Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FybzIFcZSE5lsnT6b5cIlMlH9IM.roa
File: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (raw, json)
Hash identifier: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=
Subject key identifier: 17:26:F3:20:57:19:48:4E:65:B2:74:FA:6F:97:08:94:C9:47:F4:83
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA2F84B7400FA940FEEDC1F377D3E1
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FybzIFcZSE5lsnT6b5cIlMlH9IM.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14178
IP address blocks: 62.100.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:84:b7:40:0f:a9:40:fe:ed:c1:f3:77:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1726f3205719484e65b274fa6f970894c947f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:29:60:62:af:0f:85:73:27:62:dc:f1:1b:
63:fc:6a:24:81:9d:ac:f8:c5:0c:bc:7d:7f:10:8e:
2f:9a:c0:25:09:4f:63:9f:2f:a3:38:09:1f:35:07:
94:fc:9d:01:9a:2d:fe:a8:f4:4b:1e:2b:6e:87:ff:
d4:f5:9c:7d:f6:07:e9:69:b4:2e:6e:a3:6b:6d:8f:
02:8a:47:c5:cf:cc:45:47:7f:3a:da:28:5e:34:35:
5a:59:99:50:e1:14:ba:34:f9:67:7f:e9:17:97:b4:
14:b4:05:58:67:89:4f:98:5c:e7:d3:37:20:48:50:
16:2c:70:48:e1:c3:39:aa:e5:13:1a:ce:de:9d:ae:
53:da:7e:29:c5:57:d2:fd:d1:49:ba:dc:c4:30:b1:
c7:b5:2f:42:3e:ff:e6:25:10:15:ca:b0:44:2c:29:
47:81:e0:c3:ba:e0:6e:78:cc:7a:37:fc:7d:62:c4:
c9:2a:bc:76:d2:db:09:01:ba:80:14:5a:b7:d6:b6:
4c:c3:7a:7d:ae:e5:d6:47:44:60:01:21:77:a3:95:
14:18:e2:7f:31:e4:0c:e6:37:73:0e:43:d0:3d:59:
9e:fa:ae:ae:f7:d2:24:52:01:df:94:4d:38:9a:88:
ed:3b:d0:d7:99:be:38:05:3e:80:03:b6:e3:86:5c:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:F3:20:57:19:48:4E:65:B2:74:FA:6F:97:08:94:C9:47:F4:83
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FybzIFcZSE5lsnT6b5cIlMlH9IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.209.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ed:57:49:fa:76:d2:c4:a2:2a:1c:4d:c6:55:4a:3a:3f:5e:
21:4b:95:af:aa:94:a6:d2:74:d7:1f:49:4e:6f:ed:33:2f:b4:
84:28:a3:b4:94:fe:1e:69:7c:7f:66:da:77:3a:44:20:43:cc:
a2:ee:11:e8:3a:5a:4f:88:36:f5:8e:91:57:ca:9f:ee:a6:43:
97:28:37:41:b1:8b:b8:39:51:57:8a:cc:90:27:eb:31:fe:23:
4c:98:e0:ac:7a:73:0f:4f:bf:54:82:d2:e3:0b:b9:71:d5:e3:
55:40:6c:04:8a:f9:6d:5b:7a:ca:81:0f:a7:19:df:78:e5:d7:
63:20:8a:60:5d:a5:e7:5b:f5:bf:21:9a:76:f5:30:6a:4d:54:
a6:04:56:a9:2e:12:1d:60:87:f7:98:62:e1:20:b7:f5:a9:55:
4f:a0:89:ab:95:fc:42:1a:5f:28:ab:be:1c:fb:2e:55:a2:fd:
60:2d:63:c1:f9:bb:5b:c7:15:65:5a:4d:6d:fa:74:95:bd:11:
a3:f7:31:d1:fb:91:4a:cc:22:67:4e:d6:f4:92:1c:36:40:f4:
05:35:c6:64:c3:3a:0a:3f:76:f9:56:3e:7e:11:81:dd:37:90:
7d:f6:54:70:05:8d:21:76:79:ec:2c:7a:69:35:0a:27:38:4c:
cd:64:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:29 2025 by rpki-client