Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FYwivhMWcLLH7xTADx5pxI84pio.roa
File: FYwivhMWcLLH7xTADx5pxI84pio.roa (raw, json)
Hash identifier: FH2w2cr2ED3YeVFzGKI/LNGSwKFS/ODWh9HmWyqZuJs=
Subject key identifier: 15:8C:22:BE:13:16:70:B2:C7:EF:14:C0:0F:1E:69:C4:8F:38:A6:2A
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0195BDAD5C72B439BBB88CCD6287A12C01C1
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FYwivhMWcLLH7xTADx5pxI84pio.roa
Signing time: Sat 22 Mar 2025 11:46:49 +0000
ROA not before: Sat 22 Mar 2025 11:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.0.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.21.0/24 maxlen: 24
144.56.22.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bd:ad:5c:72:b4:39:bb:b8:8c:cd:62:87:a1:2c:01:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Mar 22 11:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158c22be131670b2c7ef14c00f1e69c48f38a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:db:81:d4:08:d0:41:e3:77:f9:7b:e0:cd:
ba:78:8b:07:55:ab:13:f0:ff:a6:b7:4e:7d:c0:fb:
31:97:11:a7:11:0a:c3:fb:b6:90:7b:11:b9:6d:bd:
25:e0:80:03:33:c0:27:dd:e4:7a:d2:c7:4c:2c:2b:
65:8f:47:44:3e:39:9a:47:81:bb:15:dd:f0:83:e7:
61:b4:5e:24:49:92:b5:c4:de:40:ec:74:73:cc:11:
9b:38:6c:2d:d0:85:a5:f8:9b:fe:b7:7b:88:de:15:
8e:8e:02:f4:6f:60:7c:e4:8e:71:10:bb:89:a0:b4:
96:52:21:48:60:44:77:89:9e:29:7d:ab:06:1d:48:
8d:2d:37:04:21:df:63:8e:46:76:22:8a:89:7e:94:
3e:f0:30:d6:95:4b:8e:fa:99:9b:03:65:4f:c2:53:
b8:00:f8:b0:4e:95:cb:6a:47:2b:be:f7:a7:51:7f:
4f:d7:b2:55:4a:c1:32:f9:f3:b6:29:39:17:5c:62:
a1:1c:e4:de:af:71:6e:64:77:df:3d:1d:6d:70:1b:
91:07:58:ac:b1:99:b3:89:b1:9c:2d:fe:04:96:0d:
a3:52:8a:a2:71:3f:92:5d:6d:cb:8e:16:5c:4e:53:
88:f6:25:67:93:ed:0d:e5:78:39:53:70:71:24:7b:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:22:BE:13:16:70:B2:C7:EF:14:C0:0F:1E:69:C4:8F:38:A6:2A
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FYwivhMWcLLH7xTADx5pxI84pio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.0.0/24
144.56.13.0/24
144.56.20.0-144.56.22.255
144.56.24.0/24
144.56.27.0-144.56.28.255
144.56.31.0/24
144.56.33.0-144.56.34.255
Signature Algorithm: sha256WithRSAEncryption
31:cd:0c:30:06:ff:2f:9b:85:5e:07:b1:02:47:6c:69:38:fe:
a5:d2:e8:59:16:2c:43:80:b3:3b:bc:82:b1:9a:b3:a8:0b:4c:
b2:4a:fa:de:ef:e1:25:00:d0:a0:16:9f:51:9a:cc:7b:8f:59:
97:8b:e3:49:f9:eb:88:b0:a6:8e:a1:af:57:97:7c:21:c0:ca:
2a:90:27:78:45:4f:82:e9:98:20:15:76:4f:0b:11:b4:ac:dc:
a5:19:7e:ec:e5:ff:31:19:47:27:c0:21:d5:f2:df:1f:9c:02:
84:c9:22:a2:a7:84:7d:fc:64:ea:c6:22:57:87:d8:f8:25:e8:
55:03:2d:2c:68:2a:86:e7:00:77:22:ef:ec:c0:61:d2:0c:32:
1f:29:98:db:2c:4e:8a:9a:ba:46:2d:1f:15:ad:61:e9:1a:bd:
f2:96:c9:ce:ae:43:a9:c1:c4:ca:76:04:61:ef:d5:a9:20:7f:
d8:ae:6b:0d:f1:05:ed:97:ee:39:ad:a4:a9:7d:38:37:12:01:
55:54:72:24:ee:3c:e1:87:ec:d1:b2:1a:c2:23:98:70:da:df:
21:6f:07:63:23:be:8c:8e:f8:6b:a0:c3:30:26:79:cd:9e:59:
3e:93:02:29:36:68:0a:3d:92:dc:c2:8b:d4:57:60:d2:05:b8:
6a:df:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:23:42 2025 by rpki-client