Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FSR3AAG-EvwI9eOKRBND83EtylA.roa
File: FSR3AAG-EvwI9eOKRBND83EtylA.roa (raw, json)
Hash identifier: MWLkly+m+lyGXOv1GqOU2ECD/cyM1bJM0fIOO6W3f3Q=
Subject key identifier: 15:24:77:00:01:BE:12:FC:08:F5:E3:8A:44:13:43:F3:71:2D:CA:50
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019397FE5F088E5D44ACDCE12415677B5778
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FSR3AAG-EvwI9eOKRBND83EtylA.roa
Signing time: Thu 05 Dec 2024 18:04:10 +0000
ROA not before: Thu 05 Dec 2024 18:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214311
IP address blocks: 103.83.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:fe:5f:08:8e:5d:44:ac:dc:e1:24:15:67:7b:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Dec 5 18:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1524770001be12fc08f5e38a441343f3712dca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:71:12:32:c8:35:8c:5a:3b:43:37:98:0a:
76:f9:18:d5:0f:e6:69:93:8a:b2:04:f5:3a:84:85:
04:94:96:49:ea:6f:ac:90:62:f8:e0:bc:4c:f4:f8:
67:f6:12:85:45:0e:14:2e:7e:b8:b4:02:3d:b2:1e:
9b:4d:1a:aa:dc:3f:2f:9a:72:28:dd:30:ba:02:fc:
96:d1:be:99:a5:01:c0:72:84:7c:b0:c0:3b:d8:33:
c0:91:35:40:e9:97:cf:6b:b0:f0:72:d7:86:02:5a:
74:cb:40:34:2b:f7:df:4c:f3:3c:81:d5:6f:62:72:
80:be:d5:da:43:af:8c:30:e2:a6:70:88:d4:8f:f6:
15:89:c8:0d:dd:1f:b0:c7:86:7e:6e:80:a7:b7:9f:
a7:1f:b4:95:d5:96:91:ab:6b:ec:ea:5a:3b:0b:4a:
95:5e:b7:fe:28:79:4a:48:87:20:11:7b:d5:c2:a7:
00:e1:f5:f6:36:71:ca:10:07:ca:2e:f7:54:18:46:
2b:3b:51:b9:0d:bd:80:de:5d:48:d3:a8:81:05:7f:
2d:7d:9d:59:01:c4:3f:b6:8f:f3:ad:f9:aa:3f:da:
b0:a4:2f:37:59:18:8b:20:72:dd:7f:b1:6a:7c:6a:
cc:d9:d5:40:7f:1a:48:1c:d6:2f:ce:d6:09:5c:86:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:77:00:01:BE:12:FC:08:F5:E3:8A:44:13:43:F3:71:2D:CA:50
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/FSR3AAG-EvwI9eOKRBND83EtylA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6e:8e:7f:25:44:38:da:3f:d9:a2:ae:4c:ec:82:73:03:97:
9c:85:14:77:f9:19:41:36:38:19:c5:67:4c:e9:2d:76:cd:08:
fb:9a:d3:52:33:94:b1:5d:51:e0:d7:b4:a3:e0:5e:97:0e:1f:
76:b7:a9:f5:92:6b:f3:4f:03:27:0b:cd:0e:87:00:72:8e:0e:
65:f3:ef:de:3b:c8:24:be:cf:e2:ad:f8:79:e4:db:7f:0b:b4:
f8:e4:92:1d:18:76:5a:03:4d:cd:8b:93:e7:20:52:1c:92:cf:
6e:e4:8c:7b:16:14:ef:19:f0:76:fe:5a:96:85:28:b2:fd:77:
2b:6b:99:b9:83:72:72:b3:80:d6:c4:06:2c:7f:82:aa:99:3c:
64:55:dd:cc:37:56:36:2f:ed:10:d3:8f:51:05:bd:69:eb:fb:
81:65:37:d9:7f:9d:8f:c1:4a:04:b8:75:85:1c:10:43:87:0a:
da:57:9a:83:c5:f1:a6:69:e4:d8:86:3b:17:c9:66:e5:ad:38:
4f:34:11:92:32:db:94:7f:4f:b9:08:af:92:a8:6d:61:fc:f1:
77:49:8d:9d:81:53:51:2c:31:82:e7:8a:a5:f3:7c:06:b6:54:
4e:ed:81:94:d9:08:db:96:22:d7:72:ef:cb:5e:cb:02:67:47:
05:fc:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:12 2025 by rpki-client