Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/FPUcfMp_O3C_NLJht3kVCbJEoOg.roa
File: FPUcfMp_O3C_NLJht3kVCbJEoOg.roa (raw, json)
Hash identifier: HQQKSAkfeerUla8ZRtCATwfZBEM6J7GhqzNlzQt4/Wc=
Subject key identifier: 14:F5:1C:7C:CA:7F:3B:70:BF:34:B2:61:B7:79:15:09:B2:44:A0:E8
Certificate issuer: /CN=8ccaedf2b9faac0c292f8e5ad47093140f385da0
Certificate serial: 01856F42CFEBB07D88576EBCC52D39422D38
Authority key identifier: 8C:CA:ED:F2:B9:FA:AC:0C:29:2F:8E:5A:D4:70:93:14:0F:38:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMrt8rn6rAwpL45a1HCTFA84XaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/FPUcfMp_O3C_NLJht3kVCbJEoOg.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 146.19.206.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cf:eb:b0:7d:88:57:6e:bc:c5:2d:39:42:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccaedf2b9faac0c292f8e5ad47093140f385da0
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f51c7cca7f3b70bf34b261b7791509b244a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:f0:44:32:7a:da:04:cf:3b:ba:fd:3d:68:
fc:0a:3a:7b:d0:9c:50:ae:94:8d:f9:8b:ce:2b:7d:
0f:40:3e:c8:f9:d2:1c:84:69:34:bf:b7:cf:a1:9c:
9e:3a:aa:d5:80:5d:69:23:0b:05:78:32:ed:c0:ea:
f8:64:fb:2b:3e:d3:3e:b8:ac:4c:f0:7c:ea:33:ca:
a5:bf:c2:98:da:a2:fc:29:ee:88:3f:58:7b:54:44:
b1:5f:6a:0a:c8:19:5a:07:b3:10:de:5d:da:9c:03:
42:f2:c9:73:c6:b2:bc:62:5d:9b:cb:7d:65:36:62:
79:aa:ef:35:64:92:72:10:d2:d8:6a:f2:b5:5d:ee:
4b:aa:a3:0c:7e:2b:71:ef:59:88:e0:9d:3b:89:a3:
1c:57:8c:e4:b2:da:1f:bf:fc:72:c5:39:23:cd:0f:
5c:52:b3:82:bc:5d:5d:97:4e:c2:dd:06:1f:20:e2:
1d:d9:66:83:4c:77:f6:96:07:05:5f:19:38:55:c2:
20:b9:f2:a1:22:00:c4:e6:94:6c:24:78:cf:21:e6:
cb:7b:f5:c0:fc:09:9b:9c:29:0e:d5:e0:8f:5c:4e:
31:24:c3:c0:10:dc:8a:7b:21:21:70:f0:32:85:f2:
4f:e6:f6:c7:9c:29:c6:e1:f0:95:b4:ff:8d:fb:84:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:1C:7C:CA:7F:3B:70:BF:34:B2:61:B7:79:15:09:B2:44:A0:E8
X509v3 Authority Key Identifier:
keyid:8C:CA:ED:F2:B9:FA:AC:0C:29:2F:8E:5A:D4:70:93:14:0F:38:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMrt8rn6rAwpL45a1HCTFA84XaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/FPUcfMp_O3C_NLJht3kVCbJEoOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/374e62-723c-4c38-a693-468ac4e2bc88/1/jMrt8rn6rAwpL45a1HCTFA84XaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4a:05:fb:09:a4:23:59:e0:7d:6a:48:fb:38:bf:37:3c:f2:
