Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FYzC_o_rv0oba_yIPB6_C_2LqAs.roa
File: FYzC_o_rv0oba_yIPB6_C_2LqAs.roa (raw, json)
Hash identifier: HvSbeKjQHpV9isPlfEMfiO0SF70JEg4qI20FPG0HkoI=
Subject key identifier: 15:8C:C2:FE:8F:EB:BF:4A:1B:6B:FC:88:3C:1E:BF:0B:FD:8B:A8:0B
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA9307CCDEFCDAF1B1B90856486CE
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FYzC_o_rv0oba_yIPB6_C_2LqAs.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197654
IP address blocks: 195.33.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a9:30:7c:cd:ef:cd:af:1b:1b:90:85:64:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=158cc2fe8febbf4a1b6bfc883c1ebf0bfd8ba80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:5b:05:5e:e7:d2:d1:e9:59:3b:6e:2e:aa:
97:ba:a9:7f:38:52:2c:80:a4:7e:21:99:1b:fa:40:
ad:df:d0:88:08:bb:73:d6:84:8f:5f:97:2c:b3:d5:
6f:83:ef:a3:77:df:e5:e5:bf:5c:55:9b:cb:3b:5c:
29:79:72:db:0a:38:8e:35:be:92:4c:50:9c:6a:a7:
a8:ad:5f:ec:59:0f:40:1b:5a:d0:72:25:cc:d5:a0:
63:ba:83:e0:a2:3c:77:c8:e5:50:e8:29:61:22:f5:
f7:89:f4:ce:a1:9a:42:4a:1b:36:00:c6:b7:b6:1f:
6c:88:a5:c4:10:a0:cc:76:fb:92:a3:a3:41:c9:b0:
ad:0a:1e:c1:d3:e7:1a:a5:24:4f:5d:4c:fb:38:b2:
ac:43:aa:3e:f0:ea:64:0d:a7:7d:44:1c:b6:c8:d0:
d8:02:92:dd:ba:6b:c3:75:da:83:74:6f:2f:c2:c2:
fa:4c:a4:bf:46:48:9c:f4:f8:d5:84:04:c1:99:49:
8b:e0:f8:79:ef:7a:f8:9f:17:85:bb:d3:f5:0b:ee:
3a:76:64:a5:55:20:bb:ef:30:88:b2:5c:0a:24:84:
12:0d:d2:58:23:00:cc:dc:29:de:ef:cb:a4:f0:0d:
a9:38:ed:e9:90:48:ad:4d:df:29:f0:f8:52:ec:3f:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:C2:FE:8F:EB:BF:4A:1B:6B:FC:88:3C:1E:BF:0B:FD:8B:A8:0B
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FYzC_o_rv0oba_yIPB6_C_2LqAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.33.198.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2b:ca:87:17:5b:53:dd:f1:20:56:7a:8e:75:23:9e:9a:04:
48:65:2c:d2:34:23:9f:72:05:3c:ad:a8:23:3a:cb:55:44:29:
2d:c1:41:74:fe:01:91:f1:fd:82:02:bb:1f:dd:4d:f3:9a:1c:
99:ed:46:fc:aa:c1:bc:25:e8:27:40:04:bc:75:02:6e:9b:c1:
fa:7b:69:5a:f5:c4:10:fd:c3:00:bf:ab:b1:44:a5:db:ed:95:
5c:6f:7b:27:e2:cf:84:92:9b:f5:92:f5:10:03:05:f4:22:82:
d5:98:d9:bf:bf:a0:b9:a7:6f:0d:3c:35:27:98:5a:f7:2a:c7:
35:0b:e5:ba:8a:7c:3e:cc:07:de:d4:e0:6b:e4:40:87:01:df:
67:c6:9f:e2:c1:cc:a7:4a:77:bc:b9:06:61:53:ff:13:41:bc:
c7:de:90:7a:d7:8d:59:e6:f1:49:c2:58:b7:59:41:a9:0c:6d:
ab:8b:fc:fd:a5:b5:cb:9e:23:b6:76:c6:ae:b3:02:98:92:8c:
7b:af:05:17:7c:14:61:b5:90:cc:d7:5c:cc:36:02:ff:6e:fa:
ba:a6:e6:e7:ad:b5:d7:1f:57:d5:5b:9a:fd:fe:d7:d7:8f:6f:
67:36:1e:bc:5f:21:eb:37:44:46:15:8b:b2:2a:c8:5a:8a:44:
9a:50:00:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:52 2025 by rpki-client