Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FzQzdLYjlZ-ovDubhPvy8I6ZtiE.roa
File: FzQzdLYjlZ-ovDubhPvy8I6ZtiE.roa (raw, json)
Hash identifier: WNqFwyfQ9FUpVUQHTVpWGfi+6akz0cKpA+SLlT7TgYA=
Subject key identifier: 17:34:33:74:B6:23:95:9F:A8:BC:3B:9B:84:FB:F2:F0:8E:99:B6:21
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50CAA3E7
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FzQzdLYjlZ-ovDubhPvy8I6ZtiE.roa
Signing time: Sat 01 Jan 2022 16:01:44 +0000
ROA not before: Sat 01 Jan 2022 16:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 195.65.17.0/24 maxlen: 24
194.209.178.0/24 maxlen: 24
194.6.190.0/24 maxlen: 24
195.65.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355457511 (0x50caa3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17343374b623959fa8bc3b9b84fbf2f08e99b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:25:4c:6e:8d:5e:5d:2c:ca:3c:a5:fd:2d:
cc:cc:c4:e2:67:73:24:ba:6f:72:83:c4:2f:e9:f5:
0e:71:23:57:6a:ac:82:97:59:6e:64:8b:7f:b1:0e:
ea:6a:cf:32:a7:34:5b:2e:1b:79:21:bc:00:9f:42:
8a:d0:ea:c2:e1:d3:c5:20:10:dc:a7:4a:50:70:92:
2c:05:36:9b:ec:8f:13:74:11:03:6e:40:53:0a:33:
ef:86:22:37:16:aa:bf:47:fc:aa:cc:5d:ab:5c:87:
0c:33:4f:6e:6a:a8:c9:f3:eb:c5:af:ed:c6:85:21:
66:c6:87:a5:35:51:33:eb:e4:07:4b:57:de:92:11:
35:79:ad:13:9a:c8:c7:27:9f:93:76:0f:2c:c0:65:
c3:45:46:5d:7e:72:98:36:ce:1d:0d:7e:bd:d4:bc:
cd:28:ac:4a:21:3d:9e:28:7d:09:4f:e2:15:d0:01:
13:04:1f:6b:7d:7d:0b:1a:fa:0e:ac:57:5c:76:50:
08:5a:d1:f4:e5:a7:0c:8e:d0:53:05:38:18:be:c9:
7f:bf:97:34:42:a1:c3:9d:ee:80:d7:e0:4d:05:8f:
80:0f:44:b3:ad:e4:fa:3a:f8:7a:d9:d7:b5:ba:26:
2f:83:ab:e2:f9:e3:35:f7:ba:61:e2:61:df:4b:d2:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:33:74:B6:23:95:9F:A8:BC:3B:9B:84:FB:F2:F0:8E:99:B6:21
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/FzQzdLYjlZ-ovDubhPvy8I6ZtiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.190.0/24
194.209.178.0/24
195.65.17.0/24
195.65.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:32:69:b5:8d:c5:64:c2:c2:3d:20:04:8c:a5:8c:bd:f0:97:
8a:e1:68:57:bf:9a:ab:a7:84:6c:ca:9c:fd:bc:0d:9b:fe:08:
1c:44:e5:fc:cd:b4:d9:f8:fe:ca:c3:67:6e:2b:5a:d9:42:62:
ca:2a:e4:db:f5:4f:d4:a7:5b:b0:62:18:38:d8:c9:bc:c6:d8:
b7:36:d6:2f:cd:98:d1:62:1b:d9:e7:99:c4:e0:0c:6a:18:e4:
52:62:14:ae:7c:12:58:d1:15:e4:3e:e0:84:f6:c1:4d:4b:a5:
26:7f:42:3d:d9:61:37:60:65:7b:ae:4e:57:76:66:51:bc:84:
43:ed:59:0c:83:76:13:81:f4:9d:8c:5d:b3:35:7f:a7:ec:20:
28:30:e9:26:1b:38:78:f8:96:51:18:55:eb:3c:82:94:78:a6:
d0:c2:f0:5b:b7:a3:8c:f0:e2:0c:54:4e:62:7b:a0:61:13:ee:
3b:eb:2b:76:8d:29:1a:7a:d7:5b:5b:b8:83:b1:ff:31:b9:ae:
60:80:93:6d:40:ca:75:0d:a6:fa:b8:04:ae:7b:9a:ba:fb:4e:
c0:bc:4a:10:ee:95:98:ba:de:19:fb:68:12:f9:49:f8:47:f0:
67:f5:06:cd:db:38:be:01:1a:f9:ac:c4:92:2f:22:84:05:6b:
59:dc:ea:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:24 2025 by rpki-client