Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa
File: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (raw, json)
Hash identifier: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=
Subject key identifier: 14:64:A0:AA:BC:0D:2E:15:CB:C2:0D:52:D9:92:B4:C6:DF:08:47:CA
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F89814462FD3E7AF0ECB58778803B
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 93.120.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:89:81:44:62:fd:3e:7a:f0:ec:b5:87:78:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1464a0aabc0d2e15cbc20d52d992b4c6df0847ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:6f:86:40:4e:a1:0f:d4:f6:b2:08:91:75:
b7:34:3c:e3:52:f9:9b:ff:75:54:4b:67:b3:70:63:
c0:c1:1d:b0:05:4c:21:07:b0:5f:fe:e3:54:77:b1:
c9:dd:f4:c9:c6:48:26:9b:65:71:c7:9c:01:24:ab:
4e:30:20:e0:ab:eb:ed:9a:06:1b:af:c9:22:2e:7b:
70:03:82:bc:7c:78:34:07:fd:20:17:16:c1:3e:33:
4c:39:36:40:fb:0c:69:4b:05:cd:1c:e6:5c:ef:a4:
a5:1d:d1:ef:80:18:d5:86:c6:bf:70:f2:fa:33:c7:
c3:6e:7c:bc:6a:3b:ed:d8:f8:f0:77:bc:aa:1c:fc:
2b:b6:96:1c:6e:2b:b7:69:ce:fc:65:65:b6:88:4b:
c2:e0:07:20:72:4f:43:89:ea:12:15:d0:67:c4:af:
9e:89:fd:3b:e3:87:c4:19:4b:cb:e7:5a:e3:78:33:
42:b5:01:bf:1a:a9:3f:06:43:02:04:fd:b5:86:7f:
be:af:23:04:44:5c:54:fc:4a:78:b5:81:1e:9c:5f:
af:4f:dc:4d:2c:e4:13:f5:d9:1d:70:cf:09:c7:40:
e2:13:f7:4f:12:ba:d7:37:44:fb:85:13:ac:92:06:
f9:46:84:03:9a:0e:ce:eb:11:d9:06:9e:a0:26:70:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:A0:AA:BC:0D:2E:15:CB:C2:0D:52:D9:92:B4:C6:DF:08:47:CA
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.0.0/21
Signature Algorithm: sha256WithRSAEncryption
13:89:c0:52:17:f7:a7:cf:b7:dc:c1:e8:cb:c1:7f:8d:d0:06:
e2:ff:3f:03:31:1e:9b:32:bc:cc:b6:d7:f0:55:44:ef:52:2e:
3d:51:14:6c:79:f2:9f:2d:6a:29:3b:cc:0b:63:23:f1:2f:0b:
17:b2:cc:bf:ba:1b:13:a9:94:f9:96:f2:aa:58:38:4e:95:20:
c9:a1:c5:0d:b8:50:40:4b:51:3e:ff:72:95:0f:ad:70:99:fc:
58:6e:6f:1a:b5:a5:b4:99:04:d6:91:44:06:97:4e:5a:0a:81:
5d:5c:66:3e:16:ba:15:df:f2:94:d0:c2:dd:2b:f0:ed:0b:db:
5c:ed:6f:fc:04:0d:58:02:32:ff:e6:12:63:ae:34:35:2d:51:
46:d8:4d:ec:72:9c:c9:fa:4e:f5:a2:52:89:7f:f8:dd:7c:0d:
7a:78:9c:a2:c5:d0:4e:56:48:f4:d4:9f:ef:56:5f:98:cd:57:
7a:a2:14:80:9a:54:96:15:91:8c:d7:4c:22:cd:4b:40:e6:b9:
8e:4c:8c:bb:0d:1d:22:c4:84:f2:16:a6:75:d9:d4:c1:65:fd:
bb:d1:a5:b8:b1:82:11:99:cc:8f:27:7e:fd:3e:47:36:74:e6:
71:81:12:44:65:f2:26:58:52:83:dd:47:8c:9a:56:22:4c:2e:
b1:c1:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:34 2025 by rpki-client