Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa
File: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (raw, json)
Hash identifier: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=
Subject key identifier: 14:C0:7E:6C:B9:05:CE:EC:8A:AC:D3:F6:BA:02:5E:15:1E:45:BD:C0
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B5497C86B7F1B8EB7C3D2C1530CA64
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61172
IP address blocks: 46.20.99.0/24 maxlen: 24
46.20.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:49:7c:86:b7:f1:b8:eb:7c:3d:2c:15:30:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c07e6cb905ceec8aacd3f6ba025e151e45bdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:8a:5d:39:af:53:6d:66:92:0d:c3:84:7c:
e1:d8:aa:46:6c:db:68:a0:a9:99:0b:b9:f8:20:84:
d5:00:2b:1f:f0:52:45:ce:96:fa:a4:13:7b:ae:ef:
c3:da:de:f9:91:fc:32:c3:96:f5:d8:11:57:76:e5:
5e:0f:cf:18:86:81:16:d4:49:02:e2:62:89:ac:ea:
15:9e:7d:5d:ce:d9:0c:d6:dc:d7:85:bf:52:b7:03:
f6:89:6f:d4:e8:d4:86:97:0d:34:b1:02:bc:34:40:
91:9b:eb:80:f5:94:4e:f5:56:df:a9:fd:b8:96:f1:
5c:07:0d:aa:b1:fe:b7:53:4a:d9:98:dd:b9:11:f9:
53:dc:30:be:3c:f3:10:88:c2:bd:0e:00:c5:3a:4d:
bf:5a:d9:6d:33:94:a6:a7:63:11:9a:25:0f:df:63:
bf:6f:23:75:ad:35:2a:42:3d:17:22:47:4a:05:e0:
29:5a:cc:21:c1:32:94:58:3b:32:46:33:c2:76:68:
60:c8:be:f2:2d:ee:43:ff:56:34:05:85:2c:f7:9a:
0a:e1:29:c1:69:0c:1a:09:20:c3:33:0b:f9:9e:a4:
23:3c:c1:2a:89:c9:72:e7:b1:a1:cd:a4:62:8e:d6:
9b:c0:8c:fe:b3:d5:3f:ee:88:b1:f6:7b:6d:79:61:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:7E:6C:B9:05:CE:EC:8A:AC:D3:F6:BA:02:5E:15:1E:45:BD:C0
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:95:c8:2d:68:fd:87:e4:95:6b:31:cb:4d:b8:97:f5:f1:75:
fa:21:76:87:d0:f8:4e:28:d7:a0:b1:cf:b7:ca:19:d0:34:a8:
6c:0e:98:62:ee:7c:da:c7:f5:10:77:a2:23:96:82:d9:e3:68:
fc:0e:cd:e0:fe:01:c7:1d:38:a6:35:9b:4f:b1:d5:36:ad:52:
8d:06:4c:1e:cd:65:f9:7d:e1:28:fd:50:86:ac:87:e3:dd:f4:
43:56:1b:f9:85:03:0d:c5:c0:a6:5a:d8:87:ce:17:bb:03:66:
78:35:7d:7e:56:31:66:98:34:0d:01:3a:3d:75:c4:8e:2e:48:
f3:04:42:47:a2:5f:6b:22:37:5e:88:d0:ad:e5:7d:74:31:26:
6b:30:2d:88:4d:e5:d1:3f:9f:18:f7:46:2e:1d:99:5d:bf:ab:
eb:e9:40:e7:19:80:af:34:13:23:53:1f:b6:97:f9:a8:e3:e3:
7e:cc:05:38:f7:11:7e:21:84:56:4a:6b:a3:f5:27:08:7a:25:
4a:c4:5f:06:5c:c3:34:d7:8b:84:ca:bb:a3:7a:7b:a4:a4:3c:
04:39:70:7f:cb:85:d0:6f:3c:b8:fd:01:f0:e0:1a:da:44:1a:
7f:08:1f:21:50:9d:5f:6f:bc:b5:f0:98:06:f6:b1:1e:b3:a1:
73:a1:e0:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntUl8hrfxuOt8PSwVMMpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjUwMTAyMTU0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGMwN2U2Y2I5MDVjZWVjOGFhY2QzZjZiYTAyNWUxNTFlNDViZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1yKXTmvU21mkg3DhHzh2KpGbNto
oKmZC7n4IITVACsf8FJFzpb6pBN7ru/D2t75kfwyw5b12BFXduVeD88YhoEW1EkC
4mKJrOoVnn1dztkM1tzXhb9StwP2iW/U6NSGlw00sQK8NECRm+uA9ZRO9Vbfqf24
lvFcBw2qsf63U0rZmN25EflT3DC+PPMQiMK9DgDFOk2/WtltM5Smp2MRmiUP32O/
byN1rTUqQj0XIkdKBeApWswhwTKUWDsyRjPCdmhgyL7yLe5D/1Y0BYUs95oK4SnB
aQwaCSDDMwv5nqQjPMEqicly57GhzaRijtabwIz+s9U/7oix9ntteWGVowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBTAfmy5Bc7siqzT9roCXhUeRb3AMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvRk1CLWJMa0Z6dXlLck5QMnVnSmVGUjVGdmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRjAwQA
LhRrMA0GCSqGSIb3DQEBCwUAA4IBAQBvlcgtaP2H5JVrMctNuJf18XX6IXaH0PhO
KNegsc+3yhnQNKhsDphi7nzax/UQd6IjloLZ42j8Ds3g/gHHHTimNZtPsdU2rVKN
BkwezWX5feEo/VCGrIfj3fRDVhv5hQMNxcCmWtiHzhe7A2Z4NX1+VjFmmDQNATo9
dcSOLkjzBEJHol9rIjdeiNCt5X10MSZrMC2ITeXRP58Y90YuHZldv6vr6UDnGYCv
NBMjUx+2l/mo4+N+zAU49xF+IYRWSmuj9ScIeiVKxF8GXMM014uEyrujenukpDwE
OXB/y4XQbzy4/QHw4BraRBp/CB8hUJ1fb7y18JgG9rEes6FzoeDv
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:42 2025 by rpki-client