c2:eb:ef:0f:f3:ab:eb:af:64:e9:dd:d3:70:49:d8:8f:72:e2:
79:4c:6a:5e:d4:65:83:3e:0a:b6:02:9c:bb:5c:dd:7a:90:72:
fd:c1:c0:e3:cf:be:bf:61:35:ce:f7:34:ca:d3:38:7d:a3:75:
92:e0:f1:0a:88:d9:b6:15:51:fc:c8:fc:8f:86:38:3c:20:13:
29:46:72:fd:07:4e:8e:b2:98:29:3d:93:66:fc:bd:64:95:a4:
cb:1d:4a:97:a5:31:ba:fe:d7:97:d3:42:aa:87:b0:f9:bf:78:
e6:f2:79:47:e6:ab:12:3b:dd:c1:16:bd:18:c4:03:44:ad:a5:
e7:95:2f:3d:ab:59:dc:4a:3c:72:37:b5:1c:23:18:6a:f5:6d:
4b:d8:ec:44:00:73:5e:e7:64:a8:bb:cf:38:47:93:bf:75:c4:
3d:4d:0b:3e:d4:e2:1d:fe:ea:f0:7e:05:7d:5a:38:e9:4a:c3:
9b:36:20:9a:6d:fc:4b:e5:b5:32:9e:7e:02:d6:c8:9c:da:b9:
f0:83:ec:e2:ec:50:00:f7:2e:2f:bd:7c:61:d7:85:37:80:0d:
64:e0:7e:97:ea:51:61:cc:e0:4a:78:04:24:82:9c:5f:7c:0f:
59:a2:0d:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQs/rsH2IV268xS05Qi04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjY2FlZGYyYjlmYWFjMGMyOTJmOGU1YWQ0NzA5MzE0MGYz
ODVkYTAwHhcNMjMwMTAxMjEzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGY1MWM3Y2NhN2YzYjcwYmYzNGIyNjFiNzc5MTUwOWIyNDRhMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yTwRDJ62gTPO7r9PWj8Cjp70JxQ
rpSN+YvOK30PQD7I+dIchGk0v7fPoZyeOqrVgF1pIwsFeDLtwOr4ZPsrPtM+uKxM
8HzqM8qlv8KY2qL8Ke6IP1h7VESxX2oKyBlaB7MQ3l3anANC8slzxrK8Yl2by31l
NmJ5qu81ZJJyENLYavK1Xe5LqqMMfitx71mI4J07iaMcV4zkstofv/xyxTkjzQ9c
UrOCvF1dl07C3QYfIOId2WaDTHf2lgcFXxk4VcIgufKhIgDE5pRsJHjPIebLe/XA
/AmbnCkO1eCPXE4xJMPAENyKeyEhcPAyhfJP5vbHnCnG4fCVtP+N+4T1dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBT1HHzKfztwvzSyYbd5FQmyRKDoMB8GA1UdIwQY
MBaAFIzK7fK5+qwMKS+OWtRwkxQPOF2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak1ydDhybjZyQXdwTDQ1YTFIQ1RGQTg0WGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNzRlNjItNzIzYy00YzM4LWE2OTMt
NDY4YWM0ZTJiYzg4LzEvRlBVY2ZNcF9PM0NfTkxKaHQza1ZDYkpFb09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNzRlNjItNzIzYy00YzM4LWE2OTMtNDY4YWM0ZTJiYzg4
LzEvak1ydDhybjZyQXdwTDQ1YTFIQ1RGQTg0WGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPOMA0G
CSqGSIb3DQEBCwUAA4IBAQANSgX7CaQjWeB9akj7OL83PPLC6+8P86vrr2Tp3dNw
SdiPcuJ5TGpe1GWDPgq2Apy7XN16kHL9wcDjz76/YTXO9zTK0zh9o3WS4PEKiNm2
FVH8yPyPhjg8IBMpRnL9B06OspgpPZNm/L1klaTLHUqXpTG6/teX00Kqh7D5v3jm
8nlH5qsSO93BFr0YxANEraXnlS89q1ncSjxyN7UcIxhq9W1L2OxEAHNe52Sou884
R5O/dcQ9TQs+1OId/urwfgV9WjjpSsObNiCabfxL5bUynn4C1sic2rnwg+zi7FAA
9y4vvXxh14U3gA1k4H6X6lFhzOBKeAQkgpxffA9Zog1e
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:23 2025 by rpki-client