Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/FJQfLfp5sMSeUjL0a6cjXe8MIpw.roa
File: FJQfLfp5sMSeUjL0a6cjXe8MIpw.roa (raw, json)
Hash identifier: 83MBj5NSMsnqDtBM9ISejWXHkFROggdF+J9va6KqNnQ=
Subject key identifier: 14:94:1F:2D:FA:79:B0:C4:9E:52:32:F4:6B:A7:23:5D:EF:0C:22:9C
Certificate issuer: /CN=6d960197fe589214c2259f6aea896c4e1007e986
Certificate serial: 0187FADC878E9BD328C61A9E0FD92D8D9B0D
Authority key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/FJQfLfp5sMSeUjL0a6cjXe8MIpw.roa
Signing time: Mon 08 May 2023 10:16:09 +0000
ROA not before: Mon 08 May 2023 10:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12969
IP address blocks: 185.24.0.0/22 maxlen: 22
185.24.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:dc:87:8e:9b:d3:28:c6:1a:9e:0f:d9:2d:8d:9b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d960197fe589214c2259f6aea896c4e1007e986
Validity
Not Before: May 8 10:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14941f2dfa79b0c49e5232f46ba7235def0c229c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:ca:3a:21:dd:05:f6:5b:89:54:36:2e:73:
97:a1:19:42:4b:fc:1b:12:16:7d:c7:a9:0c:f7:59:
48:31:a5:f1:03:f1:68:63:66:f7:b4:10:f5:d8:57:
b5:1f:c9:5a:19:31:7f:35:e2:c5:5c:eb:6f:4b:5c:
94:4d:eb:54:ea:c1:ec:79:96:2e:54:f3:58:09:e4:
2d:ac:5d:d3:6d:5b:d0:f1:5f:75:c0:fe:d0:29:e8:
4c:f3:74:00:d7:6e:8e:29:ce:34:25:a2:ac:6e:13:
51:bc:10:2d:26:4c:92:0d:17:d5:c2:50:a9:ad:19:
3f:96:4f:16:e5:54:a3:17:b7:26:24:99:8e:8e:85:
dd:03:27:c1:48:12:81:bd:47:c5:a1:34:f0:d6:ec:
ca:e4:a7:f9:aa:95:00:a2:6a:05:2d:b7:ce:8a:cd:
18:1b:ae:d6:8d:65:6d:ab:83:be:e8:c6:93:36:f2:
98:f6:49:f1:a5:ab:6e:5b:77:07:2e:39:d7:9c:e9:
14:19:79:1e:d0:ff:71:7d:93:c0:a2:55:01:a2:0a:
9d:20:5d:e9:35:bb:5b:18:17:d1:d9:d6:c6:7d:81:
51:6d:68:b0:b8:55:23:9f:40:da:04:d0:ad:ff:c3:
92:1f:b3:af:f1:28:5c:cf:70:6d:bf:c2:45:56:14:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:1F:2D:FA:79:B0:C4:9E:52:32:F4:6B:A7:23:5D:EF:0C:22:9C
X509v3 Authority Key Identifier:
keyid:6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/FJQfLfp5sMSeUjL0a6cjXe8MIpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:55:8c:a2:1a:d3:e6:3a:80:53:00:b6:d7:2d:99:29:ba:2e:
29:92:31:3a:cb:7a:5f:e6:19:4c:9b:a2:3b:22:79:2b:1e:a8:
d8:23:4e:c5:cf:7b:63:97:36:c0:be:1a:b2:10:ff:47:2d:12:
49:c2:5f:ac:88:4c:f5:3b:77:38:fc:2f:24:ff:cd:3b:a8:10:
d1:37:5b:85:38:d9:b2:5d:01:79:c3:2f:5b:1a:d8:0e:d5:0c:
b3:9a:2f:06:cd:37:a6:b7:4a:c1:70:c0:4e:b4:0a:08:75:81:
57:52:19:35:2f:0b:af:c2:8e:7b:8c:65:ec:88:07:05:07:3f:
f0:68:b1:8d:21:f8:fe:7e:32:d8:99:63:ae:b9:f9:9e:df:1f:
2d:5b:01:6b:b0:dc:c5:1b:5d:6f:75:74:76:52:bb:af:82:8c:
33:d2:48:80:72:b5:65:0e:a9:a2:fe:96:16:97:26:e7:83:b7:
ba:77:17:e1:ea:1a:c2:81:fe:19:7e:0b:f6:2a:03:d4:89:6e:
98:bc:10:8d:c8:61:4d:0e:f0:ef:58:c5:d1:75:a2:fc:d9:f1:
87:ac:93:1e:a8:4c:aa:59:8e:57:cd:e5:df:fa:2a:8a:28:ed:
98:08:06:20:3e:9f:af:da:3c:4a:58:b6:83:eb:1b:11:0a:5b:
13:f2:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:12 2025 by rpki-client