Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FdGsnJ5FLSOd35QGWiCkxWoyevI.roa
File: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (raw, json)
Hash identifier: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=
Subject key identifier: 15:D1:AC:9C:9E:45:2D:23:9D:DF:94:06:5A:20:A4:C5:6A:32:7A:F2
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274736FED7608B6DA402635487B217B0
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FdGsnJ5FLSOd35QGWiCkxWoyevI.roa
Signing time: Thu 02 Jan 2025 13:49:26 +0000
ROA not before: Thu 02 Jan 2025 13:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212369
IP address blocks: 193.223.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:36:fe:d7:60:8b:6d:a4:02:63:54:87:b2:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d1ac9c9e452d239ddf94065a20a4c56a327af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:0d:0a:d8:29:24:b0:91:2d:36:e2:db:12:
bc:32:0f:c7:95:1d:a5:2e:f6:3a:6d:99:fe:f7:2c:
dc:1b:d7:be:d0:8d:ee:7c:39:e5:7f:c3:80:60:e4:
a3:c4:e3:ab:7b:8a:49:5b:82:54:e0:34:38:fd:53:
29:20:2c:e3:11:2a:6e:67:87:fe:d5:85:eb:58:c6:
3f:fa:1f:ac:38:ff:c0:43:02:cc:b1:d3:25:4c:b4:
15:8e:ca:ca:60:28:4a:72:81:9d:31:80:f8:ba:c4:
94:35:1d:03:41:8a:4f:6a:22:12:11:00:e9:00:a2:
5d:a0:ea:9c:7c:fc:81:f2:3a:ae:1e:55:a6:cc:27:
ea:2a:f9:db:8e:54:13:bb:e2:e2:33:8a:dd:85:f3:
0a:93:3f:51:f5:a8:cc:09:f4:bc:9c:05:73:36:5b:
30:c3:eb:7c:a0:13:41:da:3e:12:c0:19:d4:de:bd:
5c:13:0c:4a:23:6d:06:6c:69:76:74:4f:0f:2b:cb:
c6:66:15:0a:95:fb:51:3f:e0:df:f2:ef:13:d9:ef:
fc:7a:9c:e8:22:47:f2:3f:1a:3a:3b:87:55:9f:74:
99:ba:d9:b7:4d:b4:ed:04:f8:2f:64:4a:ca:be:7d:
a7:2e:16:b2:b8:73:42:71:ff:e2:eb:1d:10:82:bb:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:AC:9C:9E:45:2D:23:9D:DF:94:06:5A:20:A4:C5:6A:32:7A:F2
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FdGsnJ5FLSOd35QGWiCkxWoyevI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:fb:05:3f:9d:5c:6a:1c:c3:d4:d8:28:48:0d:df:3c:53:
43:52:ac:07:60:73:e8:62:9e:2e:3a:1e:bb:a7:5d:a3:c1:be:
21:61:7b:fe:a4:33:09:4d:82:d8:a1:ba:88:d8:ac:74:8d:06:
51:f3:d1:ce:db:7b:ab:41:87:29:ca:52:20:22:c6:0a:f6:36:
81:ac:df:48:e4:d9:84:ba:c2:dd:ba:1b:58:e3:e6:89:51:d7:
3d:c5:ca:ed:99:7d:9a:b6:af:5e:97:ec:dc:e5:d8:c1:76:5f:
96:58:dc:83:37:df:ce:7d:0c:1d:d9:fe:50:fa:0b:8d:24:b0:
70:be:aa:18:7f:ff:2b:12:69:bc:3b:b4:03:ae:98:7a:0d:28:
9a:ab:01:3a:54:db:1f:d6:b8:a6:d8:95:79:5c:49:b7:09:a3:
cf:c7:c3:62:a1:91:49:39:bb:e3:30:4e:83:a5:96:ef:8a:d8:
a5:70:1d:c3:5a:96:52:3f:81:ea:eb:0e:6a:6f:2d:90:08:f8:
e5:90:4f:2e:af:4b:a3:6c:b2:cc:f9:0a:f6:05:79:be:7d:53:
da:69:7d:6a:3b:41:d1:b7:32:be:2c:da:1e:e0:14:06:63:1e:
40:aa:91:49:ab:9c:a7:27:f2:82:14:ad:8d:1e:37:ba:ce:b6:
83:c2:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:43 2025 by rpki-client