Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FeJyQOZn7XuQb_04TECQjxW1LhQ.roa
File: FeJyQOZn7XuQb_04TECQjxW1LhQ.roa (raw, json)
Hash identifier: fpKBRIeY550YfEmrHoa8Dgqejo+YEdy8Bt1tNrYDiCc=
Subject key identifier: 15:E2:72:40:E6:67:ED:7B:90:6F:FD:38:4C:40:90:8F:15:B5:2E:14
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01949C0C191A77DAC8F2592C636F9E0910CB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FeJyQOZn7XuQb_04TECQjxW1LhQ.roa
Signing time: Sat 25 Jan 2025 06:00:26 +0000
ROA not before: Sat 25 Jan 2025 06:00:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 37.49.144.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:0c:19:1a:77:da:c8:f2:59:2c:63:6f:9e:09:10:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 25 06:00:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e27240e667ed7b906ffd384c40908f15b52e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:0a:f9:f5:48:38:be:b0:a2:fd:b1:0f:b8:
b7:58:38:42:bb:60:00:f6:f0:b3:c9:dc:9a:18:11:
c2:ff:be:80:3e:58:aa:33:aa:64:3c:05:7a:76:86:
af:ba:0b:f3:58:46:47:9c:7a:74:0c:23:15:c7:4d:
ef:c8:e7:2c:95:16:d0:4b:8e:d1:19:c2:69:fe:8d:
81:57:97:ed:ab:f2:44:4b:6d:2d:9a:4e:3f:9f:82:
00:e3:92:eb:32:67:5c:69:df:ee:99:65:cc:3b:c0:
cc:20:d0:ab:7f:df:ff:bb:37:7f:af:fa:c3:08:78:
bc:27:0b:98:04:97:c0:9c:5b:4d:77:ee:9b:7a:ec:
64:2f:eb:c0:e7:9a:9f:bc:99:10:c1:b2:b1:8e:aa:
ba:68:69:9a:c1:57:2e:3b:86:e1:04:20:11:25:2b:
4b:35:1f:c5:c8:88:1d:43:27:37:36:48:0b:74:84:
5a:cb:e4:16:43:12:58:b0:ec:3d:ef:15:29:bb:e7:
55:eb:f1:eb:89:8a:d2:2e:16:d2:73:cf:d5:44:11:
0f:e5:55:d9:de:14:0b:fa:61:58:ac:af:99:a1:2d:
64:10:6a:d3:b2:79:eb:73:a2:8f:8d:1b:f2:c7:5a:
f7:e4:04:fa:53:2d:94:56:7b:66:a9:21:99:a6:11:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E2:72:40:E6:67:ED:7B:90:6F:FD:38:4C:40:90:8F:15:B5:2E:14
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/FeJyQOZn7XuQb_04TECQjxW1LhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
94.74.152.0/22
109.203.166.0/24
109.203.168.0-109.203.191.255
Signature Algorithm: sha256WithRSAEncryption
5a:d4:df:a8:a5:1e:1c:3e:fd:d9:1c:97:24:d8:75:27:f3:b3:
4f:0e:18:7a:1c:95:90:9d:44:c2:c5:f5:46:8c:f2:9d:b6:38:
56:cc:14:42:ef:4b:bf:53:91:09:40:9b:87:67:bd:9d:03:02:
4e:25:bf:4e:06:1a:5b:4f:b7:05:19:99:8b:c9:bd:65:d9:be:
d3:b4:35:36:f1:d1:eb:77:e8:fc:d7:b4:c5:14:a9:3b:0a:13:
0b:2d:26:bd:c2:04:81:ae:c1:b8:68:d7:bc:9a:7a:a3:c9:74:
e9:4c:89:2e:c7:09:bb:c7:45:59:f3:c5:c5:93:d9:e7:e5:cb:
24:b4:d9:e8:b9:02:2a:ea:8f:1a:3c:a0:93:45:1a:24:0e:3a:
73:86:0a:b9:1b:a8:ea:12:60:62:e7:aa:1f:f3:ed:15:dc:cb:
36:6d:0b:d5:13:67:22:7d:89:59:23:38:b4:c7:0f:59:4e:bf:
ac:2b:78:39:21:27:0f:f1:3e:72:5f:a7:e8:6a:6b:b4:ae:07:
cf:4c:6e:20:7b:ee:de:a2:b7:5e:8f:05:03:d0:25:cd:cd:d6:
49:ea:63:01:65:1f:ac:cd:f9:46:93:d7:fc:36:29:73:38:e0:
6d:34:7a:8f:64:1f:5e:87:b9:a5:b7:ff:3a:39:86:72:e3:5e:
ae:b7:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:03 2025 by rpki-client