Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FPWYS5FPdi_36PocHDQv9w20hsM.roa
File: FPWYS5FPdi_36PocHDQv9w20hsM.roa (raw, json)
Hash identifier: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=
Subject key identifier: 14:F5:98:4B:91:4F:76:2F:F7:E8:FA:1C:1C:34:2F:F7:0D:B4:86:C3
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019427B5BF163F09162A62F1A183D53B2596
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FPWYS5FPdi_36PocHDQv9w20hsM.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203890
IP address blocks: 195.150.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bf:16:3f:09:16:2a:62:f1:a1:83:d5:3b:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14f5984b914f762ff7e8fa1c1c342ff70db486c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b0:da:3c:c5:6a:e3:22:5a:94:66:01:3c:56:
ef:68:86:c3:05:9d:9b:2a:eb:07:45:74:c9:f3:53:
b3:e6:98:1b:4c:82:0c:5f:9a:a8:63:8a:c3:ff:2c:
b6:05:31:a2:cc:12:d1:c3:8d:dc:9a:a5:60:d5:13:
f2:11:ff:24:61:f2:a0:48:15:55:ce:3c:24:ee:d8:
56:16:98:8c:3b:32:09:3c:19:94:62:44:7d:58:be:
a7:76:e6:65:ea:01:97:1a:65:86:26:04:ce:4d:02:
80:52:8e:ed:10:6d:ba:a9:0a:8a:cb:dd:b2:de:ef:
46:ec:1f:05:e1:ba:6b:92:90:77:95:c9:c5:55:7d:
55:9e:86:85:ce:52:0d:26:18:70:aa:5c:06:f5:20:
36:dc:40:1f:11:e0:32:01:ce:d8:8c:15:39:0c:f9:
49:fc:04:53:dc:43:ff:c6:2c:85:cb:49:a7:fc:f8:
d7:36:4d:53:e7:56:c1:f9:8e:10:b8:dd:d3:74:95:
4f:32:a4:30:e9:c5:7b:a4:26:41:df:d6:a3:45:63:
5e:e3:16:34:c0:1e:d9:1b:c7:e9:e8:a7:51:2b:f0:
26:5a:9a:90:f5:dc:af:af:38:ef:09:e7:7a:c2:14:
d3:f3:d8:ef:c5:bc:0e:e7:5c:7d:51:e6:c9:f5:21:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:98:4B:91:4F:76:2F:F7:E8:FA:1C:1C:34:2F:F7:0D:B4:86:C3
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/FPWYS5FPdi_36PocHDQv9w20hsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:69:21:c6:7f:b4:7b:12:06:11:97:2c:80:b4:1a:b8:2c:55:
18:79:a0:29:0f:1b:2a:4b:84:bb:5d:27:7e:db:52:7c:dd:81:
82:6d:97:d3:cd:65:d4:3d:50:76:3e:4f:9d:33:bf:36:5c:a4:
a8:ac:43:1c:17:f5:48:1e:65:93:58:dd:d4:ed:45:11:fb:94:
9b:40:80:f1:c9:de:47:37:0f:2a:00:b7:da:ba:c5:2e:86:0e:
af:b0:8a:9c:94:96:51:b3:e8:98:5b:50:8e:06:39:bf:35:57:
df:1f:f2:a2:3e:a7:4e:5d:00:ca:c7:92:70:fa:3d:6b:c2:1f:
7a:6a:f6:3e:6b:a6:64:b8:c4:76:b0:e7:d8:c1:40:2b:be:ab:
a3:88:29:54:ed:3d:c6:3d:4d:51:94:72:e3:78:12:7a:ca:7a:
91:7f:71:d7:37:4d:89:16:21:93:12:27:d1:0c:72:1d:e8:79:
b9:e6:97:b7:a6:e0:12:37:cd:55:bc:18:82:60:91:86:d8:1f:
8b:4e:fa:3d:d3:00:81:b4:49:1d:19:73:28:df:df:b0:aa:34:
a5:d2:7f:0d:d3:b4:9f:ac:f2:1d:ef:61:2f:2b:b6:fe:cb:aa:
88:19:f7:8c:60:1e:ea:9e:50:cc:7e:16:3f:aa:86:10:1e:1a:
4a:b9:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:43 2025 by rpki-client