Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/FutcyNGLzWwuDtE-VekG8erVMdg.roa
File: FutcyNGLzWwuDtE-VekG8erVMdg.roa (raw, json)
Hash identifier: 6f0jnc/DJBxZuTF3cWm1f/MGGuu0leXc+1byhdM+ElA=
Subject key identifier: 16:EB:5C:C8:D1:8B:CD:6C:2E:0E:D1:3E:55:E9:06:F1:EA:D5:31:D8
Certificate issuer: /CN=1d7c51255cb0653562fb869911f05d45414e61c5
Certificate serial: F6C6F5
Authority key identifier: 1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/FutcyNGLzWwuDtE-VekG8erVMdg.roa
Signing time: Sat 01 Jan 2022 05:53:12 +0000
ROA not before: Sat 01 Jan 2022 05:53:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 188.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16172789 (0xf6c6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d7c51255cb0653562fb869911f05d45414e61c5
Validity
Not Before: Jan 1 05:53:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16eb5cc8d18bcd6c2e0ed13e55e906f1ead531d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:b3:09:cb:3e:af:9b:ff:26:8f:1d:a8:b9:
c8:2a:54:3a:dd:a9:fe:f1:64:3e:b5:79:a1:c3:a4:
ed:dc:08:11:43:e7:18:86:c7:3a:25:dc:59:0d:8b:
00:08:e7:d8:32:53:08:36:03:6a:38:00:3d:f1:40:
be:bd:d5:bb:68:5e:3f:fb:71:5a:f7:ce:55:7d:f4:
d9:79:04:c0:64:8e:30:d9:f1:b9:50:4b:55:7a:1b:
15:4f:a6:47:64:1a:b1:f2:3b:03:f4:f0:e7:00:75:
a7:1d:04:99:72:81:8d:67:9b:cd:28:d0:65:62:7a:
da:16:9d:e9:d4:0c:a7:49:94:d6:48:c4:c5:26:74:
54:84:42:0a:9c:d6:c7:ed:ba:e8:ac:5e:74:7b:40:
7d:38:f8:e6:57:cf:f5:53:1a:6d:98:2d:d1:9e:53:
70:7b:fc:b2:7b:2f:38:0b:79:d9:22:6f:ff:a6:71:
70:46:2f:01:9b:04:d3:4f:17:5e:5b:62:ab:8b:e2:
bb:f0:39:fc:62:ea:71:92:a6:9f:4a:0c:4f:b4:08:
4a:3b:19:ff:f4:b5:2b:1f:de:f7:ac:47:65:99:4e:
b2:2a:12:76:4d:8e:15:b1:8a:a2:59:86:94:93:fc:
f4:92:17:ab:f9:a5:94:78:b0:16:1d:29:f6:3b:fd:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:5C:C8:D1:8B:CD:6C:2E:0E:D1:3E:55:E9:06:F1:EA:D5:31:D8
X509v3 Authority Key Identifier:
keyid:1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/FutcyNGLzWwuDtE-VekG8erVMdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:00:6f:d6:98:51:af:48:bc:a5:68:51:c1:cb:2e:71:5f:44:
d2:b8:6a:2d:87:1d:1a:cc:d9:7b:3a:e2:57:43:8b:2e:02:fb:
97:f2:50:7a:83:55:5d:12:b1:a4:38:35:4e:94:fe:16:5a:ea:
ef:49:5f:83:29:a6:4e:a2:e6:9d:0a:3c:49:b0:64:50:de:c1:
8a:a5:20:ef:4d:27:80:a9:02:e8:f6:90:c2:80:77:1e:da:96:
92:88:14:e1:b2:dc:b2:08:81:0a:42:35:0b:a5:54:40:1f:0b:
70:fe:24:1e:67:86:9b:19:8c:48:92:d9:e4:07:d7:24:f3:8e:
2a:8f:87:1b:93:e0:90:6e:cf:4f:9c:fc:f2:a9:11:df:91:04:
ba:71:c0:02:2f:0d:48:8d:31:a2:77:b6:10:2d:e6:f2:e2:c4:
28:0c:0f:6a:98:2a:c7:35:9b:75:86:eb:c5:f3:21:45:78:ce:
4e:71:3c:d0:2c:0c:8a:d5:30:22:e8:c9:79:29:78:cc:41:74:
8b:85:da:8d:09:b1:33:23:02:c5:c7:ac:0b:2d:83:2e:41:b3:
3a:af:36:1e:ce:2a:a3:2f:6a:b4:58:98:aa:04:8a:d5:36:fc:
2b:1e:b7:ba:8f:d8:99:11:fa:42:6b:cb:0e:48:08:02:21:d1:
86:4a:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:10 2025 by rpki-client