Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FSAiU8uSV2V9h1bFHoexcW8BsQM.roa
File: FSAiU8uSV2V9h1bFHoexcW8BsQM.roa (raw, json)
Hash identifier: Go7IRQPTUCpQ5T6uOUVa7MLn1/GcCz6vDRMpnT02QXk=
Subject key identifier: 15:20:22:53:CB:92:57:65:7D:87:56:C5:1E:87:B1:71:6F:01:B1:03
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50E0841F
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FSAiU8uSV2V9h1bFHoexcW8BsQM.roa
Signing time: Sat 01 Jan 2022 16:01:55 +0000
ROA not before: Sat 01 Jan 2022 16:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199802
IP address blocks: 194.209.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356891167 (0x50e0841f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15202253cb9257657d8756c51e87b1716f01b103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:58:8f:06:4f:a2:03:62:8a:1f:da:8a:0b:
3e:b2:c5:19:08:43:f4:87:86:31:ca:d9:27:48:4d:
cd:d2:6a:23:ac:d5:b2:cc:92:29:e5:09:e4:19:70:
4b:5e:a0:98:4b:41:79:2b:2f:20:3d:cc:d3:c4:85:
21:42:f9:79:36:fa:cf:b2:19:e5:75:3d:6d:e8:ef:
6a:ca:c7:7a:cd:dd:cf:f6:72:63:7e:b1:bd:89:77:
3c:ef:aa:7e:ce:be:e0:45:11:00:88:d7:1c:c3:02:
a0:03:99:38:67:59:0d:77:ec:05:10:cc:dd:45:0c:
a0:1c:87:b5:6f:44:26:04:c9:eb:53:68:2b:94:f4:
e6:a8:1f:eb:fd:17:c3:bd:25:9b:a9:65:fc:f3:0a:
4a:2c:22:f3:04:e5:c2:d4:b6:05:d6:c6:fe:5e:a5:
a9:d7:2b:e3:b3:53:53:e3:d2:92:f0:3c:a5:99:32:
a6:b0:de:22:40:3b:2d:4b:35:94:cd:f5:6f:54:32:
c9:48:31:e5:9e:33:f1:dc:48:a9:af:54:f0:ba:33:
87:01:5a:84:38:76:72:d2:ce:dc:ad:ff:ca:b6:26:
33:81:ae:b2:23:f5:74:ab:84:c1:9a:d0:2c:f6:63:
bb:92:46:15:9b:4b:c8:0c:ca:47:e6:7b:60:32:6b:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:22:53:CB:92:57:65:7D:87:56:C5:1E:87:B1:71:6F:01:B1:03
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FSAiU8uSV2V9h1bFHoexcW8BsQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
74:00:b9:23:ba:14:f4:b6:40:e4:95:ca:60:0b:77:a5:00:a8:
9c:45:41:f6:5d:45:60:bf:ca:a0:83:bd:d1:f4:fc:f2:f7:10:
4b:cb:3a:d0:97:85:b8:da:06:4a:0e:d1:eb:27:99:be:33:f7:
23:53:2f:10:a7:06:85:67:93:3a:0a:a6:32:c6:8b:8b:ce:b7:
46:6a:51:dc:54:ce:22:c9:30:1e:13:6d:d2:34:7e:1f:43:bc:
38:0d:77:dd:8f:19:10:62:23:d0:2b:2a:31:6c:1b:fd:bb:b1:
55:ec:67:33:6a:81:94:9c:49:5d:08:b5:3b:b1:46:60:cb:8d:
ad:16:18:f0:af:18:04:06:5b:ac:ea:46:aa:5e:0a:1a:87:07:
c6:71:f7:f9:42:b2:09:72:48:22:91:e6:0e:2b:af:3c:2d:cb:
fb:17:39:99:53:80:5c:38:65:01:aa:2e:76:23:cf:75:12:27:
dd:e8:30:8e:80:8a:da:26:f5:d7:eb:a0:af:cf:16:f9:2a:f6:
52:e5:56:61:24:33:84:0d:2e:7b:7d:a7:99:71:92:16:1a:47:
09:ca:5c:eb:60:13:b7:eb:ea:2f:be:21:24:94:8a:5b:c1:04:
74:0c:2a:34:ff:3d:f3:68:df:b0:ed:b8:62:31:e1:a3:70:b7:
1a:f3:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:38:59 2025 by rpki-client