Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/FU2fmN4fMU4hEEpgT8o9gbcz4MA.roa
File: FU2fmN4fMU4hEEpgT8o9gbcz4MA.roa (raw, json)
Hash identifier: tis0ab2t8xoy9uGEITopS8dD+PeP9LNV0t9kyD/o5cY=
Subject key identifier: 15:4D:9F:98:DE:1F:31:4E:21:10:4A:60:4F:CA:3D:81:B7:33:E0:C0
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: E053
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/FU2fmN4fMU4hEEpgT8o9gbcz4MA.roa
Signing time: Tue 25 Jan 2022 18:23:10 +0000
ROA not before: Tue 25 Jan 2022 18:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 195.93.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57427 (0xe053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Jan 25 18:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=154d9f98de1f314e21104a604fca3d81b733e0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:9c:b6:7a:f1:7c:9c:e6:76:57:50:f9:48:
7f:49:b4:3a:f3:cb:5a:8e:64:4b:15:e4:71:b2:a3:
b9:ca:e4:e8:14:e8:46:e1:8d:f7:28:54:c7:81:ef:
a2:6d:7c:f0:d5:db:69:62:fa:7c:21:15:87:63:db:
96:4a:4b:ea:f4:24:15:43:96:1e:06:44:fb:1e:96:
cb:fd:69:42:8c:29:14:bb:32:c8:ea:df:3b:12:de:
ea:68:27:94:ab:c3:1d:6a:81:8e:ce:d7:ec:5e:5f:
f2:26:ed:49:8c:23:6b:36:79:76:20:49:95:14:5e:
38:b0:72:8f:cb:b0:87:97:4b:4d:36:a1:1b:84:98:
29:87:ff:58:06:f2:fa:91:16:d4:67:36:fc:7d:70:
c3:b5:4c:ee:90:5e:09:38:e5:c4:bd:2e:a6:33:46:
85:31:68:98:8a:28:2f:da:04:a4:ea:69:fa:e7:82:
56:61:60:32:e6:17:a7:36:b8:e0:92:d9:50:a3:f4:
33:fd:fe:9f:da:17:3a:c1:2c:0f:70:2c:77:4c:c3:
f4:10:72:fb:fd:a3:0d:3c:e9:ba:f4:af:b9:8b:3a:
14:23:e9:8b:34:29:c6:97:08:6f:de:7c:3f:23:82:
94:36:c2:41:fd:b4:8c:82:e8:a8:63:16:47:9e:a7:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:9F:98:DE:1F:31:4E:21:10:4A:60:4F:CA:3D:81:B7:33:E0:C0
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/FU2fmN4fMU4hEEpgT8o9gbcz4MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fd:3b:44:50:c6:9c:e3:06:2d:16:9c:96:ea:1b:ee:d7:0e:
08:cd:c8:65:f2:c4:8d:c1:30:fa:a6:60:3f:4c:b3:62:10:1c:
a5:64:d8:08:94:f7:ef:f9:f7:a5:06:24:a7:61:a3:e2:8e:c4:
c4:a3:52:b9:ef:a9:08:17:41:e6:b6:2d:36:5d:da:86:1b:70:
50:48:2f:a4:77:5d:eb:2e:11:7e:6d:69:1a:4b:f2:7f:72:0a:
c9:a0:76:c9:c5:f4:1c:6c:2d:ed:55:d4:b1:f2:ce:4a:78:37:
c1:f7:31:7a:75:a7:29:98:d7:e4:5e:29:bc:4a:a9:d6:26:32:
00:4d:33:1a:03:70:4e:9b:3c:ce:91:9a:f6:07:65:f9:b8:a4:
71:f5:0a:84:28:91:c5:12:7b:21:32:e5:4e:11:9c:d6:04:27:
30:cb:47:19:48:c0:ec:14:f2:01:a5:22:11:87:b6:c0:a6:a9:
f6:ed:ec:d2:65:fb:d3:5b:ac:a6:ac:23:7b:2b:1e:89:3c:b0:
da:a9:e8:24:1d:37:dd:dc:87:6e:34:10:4a:6b:eb:6d:b3:19:
75:8a:ef:81:9f:24:62:b1:25:b6:5d:0a:d7:4c:6c:50:3e:79:
73:eb:dd:ff:0e:1b:f6:df:50:11:3a:02:ab:0b:0d:63:1a:5f:
69:d4:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:25 2025 by rpki-client