Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fsul7_NHD4w3iQpWYKg5ZbVFbUo.roa
File: fsul7_NHD4w3iQpWYKg5ZbVFbUo.roa (raw, json)
Hash identifier: 3zj6J9PEDcnSwr10Mp/Kfhatm0fG0MZwiEcoVV14Syo=
Subject key identifier: 7E:CB:A5:EF:F3:47:0F:8C:37:89:0A:56:60:A8:39:65:B5:45:6D:4A
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01946E46E1A5D944A7F8232F36C31393791A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fsul7_NHD4w3iQpWYKg5ZbVFbUo.roa
Signing time: Thu 16 Jan 2025 08:42:06 +0000
ROA not before: Thu 16 Jan 2025 08:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 82.206.96.0/20 maxlen: 24
82.206.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:46:e1:a5:d9:44:a7:f8:23:2f:36:c3:13:93:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 16 08:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ecba5eff3470f8c37890a5660a83965b5456d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:76:88:a1:f7:a1:8d:db:69:01:78:11:dc:
a7:f8:a9:5e:5b:01:fe:b0:b1:4a:c5:b2:39:60:6b:
fb:72:3d:bb:7b:9e:2e:af:80:31:ff:77:6c:2a:ba:
66:17:43:96:8a:c3:be:8c:25:51:42:5a:eb:19:9c:
76:32:da:f4:1c:b7:aa:98:08:be:bb:ea:5b:ff:b4:
c4:91:af:9e:29:3b:6c:ae:9e:a8:c0:78:e9:c0:dd:
7b:1e:44:a5:08:69:05:9c:d4:38:b8:c6:ee:de:7f:
34:af:f7:52:a7:d3:6a:90:fb:9f:e6:08:e6:b3:15:
12:2c:6d:12:8f:f2:2d:ef:b8:90:72:cb:1d:55:30:
8c:83:46:dc:f6:3c:1d:8b:35:35:e0:d1:31:52:bb:
9b:9b:34:8d:4e:fd:6e:a3:69:be:b7:ba:b8:13:7d:
1a:c7:2d:a2:84:4e:74:11:74:58:41:dd:74:bd:08:
1e:f8:c8:6e:f9:1f:60:af:88:40:3f:a3:e8:2f:23:
e2:94:4a:47:c1:ad:54:de:11:48:86:5e:0a:88:a3:
b1:4a:59:8e:c4:9a:f4:7a:8b:1a:5a:69:c8:96:97:
8c:8b:78:5a:39:56:b1:10:30:7c:65:7d:c4:9c:6f:
b8:44:a3:49:3d:51:2d:21:b4:78:fd:da:a8:3c:6d:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:A5:EF:F3:47:0F:8C:37:89:0A:56:60:A8:39:65:B5:45:6D:4A
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/fsul7_NHD4w3iQpWYKg5ZbVFbUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
05:4b:b0:aa:57:29:f9:a9:95:be:8a:fc:53:88:6b:ce:7b:3e:
29:a0:f8:55:ce:56:18:24:50:bc:7c:2f:1a:5e:f2:55:ae:41:
9a:26:38:e7:88:53:e7:9e:81:73:9c:6d:6a:ed:fe:4b:c5:9d:
eb:c3:4a:59:16:d5:e6:84:70:b7:a6:fa:e0:cf:c6:a3:92:c4:
6f:24:e1:76:fc:9a:fa:16:c7:a9:44:4e:82:07:08:7b:5d:92:
f5:45:41:a5:f7:c9:c5:cc:24:b6:e7:b7:7d:4e:ed:7c:e7:42:
f1:90:fd:95:54:c5:e7:95:67:d5:66:5e:30:43:89:d9:47:8d:
2f:ea:58:13:f7:3c:2c:05:40:b9:bf:64:61:48:5b:b9:21:6c:
57:67:52:67:f6:7b:19:91:86:b2:e8:fc:50:03:d7:44:48:bf:
9e:39:95:7c:5b:f5:cd:6d:0d:85:58:35:c0:da:bf:70:a7:e9:
17:c0:16:74:07:7f:3f:4d:98:d6:44:75:c9:9a:04:29:5c:35:
5d:2a:61:20:2a:c9:ac:ac:dc:5f:1f:e8:72:1d:15:78:d6:22:
79:dc:99:8c:c8:9d:4c:53:5c:6a:31:0e:29:75:c4:57:6a:1e:
a5:70:3a:a5:93:03:b7:54:26:d8:85:e9:e6:06:74:a0:e5:37:
e3:29:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:25 2025 by rpki-client