Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FMVEVEUKu1aBzY2T2n3whmnUrdw.roa
File: FMVEVEUKu1aBzY2T2n3whmnUrdw.roa (raw, json)
Hash identifier: vyUwk4GspbWM/07KbM0DZqkw/k+Q8zX/u4qYW5gv0f4=
Subject key identifier: 14:C5:44:54:45:0A:BB:56:81:CD:8D:93:DA:7D:F0:86:69:D4:AD:DC
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5C841A98316E6107B2197061D710
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FMVEVEUKu1aBzY2T2n3whmnUrdw.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2386
IP address blocks: 145.139.13.0/24 maxlen: 24
145.139.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5c:84:1a:98:31:6e:61:07:b2:19:70:61:d7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c54454450abb5681cd8d93da7df08669d4addc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:7c:24:42:2b:dc:51:8e:2e:02:db:3b:23:
e5:58:27:9d:ec:4b:8b:03:0f:3f:62:d4:82:f1:ba:
02:05:87:c7:d1:30:e4:cc:6f:4d:0c:ef:0f:56:67:
a1:27:a5:24:15:22:f9:84:cf:0b:d3:3f:ce:88:bb:
54:32:73:c2:ef:0a:d5:0a:6e:e0:04:04:01:d6:69:
5e:ba:5c:03:fa:72:6e:aa:d2:33:51:81:94:75:92:
12:3f:21:53:b3:f6:4b:00:a1:d5:74:74:23:c6:22:
50:d4:5b:e5:82:a4:57:3c:93:d7:f4:86:3c:c6:e6:
ae:64:e9:ab:45:b5:d7:55:6e:34:10:27:3f:5c:c1:
88:3e:46:d3:5e:03:ce:46:ed:5a:6c:8a:d5:fb:91:
6c:d8:b7:aa:ab:9c:91:ce:38:d2:6b:ad:3f:7d:39:
9c:de:bd:7d:95:5f:44:5f:79:8e:b1:18:eb:1a:d3:
4d:28:d6:6d:05:e0:fa:0b:df:ed:17:f0:77:5c:5d:
b0:62:60:16:0f:30:bc:b5:27:25:a4:60:a1:3a:d8:
08:f4:ab:b6:5e:e3:fd:ad:8f:79:5c:07:7e:52:98:
dd:0f:e4:b5:ea:94:d9:79:07:7f:70:91:03:59:18:
9f:87:07:09:8d:69:98:ac:54:8c:21:4d:82:85:06:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C5:44:54:45:0A:BB:56:81:CD:8D:93:DA:7D:F0:86:69:D4:AD:DC
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/FMVEVEUKu1aBzY2T2n3whmnUrdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.13.0-145.139.14.255
Signature Algorithm: sha256WithRSAEncryption
49:e2:8c:53:46:3f:b2:d6:bd:92:ea:e4:99:f7:27:43:2c:21:
ba:9f:8a:e3:41:0c:d8:19:7e:e6:84:93:63:04:3c:7b:d6:0d:
b9:30:8e:e6:11:76:48:2c:29:3c:3c:f1:28:87:8f:37:d3:61:
be:22:d6:51:ef:d1:0f:cd:f2:09:b0:76:3f:59:2c:8a:b7:3f:
c4:5d:ff:65:35:53:66:bf:98:83:66:b6:61:68:55:67:fa:8b:
a9:e0:b4:a0:69:75:71:38:9f:5e:8b:e1:f0:06:e2:f0:0d:b3:
1b:e2:4e:10:a0:d6:db:ad:49:28:1e:05:b6:06:fd:7e:41:1b:
63:d6:a1:45:74:d8:70:b2:5d:7f:0f:64:f8:18:8c:f4:a2:00:
e7:29:ae:9c:ec:4f:74:24:5b:cd:1e:a9:8b:9e:88:d3:cc:22:
5c:4e:42:c7:3b:54:00:c8:cc:26:4f:20:d7:df:56:82:15:84:
a8:f1:f7:14:ad:f3:22:de:88:15:c3:c2:f7:e6:b8:52:1e:72:
b3:39:e1:92:ed:83:8e:77:90:35:b9:b0:74:3b:02:90:d9:78:
25:d6:64:16:b6:cd:61:5a:7b:8c:69:80:94:82:61:f7:73:b8:
3e:45:94:c0:1e:86:97:40:ff:d0:18:84:f5:e1:16:9e:ef:93:
e0:ca:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:06 2025 by rpki-client