Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ftITG5X9Z2Cd2IsO4BPtjfRHZHY.roa
File: ftITG5X9Z2Cd2IsO4BPtjfRHZHY.roa (raw, json)
Hash identifier: LxwPLG9jtEbnCRf+96HNdNoDI0pRix6U46gnVGkNyLk=
Subject key identifier: 7E:D2:13:1B:95:FD:67:60:9D:D8:8B:0E:E0:13:ED:8D:F4:47:64:76
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019422FB596A2322EC12BAE3FE58D7ADBC23
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ftITG5X9Z2Cd2IsO4BPtjfRHZHY.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58289
IP address blocks: 91.147.111.0/24 maxlen: 24
92.240.243.0/24 maxlen: 24
185.162.234.0/24 maxlen: 24
193.43.251.0/24 maxlen: 24
194.31.133.0/24 maxlen: 24
194.31.135.0/24 maxlen: 24
212.108.87.0/24 maxlen: 24
2a0e:6600::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:59:6a:23:22:ec:12:ba:e3:fe:58:d7:ad:bc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ed2131b95fd67609dd88b0ee013ed8df4476476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:55:a5:e2:d6:23:be:d5:35:5b:91:46:12:
b4:eb:2f:bb:6a:ff:bc:f7:50:05:55:39:9c:eb:1f:
04:cc:38:50:36:90:a2:10:8c:be:f7:0d:90:64:34:
75:c0:62:c4:68:8f:16:d1:40:02:14:8d:b7:0d:ea:
4a:c1:92:c6:d9:4a:68:02:68:80:c4:72:8a:0e:2f:
e1:f3:e6:dc:f9:da:aa:cd:fe:d9:2b:39:a5:a2:ad:
24:ee:4d:4b:12:3d:40:27:57:c6:13:e3:d2:7b:6a:
0c:c6:77:98:50:9f:75:c1:a3:d1:f7:ed:ba:0a:3b:
c5:30:c8:0b:05:c6:5f:f4:e7:30:09:90:b0:0b:15:
8c:6c:86:f0:41:8e:4c:ef:93:67:ab:70:00:91:bb:
7e:28:0e:6e:f6:0c:86:b9:f1:46:0a:34:99:10:08:
9f:58:d7:68:f3:fd:b5:21:ee:a3:97:26:7c:14:96:
bf:f6:ad:74:c4:30:3f:12:4a:ac:5c:f2:00:f0:b7:
f2:25:f4:23:44:19:67:b2:dd:f3:48:8e:01:e8:65:
b9:9e:f2:39:1d:e6:02:d3:a5:35:69:9d:8b:05:14:
9a:90:cf:8a:10:f4:0a:e1:e9:3b:f4:8d:52:ec:87:
91:56:1c:ff:9f:5e:2e:e5:ab:5e:2a:c0:62:26:69:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:13:1B:95:FD:67:60:9D:D8:8B:0E:E0:13:ED:8D:F4:47:64:76
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/ftITG5X9Z2Cd2IsO4BPtjfRHZHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.111.0/24
92.240.243.0/24
185.162.234.0/24
193.43.251.0/24
194.31.133.0/24
194.31.135.0/24
212.108.87.0/24
IPv6:
2a0e:6600::/48
Signature Algorithm: sha256WithRSAEncryption
60:d5:39:1d:18:ff:35:69:94:15:db:41:ff:7b:e2:7d:1e:56:
18:20:6e:a7:34:c2:c0:e0:f9:b4:1a:60:85:fa:00:cf:a4:be:
a4:6f:33:d6:bb:43:9c:0f:1d:75:5d:ca:b4:43:83:bf:4d:1a:
39:88:90:7f:bd:88:23:89:18:ca:44:25:cf:e5:9d:c6:c8:4a:
8a:e9:37:e9:d0:5c:39:37:45:62:de:7e:0a:65:d0:e0:3d:60:
e8:84:c1:83:b4:3b:5c:34:d2:87:da:fd:1c:bb:95:14:36:e3:
e1:84:52:47:a1:8a:61:ed:e7:fb:b4:91:f3:11:a7:6b:ab:a5:
74:4c:82:16:cc:bf:09:1a:cc:22:b5:79:19:4e:2e:91:c6:92:
b7:eb:ac:bc:d7:5d:2b:0f:45:c5:08:07:fe:03:c6:4b:e6:56:
5d:71:dc:74:0e:85:6c:bd:6a:29:a7:ac:ec:88:10:1b:35:35:
17:bf:d7:64:a4:e6:0e:f4:03:4d:d1:c0:2a:1e:8f:4d:af:6d:
40:83:f2:57:b4:e5:df:1c:bc:65:de:49:32:1e:39:d5:47:01:
cf:c4:e1:56:0e:c4:56:f2:80:5e:4c:bd:df:e0:42:ef:76:39:
ba:22:65:f5:27:39:77:58:9a:c2:55:ed:14:74:4b:2a:69:3f:
a8:27:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:26 2025 by rpki-client