Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa
File: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (raw, json)
Hash identifier: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=
Subject key identifier: 7D:C2:5B:FB:A5:78:4B:C1:A0:B7:85:E4:79:0E:33:E0:D7:8E:BC:18
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01942669E990FE927643B13A6C5A4AC05D55
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa
Signing time: Thu 02 Jan 2025 09:47:42 +0000
ROA not before: Thu 02 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 193.9.30.0/23 maxlen: 23
2a0f:9a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:e9:90:fe:92:76:43:b1:3a:6c:5a:4a:c0:5d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jan 2 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc25bfba5784bc1a0b785e4790e33e0d78ebc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:3c:0d:4c:8c:b6:a8:bc:dd:df:9b:d7:1c:
66:b1:32:7f:47:af:10:cc:d5:89:df:2a:1e:96:54:
22:0a:69:db:a4:4a:64:c7:3b:f2:d9:ea:4d:c9:d7:
cc:6a:14:52:76:39:5a:65:ae:02:02:92:34:bf:91:
9a:1f:26:21:97:bb:bb:7a:fc:a4:3a:38:03:37:d7:
b5:f4:0f:00:ea:cd:ba:52:33:de:15:c1:c5:ba:26:
b0:f2:8a:be:0a:7d:51:fb:ff:06:a1:a0:95:1b:5e:
ae:ca:36:aa:6d:b6:1b:4c:d3:5c:b7:84:4f:95:89:
ca:2b:68:31:cf:dc:a6:82:db:2f:6e:1e:41:13:d0:
9f:f8:b1:1d:12:ca:3f:f2:f2:f6:1c:73:14:06:9d:
bf:d6:a2:39:d4:8e:b9:15:7a:e0:ff:1b:f8:86:74:
0f:54:f3:e1:8c:fb:3f:c4:76:f1:9c:3e:02:4c:79:
28:bc:b0:ef:16:d1:dc:74:63:15:19:3b:4c:8a:27:
a9:a0:ec:4e:4a:c3:fc:1e:55:19:a8:cb:23:a7:c9:
b7:ce:a2:d6:85:b4:47:b9:54:ad:72:d3:fc:75:f6:
c6:c0:41:00:40:16:2a:12:e8:bb:7b:00:76:e7:86:
a7:e0:69:2e:18:d9:ba:f2:76:aa:a5:8a:c2:fd:bb:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:5B:FB:A5:78:4B:C1:A0:B7:85:E4:79:0E:33:E0:D7:8E:BC:18
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.30.0/23
IPv6:
2a0f:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
c0:3c:55:28:e5:4b:a3:57:82:9f:6a:fc:52:10:81:c8:8f:47:
26:b7:5e:2e:d8:12:f6:7e:8b:08:de:3d:f5:30:01:45:8d:cf:
53:51:25:ff:dd:04:bf:1c:56:20:2f:e3:47:51:51:94:0d:e8:
36:4c:ba:52:a0:f4:14:05:c3:3e:9a:eb:35:9c:08:35:00:38:
42:0a:31:ad:00:e2:a1:66:b6:91:b0:0a:1d:79:b4:9a:d8:f3:
4a:04:00:c0:dc:f0:30:88:10:9b:26:cd:85:ba:ae:65:de:ea:
86:00:75:c2:ae:46:c3:23:32:5d:b6:b1:95:e3:f9:d5:34:e5:
e7:38:05:1f:c7:86:63:03:f1:31:ba:a5:9d:4f:97:c9:56:77:
c4:4a:60:7e:a5:cd:ec:1b:30:d5:10:e4:b4:76:68:ce:4b:fd:
b4:eb:80:6c:bb:5c:00:14:de:d1:91:e7:2d:54:55:c5:c5:d8:
77:c3:3e:8b:6b:09:b0:ca:48:d8:88:70:55:19:81:0d:fb:ae:
2d:67:83:a2:43:ff:3b:2a:90:26:d4:12:f1:7d:f9:99:35:21:
ee:fb:44:e8:f7:e6:70:0c:7c:4f:d9:ee:ae:ae:1b:7c:15:54:
d0:32:54:ec:cf:41:30:2a:56:1b:c3:0c:8c:75:d9:87:2b:1c:
04:d9:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:28:57 2025 by rpki-client