Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/FmBFQOhNzhtYDdGU28d2mOWYxkg.roa
File: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (raw, json)
Hash identifier: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=
Subject key identifier: 16:60:45:40:E8:4D:CE:1B:58:0D:D1:94:DB:C7:76:98:E5:98:C6:48
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019427B375FC873CAC7FB5D0703F1C652775
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/FmBFQOhNzhtYDdGU28d2mOWYxkg.roa
Signing time: Thu 02 Jan 2025 15:47:39 +0000
ROA not before: Thu 02 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199967
IP address blocks: 178.212.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:75:fc:87:3c:ac:7f:b5:d0:70:3f:1c:65:27:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 2 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16604540e84dce1b580dd194dbc77698e598c648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:3d:60:97:97:9a:39:4c:b4:0b:44:33:1a:
2a:cb:94:d0:46:83:aa:17:1b:83:e4:fc:f4:c2:a2:
f6:e6:b7:41:8d:07:81:e7:5b:ce:3e:b2:1e:c6:f8:
4b:e7:70:b6:63:1d:7e:3f:0a:0d:01:07:3d:62:cb:
4c:ae:df:4b:ae:1c:c0:b7:0b:cd:2e:ae:e9:23:c5:
91:c3:10:a0:d8:8d:f9:16:a7:e1:d8:48:df:0a:cd:
38:b7:a8:39:53:2d:ef:cb:f7:9c:58:45:69:b7:56:
d9:1e:6f:a9:12:90:fe:89:0d:75:06:e0:f4:9a:5a:
c2:9c:f0:6b:9f:6f:38:7d:6d:31:76:cf:a3:ce:b4:
78:d2:3a:6e:67:32:2c:e4:96:10:80:bc:a3:d4:3b:
4c:2e:68:3b:ef:1f:94:88:1f:3c:84:b7:97:94:c3:
79:01:d2:3c:63:a0:52:ac:75:70:d8:7f:b9:8c:a2:
c7:a1:a2:fe:22:8f:eb:70:d5:6e:f8:61:c7:5c:d9:
04:7c:44:65:19:0c:33:36:c3:77:da:de:91:db:43:
64:a5:70:08:93:ca:a0:e2:fa:67:c6:50:dd:d5:dc:
1f:d0:ce:ba:b7:28:58:6e:08:fa:ef:b2:6f:14:af:
fc:eb:44:7a:b1:09:a1:ac:bc:41:b4:2e:dd:64:9f:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:45:40:E8:4D:CE:1B:58:0D:D1:94:DB:C7:76:98:E5:98:C6:48
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/FmBFQOhNzhtYDdGU28d2mOWYxkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.60.0/22
Signature Algorithm: sha256WithRSAEncryption
81:70:7a:76:6b:22:9f:db:64:ea:f0:a9:7e:cf:53:70:f2:58:
9d:e5:6c:ac:78:00:ad:4b:76:c3:41:f5:42:31:61:2e:ca:8b:
51:79:94:ac:22:72:38:3d:ab:f1:65:07:68:e8:41:78:f5:bc:
a1:d0:94:93:9b:8c:94:b5:00:a8:d8:a1:9c:04:08:b8:9d:41:
c9:36:9f:83:46:83:22:6a:15:34:c4:15:d6:70:b8:73:bf:81:
75:87:9d:73:e4:32:2a:fc:1a:6b:76:a0:0b:ab:2d:9e:35:36:
94:d8:e8:06:f9:f2:77:b4:fa:f0:25:97:55:36:28:84:f9:97:
78:12:9b:53:7d:5f:89:6e:d0:53:9d:7e:83:1b:b2:09:56:50:
c8:30:0e:58:d7:e7:51:44:2b:e1:2a:78:da:89:58:2b:56:dd:
c8:e6:2e:46:2c:49:3f:d4:8c:33:8a:64:7f:24:db:ea:bb:c8:
e2:aa:cf:15:7a:72:17:39:de:59:f8:5e:f8:a6:3d:da:88:22:
81:61:cc:07:ab:79:a3:fa:93:83:f0:3a:da:d1:42:80:2c:f5:
74:16:da:e0:11:b5:a2:e9:60:17:4d:c3:1f:cc:56:90:f9:92:
a2:07:60:8e:af:40:fd:f7:c3:88:fe:9e:24:4d:4e:65:20:12:
5a:f0:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:17 2025 by rpki-client