Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fxPx_ltDme-kZU3aD1uE53oIm3c.roa
File: fxPx_ltDme-kZU3aD1uE53oIm3c.roa (raw, json)
Hash identifier: qtcmicIUbsu+4VyhxOYQqccdHq9Z3+kDZqnGZmKwE08=
Subject key identifier: 7F:13:F1:FE:5B:43:99:EF:A4:65:4D:DA:0F:5B:84:E7:7A:08:9B:77
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01948DEA8D113D62FF477CBB97F68B6CBD89
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fxPx_ltDme-kZU3aD1uE53oIm3c.roa
Signing time: Wed 22 Jan 2025 12:09:06 +0000
ROA not before: Wed 22 Jan 2025 12:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213538
IP address blocks: 91.246.217.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:ea:8d:11:3d:62:ff:47:7c:bb:97:f6:8b:6c:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 22 12:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f13f1fe5b4399efa4654dda0f5b84e77a089b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:2c:f1:ef:7f:c4:18:2e:08:ef:10:60:d7:
bc:93:eb:b6:99:28:25:b8:4c:75:00:e4:47:32:b3:
a0:f0:db:a1:fe:a3:fb:7e:da:0b:09:70:a2:bc:92:
58:c1:8c:3e:5c:fc:dc:6f:4c:d2:50:3d:6e:ff:95:
b8:f9:ce:90:76:de:8f:e1:6a:ce:d8:c3:9b:f8:02:
2b:67:bb:78:78:b4:63:92:bd:f5:fa:73:4b:ba:c9:
3e:9a:ca:8e:f4:c3:2a:7f:6e:f0:cc:a6:14:08:8e:
0a:00:52:a7:2b:bb:ab:99:e2:1f:70:df:14:1a:43:
76:37:9f:f2:e8:7d:d2:02:61:c0:0b:9c:d6:01:c7:
b8:36:db:95:e5:dd:0d:af:70:2a:c4:93:53:a1:62:
40:28:81:16:21:eb:0b:85:8e:ec:2b:81:4b:cd:b5:
4d:4a:71:3a:35:56:eb:fe:e2:6f:ba:aa:44:07:10:
cb:b1:54:ee:54:a8:a3:5d:26:d6:0b:54:7a:19:e9:
c5:b7:09:8e:a2:05:70:ff:b1:c8:97:72:c1:34:70:
74:ac:95:28:87:0f:93:9e:b3:58:c0:c9:3c:34:0b:
5d:28:67:10:e3:36:3e:ab:82:19:9c:cb:0d:f9:87:
3d:41:b2:5b:7e:be:40:f4:46:4d:53:09:4f:54:04:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:13:F1:FE:5B:43:99:EF:A4:65:4D:DA:0F:5B:84:E7:7A:08:9B:77
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fxPx_ltDme-kZU3aD1uE53oIm3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.217.0/24
93.120.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c9:d4:da:f8:35:72:f1:6c:a5:49:e0:25:84:e0:93:a4:27:
bb:a0:15:58:21:f3:92:7e:20:3c:0b:92:aa:94:e9:de:38:28:
cc:d2:d6:42:0c:bd:96:93:d8:af:48:16:40:2f:b0:3b:3f:46:
0c:19:af:ce:c5:27:0d:96:91:c4:e6:75:5b:ab:22:e0:df:98:
dd:93:b0:14:02:95:e7:6d:54:1d:fa:d1:77:8f:d4:21:ec:dd:
b2:12:af:92:23:39:43:76:6d:e5:d6:2c:e4:bf:19:4f:55:17:
fc:97:06:6c:6c:d2:c4:15:cd:56:2c:db:c6:56:8c:ae:f6:a7:
fe:2f:24:67:42:dc:b2:b2:cd:83:6f:27:70:86:bd:2b:43:e9:
dd:64:68:1b:9a:2f:c1:48:f8:ea:88:4a:44:bb:ee:4b:7e:54:
a3:57:c2:b2:80:4f:4d:b3:59:1c:f4:07:ee:46:14:fd:e5:6b:
e5:a0:9a:56:08:92:7f:72:ad:d8:e0:33:05:75:d3:5b:d6:03:
f7:63:b4:16:ba:d2:67:99:8a:06:2c:67:0e:6a:16:76:63:c0:
98:d0:d9:52:f1:58:98:5f:dc:53:26:ff:e8:1f:94:68:30:17:
6d:69:17:f3:8b:49:3c:e1:19:48:3d:ef:80:21:a1:e0:00:97:
db:39:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:39 2025 by rpki-client