Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FJa2Te4IdXZzDvWXox20MrY4wdU.roa
File: FJa2Te4IdXZzDvWXox20MrY4wdU.roa (raw, json)
Hash identifier: gGBM5iRrWO+bwKCOQfVZA40SaoM6PTWRNW2N8HN/6as=
Subject key identifier: 14:96:B6:4D:EE:08:75:76:73:0E:F5:97:A3:1D:B4:32:B6:38:C1:D5
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C90973F15868E82B788311B3468B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FJa2Te4IdXZzDvWXox20MrY4wdU.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201409
IP address blocks: 193.142.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c9:09:73:f1:58:68:e8:2b:78:83:11:b3:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1496b64dee087576730ef597a31db432b638c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:5f:ea:2e:a4:76:6e:61:94:1c:fe:2b:7d:
b1:0e:15:52:6c:49:7b:6a:e4:7c:b4:df:da:a4:87:
84:a4:6e:c9:20:12:c2:0c:91:00:e0:1b:74:c9:50:
1f:bd:b9:e6:62:45:20:07:f7:98:be:b4:4a:08:90:
60:f8:8d:41:47:cb:d6:ab:b8:d8:38:a7:26:a7:09:
75:3e:bb:6f:a5:9b:f2:b6:ee:a7:46:b3:2a:87:94:
a9:76:77:c6:40:e1:ed:3e:f0:8b:fa:f5:50:95:e6:
6d:f2:cc:18:d1:81:ac:18:95:39:06:67:c9:90:43:
21:3b:f9:ad:ff:d2:95:07:c2:b5:d6:80:10:f1:13:
8d:f2:43:e3:01:97:4a:8d:0c:c9:18:58:86:9a:d6:
86:f3:20:2b:57:c5:2a:74:b0:c8:19:ca:9b:9a:de:
ce:b4:aa:3c:e4:46:03:15:de:a6:90:f7:6c:31:58:
0c:fb:6a:88:4c:4b:78:58:de:f9:80:3e:ba:1d:72:
20:e7:f1:25:d1:03:bc:d4:9c:61:bf:1e:97:52:39:
fd:1f:4d:22:81:dd:fc:e9:0c:cb:eb:6d:fb:7f:e8:
b9:f4:9a:29:19:a4:43:47:a9:e7:02:1e:7d:c7:30:
fa:90:48:46:e2:eb:9a:d7:9b:bd:b2:a1:88:8a:e9:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:B6:4D:EE:08:75:76:73:0E:F5:97:A3:1D:B4:32:B6:38:C1:D5
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/FJa2Te4IdXZzDvWXox20MrY4wdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.59.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:e2:6e:82:1c:f8:2e:7f:17:a1:28:cd:1f:9a:0f:8a:29:
22:9d:44:2f:3a:ab:e2:5e:8b:ca:2b:bb:e9:48:7d:37:81:0e:
81:d2:8a:88:a3:98:0b:91:c0:e1:8d:a5:87:a0:82:d8:c0:d4:
bb:cc:d0:c3:76:90:d2:67:07:5c:ff:ff:23:27:bb:d8:f3:16:
dd:51:26:11:2c:4d:5c:d6:d3:70:1d:ca:67:08:9f:d9:68:dd:
90:d0:e1:d8:98:ed:1c:94:2b:2c:bf:42:db:45:f0:4b:2c:c6:
05:ad:6a:86:03:b3:36:dd:26:fa:ab:ed:bd:b2:8b:17:7e:41:
25:16:63:5f:e4:04:1b:46:01:ed:10:09:c8:03:78:7c:ab:bb:
1b:ed:84:09:ea:e0:98:28:bd:a6:de:c6:3f:00:64:18:ef:df:
53:b1:1e:19:da:65:53:62:ea:d1:95:8f:60:fa:8b:5c:11:b0:
d1:95:be:08:17:d8:0a:28:74:ce:31:4b:84:d1:3c:89:ce:2d:
87:1f:3b:3a:9a:dc:7e:23:c2:a3:61:a7:89:89:bf:30:77:00:
16:cd:a3:f9:a2:fc:8f:e4:cc:d2:82:1a:d1:8b:d2:47:f4:bf:
9c:88:c7:e0:cf:71:1b:ef:c1:7d:01:19:f0:8b:11:bf:81:b5:
ee:ea:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:53 2025 by rpki-client