Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/FuyY57f22jyfyEF-5ysKNfkqQh4.roa
File: FuyY57f22jyfyEF-5ysKNfkqQh4.roa (raw, json)
Hash identifier: OMlXIMPKmpwMfxxa1Kg5yT859hJbV3qBQK3KT7Ku5+w=
Subject key identifier: 16:EC:98:E7:B7:F6:DA:3C:9F:C8:41:7E:E7:2B:0A:35:F9:2A:42:1E
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01870BEBF91E839B40B4832995B1397F393A
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/FuyY57f22jyfyEF-5ysKNfkqQh4.roa
Signing time: Thu 23 Mar 2023 00:43:46 +0000
ROA not before: Thu 23 Mar 2023 00:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 146.19.191.0/24 maxlen: 24
193.111.248.0/24 maxlen: 24
2a12:eb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0b:eb:f9:1e:83:9b:40:b4:83:29:95:b1:39:7f:39:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Mar 23 00:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16ec98e7b7f6da3c9fc8417ee72b0a35f92a421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:49:13:b7:9a:3d:6c:a4:b2:0d:69:02:1b:
ca:44:a9:e8:85:f3:64:bb:ba:df:cf:32:08:b2:24:
6e:ee:2f:87:41:52:94:51:7d:fe:cf:d2:49:d1:cc:
7a:7d:78:88:3a:a6:af:56:16:c3:3b:87:03:bb:a6:
15:12:33:42:10:06:41:2d:a8:c9:27:93:31:9b:76:
a1:93:af:f5:3f:d1:57:62:6f:ae:31:34:89:bf:6e:
93:6d:3e:71:1e:c5:5a:b2:b0:a4:22:b7:17:80:0a:
e7:9f:b9:94:f8:d3:d3:81:00:61:82:45:56:9b:50:
de:29:fb:e0:c0:7a:ad:c2:bd:38:32:22:e9:5d:96:
07:19:c3:c0:5d:61:bb:b5:26:c5:f4:f5:49:cc:1d:
53:16:57:86:a2:7b:d5:a9:1f:9a:67:2f:31:6a:ae:
e3:6c:4c:7e:1f:49:22:b5:77:70:88:f5:64:5b:92:
3d:e7:18:54:f8:a1:30:f4:4b:e9:31:8f:8d:2c:fd:
43:32:94:38:fd:3a:41:00:af:22:08:b0:28:11:d1:
22:e2:72:e3:4b:2f:8a:f1:5d:a0:e6:f9:ca:02:35:
68:27:d0:fb:4d:84:7a:ca:aa:6a:96:98:4b:19:c7:
ea:f3:1c:2f:86:14:41:d4:42:ba:ac:c1:e7:5c:01:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EC:98:E7:B7:F6:DA:3C:9F:C8:41:7E:E7:2B:0A:35:F9:2A:42:1E
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/FuyY57f22jyfyEF-5ysKNfkqQh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.191.0/24
193.111.248.0/24
IPv6:
2a12:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
32:ca:3a:e3:ec:69:24:7d:a0:04:52:e8:d8:82:6a:ba:ce:be:
ac:66:b2:5c:2c:2f:7a:b3:af:ed:f9:72:0a:90:28:7c:cc:f8:
d8:68:fd:ba:ef:96:c0:3f:c8:3d:30:6d:4c:9c:e7:2f:f7:c7:
33:ed:37:36:e0:47:46:85:b7:69:15:f6:4f:66:12:ba:db:c1:
1b:6f:eb:bf:52:53:5b:5b:61:97:6f:2f:90:6b:53:4a:4f:fe:
47:55:04:db:d0:a6:91:0e:c9:18:02:84:92:8f:ef:e1:a9:d6:
05:9b:b1:0e:2a:62:f1:95:0e:3d:1c:1c:12:b0:24:26:2f:30:
07:a9:56:a0:8e:65:6e:41:47:e1:b8:66:87:e3:2f:ba:2f:86:
a4:a9:10:04:fa:60:bb:91:ee:ae:25:76:2c:5a:ad:f7:3a:7a:
d6:d0:9d:85:6e:c9:39:ca:b1:85:92:37:9f:4a:b9:eb:4c:a1:
5d:4f:7a:11:3d:74:95:7b:ef:ec:20:21:8b:67:b9:0d:06:d1:
c3:8b:7f:87:62:ec:3f:53:4f:f7:aa:a6:79:dd:08:cb:0c:aa:
d1:2b:f2:5b:aa:68:e9:07:3f:ad:b2:8a:f0:a9:27:f8:f4:9b:
25:5e:2f:9c:52:e9:67:03:f0:07:b8:8f:ed:42:31:86:9f:b3:
80:cf:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:47 2025 by rpki-client