Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_F_u_izmWE5Y9_S884Oq8ZcaeRw.roa
File: _F_u_izmWE5Y9_S884Oq8ZcaeRw.roa (raw, json)
Hash identifier: BL3o5hjUnHXCAx3ZgoLSG/iUC0aAlNBgpbZ5TrHShgk=
Subject key identifier: FC:5F:EE:FE:2C:E6:58:4E:58:F7:F4:BC:F3:83:AA:F1:97:1A:79:1C
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01936F1FB7D6F27F81BC57A8B9451E392405
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_F_u_izmWE5Y9_S884Oq8ZcaeRw.roa
Signing time: Wed 27 Nov 2024 19:36:09 +0000
ROA not before: Wed 27 Nov 2024 19:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 31.222.227.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
176.53.146.0/23 maxlen: 23
185.235.230.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e82::/32 maxlen: 32
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:1f:b7:d6:f2:7f:81:bc:57:a8:b9:45:1e:39:24:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Nov 27 19:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc5feefe2ce6584e58f7f4bcf383aaf1971a791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:f7:56:24:17:be:51:13:d9:a9:2d:44:a4:
34:0a:a4:fd:c3:1c:06:75:5e:4e:62:0f:69:eb:c9:
ce:b8:20:07:a2:56:ec:99:04:21:0e:5f:70:5d:f9:
af:bd:bf:7e:7a:7b:3f:53:0f:7d:4e:55:ab:98:df:
0e:21:a3:57:c4:24:ac:55:2c:f1:cd:7e:93:cc:50:
b7:34:6a:2c:9f:9a:19:d9:0b:52:3b:a9:75:12:fe:
d7:5e:f6:41:67:a7:17:46:ba:44:66:80:e4:e5:41:
a0:00:5f:16:1f:8c:9b:5b:fd:f1:bd:b0:45:9f:62:
68:9c:d6:09:db:1a:2c:3d:2d:19:04:a5:5b:5b:92:
8e:f3:8a:44:c9:da:78:90:bd:9b:f7:ee:81:bf:58:
99:88:b0:5e:1c:69:fd:a3:04:6f:3f:d5:8b:1b:83:
57:dc:cc:ae:87:63:ad:15:8c:01:58:d1:f4:4d:be:
70:8f:5d:f6:17:9f:b6:74:fc:48:99:81:5c:ea:34:
d7:75:62:2c:f9:bc:6b:e4:76:fa:45:07:d1:b8:65:
5c:10:02:3e:45:c8:39:26:91:5c:b3:ea:e7:9c:f9:
b3:fa:1c:84:8f:80:02:bb:0f:80:5e:fb:b7:ae:c1:
c0:c6:48:03:38:39:68:2c:a8:f9:53:2e:61:ea:c9:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:EE:FE:2C:E6:58:4E:58:F7:F4:BC:F3:83:AA:F1:97:1A:79:1C
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/_F_u_izmWE5Y9_S884Oq8ZcaeRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
176.53.146.0/23
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::/32
2a0a:2e82::/32
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:e8:da:b0:ec:f1:56:08:32:80:b2:ce:61:75:e6:05:bd:28:
76:ae:e6:fd:ee:8a:d9:86:5f:c9:3f:80:a3:65:78:a4:93:5b:
36:7c:c6:f4:ba:16:ec:64:fa:8c:d7:a7:42:81:30:f8:22:95:
f8:67:af:ca:2a:a6:c6:0e:1e:10:d0:79:54:04:ad:a7:f9:a8:
02:5b:b4:e3:89:45:52:9a:5b:1a:fe:b5:ec:65:89:68:7c:69:
ed:4a:f1:2d:09:55:ab:bc:fc:f0:bc:65:ea:97:fc:c9:55:ab:
9d:51:b2:36:bb:a8:48:d7:34:97:4c:e8:49:7d:65:d3:8b:d6:
66:71:47:6a:55:89:a4:10:30:a3:27:7b:01:97:1a:e3:a4:42:
eb:bb:3e:92:65:3f:31:43:6e:d9:0b:ab:ee:ae:9c:61:06:cb:
a4:3a:13:93:6c:1e:bf:7b:d8:2a:ec:b4:a7:08:bb:c4:76:46:
5d:f3:10:8d:94:18:24:58:1d:02:58:7c:f0:9d:81:af:39:96:
40:72:86:f1:d0:9b:06:74:9f:54:3a:fd:f3:62:ad:ce:e1:b0:
7d:74:81:00:6a:6a:01:61:41:0b:d3:58:ca:e3:ab:38:4a:a5:
59:c4:5b:3b:ba:90:79:25:a5:84:a5:3c:0a:62:e7:63:85:12:
85:65:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:08:07 2025 by rpki-client