Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/FUYF0V-PA872N2Zeob59sbXMPOI.roa
File: FUYF0V-PA872N2Zeob59sbXMPOI.roa (raw, json)
Hash identifier: z3rYeE4DdUYRnvi5ixLVFLMIcV5PCcTInuglFAYa24I=
Subject key identifier: 15:46:05:D1:5F:8F:03:CE:F6:37:66:5E:A1:BE:7D:B1:B5:CC:3C:E2
Certificate issuer: /CN=5eadf6d6ff71c7e38ea1d291205acbef8c3d9076
Certificate serial: 01856CB84D28FB801C3AC006903F0A9EEBBF
Authority key identifier: 5E:AD:F6:D6:FF:71:C7:E3:8E:A1:D2:91:20:5A:CB:EF:8C:3D:90:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq321v9xx-OOodKRIFrL74w9kHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/FUYF0V-PA872N2Zeob59sbXMPOI.roa
Signing time: Sun 01 Jan 2023 09:44:55 +0000
ROA not before: Sun 01 Jan 2023 09:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51521
IP address blocks: 91.217.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4d:28:fb:80:1c:3a:c0:06:90:3f:0a:9e:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eadf6d6ff71c7e38ea1d291205acbef8c3d9076
Validity
Not Before: Jan 1 09:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=154605d15f8f03cef637665ea1be7db1b5cc3ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:b1:a4:a7:94:59:fa:13:03:8f:a1:d9:3c:
f4:8a:7c:21:24:22:0f:0a:4b:43:2e:b2:79:25:f9:
6f:d7:23:4c:af:f8:24:ed:f2:74:c7:ae:ed:84:b4:
f3:89:7a:e2:b2:70:f1:be:6f:37:45:b2:10:99:15:
2d:2b:19:33:db:75:45:1b:98:43:22:c0:dc:1a:cf:
53:a3:bd:51:9b:50:1e:bf:f0:b6:9b:8a:6c:be:db:
8e:5c:b3:b5:94:55:10:29:9e:27:5a:13:57:9f:3e:
9a:cd:8d:da:ec:14:15:5c:e3:68:c6:60:ec:e4:75:
26:d4:e1:91:9c:36:82:ce:40:3c:28:87:b1:14:71:
f4:ec:7b:b7:eb:e5:f7:81:d6:1a:ea:db:e9:0b:9a:
34:50:8a:45:ec:18:9f:4a:71:6f:1c:e8:03:72:11:
10:5e:54:2e:43:18:3d:a6:ba:bc:c2:ea:58:35:5b:
d9:21:71:84:8a:59:9d:01:20:f8:e9:ed:c4:a4:5a:
65:3d:ae:4a:6b:30:37:d1:65:be:1a:8c:9d:4e:cc:
40:36:c7:6a:b9:72:d5:8e:68:0d:06:4d:70:e4:74:
86:d7:64:33:a2:9d:f5:a9:03:d5:86:de:01:78:32:
f7:68:cc:00:4b:68:d7:bd:c5:b2:0c:69:b4:41:d1:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:05:D1:5F:8F:03:CE:F6:37:66:5E:A1:BE:7D:B1:B5:CC:3C:E2
X509v3 Authority Key Identifier:
keyid:5E:AD:F6:D6:FF:71:C7:E3:8E:A1:D2:91:20:5A:CB:EF:8C:3D:90:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq321v9xx-OOodKRIFrL74w9kHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/FUYF0V-PA872N2Zeob59sbXMPOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6458b8-d818-4cd6-ae62-bb67d99ddc52/1/Xq321v9xx-OOodKRIFrL74w9kHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.96.0/23
Signature Algorithm: sha256WithRSAEncryption
74:bc:c5:5a:82:60:58:aa:58:12:34:5e:78:fd:e6:25:e6:57:
f6:ed:52:1e:80:0b:c4:57:0d:57:15:da:ce:fd:4c:5b:f6:93:
9b:32:c9:9d:65:b9:1d:43:60:c2:9a:ff:82:fe:29:7b:45:72:
ce:b0:31:b1:e3:08:58:a5:25:00:f9:db:f3:35:f2:44:97:1a:
d0:87:02:91:41:01:98:c5:41:62:30:cd:16:29:a8:5b:5f:94:
7e:3f:ba:e2:b8:58:bd:d2:98:26:e6:ba:30:d7:63:75:dc:05:
f8:ff:41:4c:a2:89:f6:28:fc:01:ec:37:72:8a:80:33:63:f5:
0d:33:d0:db:e7:3e:db:dd:b4:d1:c0:70:f9:ff:b9:25:31:7c:
76:25:4f:64:ba:2b:20:58:d1:3c:75:cb:99:e3:97:3d:9e:03:
47:63:a1:dd:0a:d0:fe:cd:48:9c:c9:0d:32:eb:89:58:e0:54:
73:7b:cb:5a:30:21:28:d0:aa:23:d9:65:d5:7d:82:97:1e:a2:
26:45:b1:34:f6:61:21:95:c7:0c:d8:73:17:49:e8:28:69:1e:
71:df:1b:59:63:7b:78:31:6d:8a:48:eb:e4:57:da:0b:9e:94:
28:f1:6d:63:a1:fe:22:af:a2:d4:cc:c9:6d:c2:ca:dd:88:c3:
21:81:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:49:17 2025 by rpki-client