Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/FciKzBJuJmXxMHbhg7vtxvJaFpg.roa
File: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (raw, json)
Hash identifier: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=
Subject key identifier: 15:C8:8A:CC:12:6E:26:65:F1:30:76:E1:83:BB:ED:C6:F2:5A:16:98
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019425FD9C6567743F224D3CCC0E6198A9CA
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/FciKzBJuJmXxMHbhg7vtxvJaFpg.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51289
IP address blocks: 193.58.251.0/24 maxlen: 24
2001:67c:20c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9c:65:67:74:3f:22:4d:3c:cc:0e:61:98:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c88acc126e2665f13076e183bbedc6f25a1698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:14:95:70:4c:0c:71:52:d3:e3:d7:3a:d3:
f0:06:dd:26:4b:f4:7f:6d:50:9b:ef:25:b9:0b:bb:
49:fa:bb:1d:08:57:4a:3b:37:7c:17:30:fa:13:6a:
9e:b9:e3:3a:28:58:f4:de:99:90:2c:11:89:d6:82:
92:5b:d7:9a:e4:16:47:11:9f:14:d8:cb:3b:1b:36:
5c:65:6d:2e:6f:7b:0b:90:3c:39:8a:c3:b6:e4:14:
93:d6:97:a6:67:fa:47:be:7c:df:55:2e:44:f0:10:
db:c5:77:43:0c:57:4b:dd:1e:ea:e1:b0:c6:74:f0:
d6:2c:ad:03:cb:5a:4b:77:c3:eb:2b:97:fa:4a:77:
ca:a0:55:7a:d2:dc:e1:88:63:7b:27:89:46:33:68:
b9:96:0e:65:e2:b6:4f:4c:ae:90:e7:30:ac:33:01:
2d:1d:d2:44:c8:99:9c:a8:75:e5:64:80:7c:37:37:
b1:49:4d:b9:56:f1:5f:8a:38:f8:23:54:7a:5e:a6:
39:c3:8a:90:27:49:c9:a8:9f:0e:c4:71:9a:6c:f0:
bf:76:25:c4:06:45:33:a3:d8:7c:60:be:d4:f0:7e:
68:4b:88:12:d1:25:78:d6:56:80:14:50:95:a2:ec:
97:cb:69:26:96:8f:09:3c:a2:92:e4:8f:2a:4b:19:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:8A:CC:12:6E:26:65:F1:30:76:E1:83:BB:ED:C6:F2:5A:16:98
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/FciKzBJuJmXxMHbhg7vtxvJaFpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.251.0/24
IPv6:
2001:67c:20c::/48
Signature Algorithm: sha256WithRSAEncryption
63:ed:4c:9e:08:2e:d9:50:c8:c4:f7:12:c4:24:d5:50:05:ff:
d5:36:c2:81:f2:e5:7e:fe:1f:d1:be:58:4c:5d:bb:e7:32:09:
96:d0:8e:fb:3e:26:5f:38:93:08:78:4a:d5:2b:77:0f:1f:8d:
e1:a3:92:36:7b:38:de:a4:7f:c7:95:e8:f5:bd:b0:c9:70:ed:
df:de:e8:48:73:f7:60:b4:22:0d:ba:8d:74:4c:f3:04:0d:c5:
10:32:93:fe:62:f1:ae:94:4b:78:18:bf:92:98:bd:62:0b:ac:
af:e4:ce:a1:f4:7c:10:44:e6:5e:64:b7:5a:7e:79:b8:7c:8c:
0b:1d:0b:6c:a0:3a:9e:5a:79:ce:1b:ca:23:20:51:be:60:95:
9c:b1:47:06:71:43:93:33:ae:a1:c8:f0:ce:94:08:32:8a:16:
1d:8c:a9:23:ac:eb:35:35:db:89:27:26:d4:ea:43:e0:de:3f:
a5:9f:a2:62:4e:c2:b0:63:09:89:b0:04:a2:f4:0b:39:c9:f9:
29:fb:aa:64:1e:fb:8e:03:f2:e2:c5:f8:ed:dd:63:53:19:79:
47:27:24:cd:cb:cc:5d:e9:43:db:de:1c:71:cd:2a:8d:e8:7c:
31:ea:61:5c:87:21:46:ad:4b:8a:98:ae:b3:b9:4a:e8:e9:5f:
5b:25:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:07 2025 by rpki-client