e9:1b:09:1d:26:b6:19:5d:fa:cf:fc:ac:f0:bc:6f:
7b:6e:6d:c2:71:12:ee:fb:af:20:7d:9a:06:50:bf:
c7:c4:d4:09:e2:20:2a:20:45:d3:02:67:38:90:16:
ab:e2:24:23:bd:ec:aa:a8:22:aa:97:a4:48:72:20:
29:4d:81:e7:1f:ab:09:06:2e:bd:f0:e8:6a:0a:c1:
03:66:3c:5d:76:fb:46:a4:99:8f:e8:09:d0:5d:68:
ed:c5:3a:8a:76:46:4c:fc:e9:b9:90:d7:69:a5:38:
8e:1f:da:b3:d1:7d:48:5a:0b:bb:53:70:a5:d0:74:
f0:b2:ef:17:38:81:5d:b6:2b:91:c1:94:b6:e9:71:
9f:d4:70:c7:14:ba:e1:a7:67:a8:ef:97:fc:18:4c:
59:da:8f:ba:93:8f:eb:07:61:29:1f:20:24:94:2b:
d8:b6:a6:49:17:9b:80:6f:c9:cc:77:5a:70:c0:2d:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:C7:40:29:77:60:83:D0:F8:AA:FE:F8:55:DC:73:13:AF:B1:A9
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/FsnHQCl3YIPQ-Kr--FXccxOvsak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3a:be:9f:ed:d5:a7:c1:7b:1b:a7:d4:75:29:78:10:f8:e5:
13:f3:eb:15:f3:26:f6:0d:6a:af:84:9a:92:1f:3b:11:e8:75:
8d:f2:1c:c0:cf:41:3b:44:ec:b7:2d:b8:54:bf:cf:49:53:6d:
73:78:e2:22:0e:90:0a:2a:ec:65:96:96:df:d1:39:5c:8e:37:
e7:51:cf:50:23:49:00:de:09:fb:fb:63:fa:c8:7e:4b:15:88:
a1:46:86:c9:76:d8:eb:dc:6e:70:05:db:36:7a:f9:06:80:06:
5a:a8:de:3f:2d:77:85:8c:8e:3b:a0:56:9b:13:79:ed:b0:42:
58:c0:92:45:e7:c6:2c:96:7e:f6:d6:a9:0b:4f:ab:60:29:b5:
6a:e6:03:63:44:f8:71:f4:b2:85:11:65:de:ce:f8:f9:ae:d1:
8c:0e:f7:94:24:b7:b6:31:bf:7c:8c:1f:ba:3a:52:90:ee:f9:
4c:e4:07:13:3e:3e:84:36:db:6d:69:ab:ea:13:65:ae:de:7b:
10:f0:4d:7a:32:9c:91:78:a4:bb:93:4e:7b:9d:21:be:07:21:
24:77:40:d9:3f:59:14:d8:e8:19:e4:e4:67:0f:f4:bb:7f:fb:
96:47:d9:9a:dd:35:11:96:e5:69:8b:46:08:4a:5b:80:04:53:
5b:09:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:34 2025 by rpki-client