Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/FxoGtu3D5V96RVmD0MRkgOGogUE.roa
File: FxoGtu3D5V96RVmD0MRkgOGogUE.roa (raw, json)
Hash identifier: /Bc68+KKfXn4UluBtM3jelo1Jgm5m5BIVU5mCIdfQH8=
Subject key identifier: 17:1A:06:B6:ED:C3:E5:5F:7A:45:59:83:D0:C4:64:80:E1:A8:81:41
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BAD8EB45C1AB537E2F73820089878
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/FxoGtu3D5V96RVmD0MRkgOGogUE.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207710
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ad:8e:b4:5c:1a:b5:37:e2:f7:38:20:08:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=171a06b6edc3e55f7a455983d0c46480e1a88141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:64:49:c7:62:bf:8a:a9:4d:e3:ad:67:bf:
bd:2f:fe:62:3f:2a:8c:db:16:82:17:86:f5:20:a9:
21:96:43:0d:3b:b2:3a:6f:8d:25:5a:67:0f:7d:34:
cc:52:62:9b:89:aa:af:ed:88:e5:b6:1a:6a:fc:a3:
5e:bf:a9:95:01:72:89:13:0f:1c:80:5e:63:ed:a6:
d2:58:63:aa:10:83:ee:30:2f:2c:a2:d5:30:18:ab:
19:d8:d1:bb:b1:4e:1e:9f:ac:bb:bf:8d:9a:b7:ac:
a4:c6:b3:57:9e:48:a8:1e:d3:71:ca:25:73:0b:96:
b4:50:af:6c:c6:5d:98:ae:93:66:f7:47:00:3d:2f:
25:53:fb:02:f2:5f:72:72:dc:47:16:81:fe:e3:7f:
2d:08:09:23:de:db:01:44:eb:61:f5:cd:1a:80:bc:
26:5a:93:b9:59:1d:72:29:74:a4:9c:8d:7b:c3:10:
24:49:56:0f:08:7e:6c:fe:b3:f4:90:21:ca:4b:45:
1e:2e:52:bb:52:0e:00:de:9c:32:a4:4e:f4:2c:b4:
88:da:93:66:2b:82:d2:91:d6:b2:55:68:12:4c:43:
a0:25:02:2c:38:17:c2:2e:eb:77:e0:64:3c:0b:12:
a8:77:d9:7e:40:00:be:da:75:1a:61:12:13:4c:c5:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:06:B6:ED:C3:E5:5F:7A:45:59:83:D0:C4:64:80:E1:A8:81:41
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/FxoGtu3D5V96RVmD0MRkgOGogUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
3b:16:6c:9c:a5:92:6a:fa:b6:d2:46:33:0b:5a:97:5c:13:08:
a2:de:c3:a5:27:51:ab:74:29:6e:fc:ba:0e:d4:99:63:3b:d2:
70:28:18:bc:46:e1:1f:ec:d0:e8:27:c1:ee:ea:f1:96:73:12:
88:8b:3f:44:cd:2c:64:a4:17:6a:35:a8:e3:64:d0:be:2c:a1:
52:63:32:2f:84:4c:88:52:37:8c:13:a0:fa:e2:d5:10:f0:71:
bf:31:1b:d6:29:e7:4a:df:eb:78:f6:bd:8f:65:1f:25:19:23:
33:8c:db:1b:c2:01:d0:10:b4:6a:b1:63:74:ab:06:8f:ea:f7:
94:06:3b:0c:6d:60:9e:fc:69:10:e0:10:30:25:82:43:b3:b5:
d5:80:c5:8f:fb:d8:84:b9:72:cb:3d:3b:81:23:ac:80:cb:4f:
44:0e:85:73:d2:ea:59:e3:fd:f1:66:fc:5f:70:c4:00:0f:7a:
b2:5c:ce:60:7a:30:f4:b1:4b:bc:42:48:5c:5e:2c:41:92:bb:
df:5e:af:cc:10:e5:fc:65:5a:fa:89:9c:d3:84:78:f1:9f:e8:
39:67:9f:53:d6:bf:46:c4:85:7f:12:ae:be:fd:04:d8:83:c8:
cc:05:8f:62:33:96:17:ad:6e:2e:00:6b:eb:67:06:b3:8a:a3:
0a:4e:db:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:29 2025 by rpki-client