Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa
File: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (raw, json)
Hash identifier: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=
Subject key identifier: 15:C2:48:27:FE:EC:1A:7F:DE:15:F8:AF:59:86:71:27:B8:9A:E0:70
Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial: 019426D990B0648E9BE40A69E6AB75BC94A3
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56376
IP address blocks: 94.231.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:90:b0:64:8e:9b:e4:0a:69:e6:ab:75:bc:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c24827feec1a7fde15f8af59867127b89ae070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:d9:d3:da:73:2f:eb:13:a0:ca:91:36:2f:
2f:fe:91:37:a1:5d:28:80:7f:d7:6a:25:f2:5d:95:
13:ba:15:54:e4:e4:12:79:2b:97:15:53:77:63:3d:
46:20:33:aa:28:df:e1:25:9a:d0:1c:92:e2:b9:89:
80:6b:83:47:49:f4:51:46:80:78:19:99:40:7b:3a:
22:d4:7e:5f:b2:85:13:58:aa:49:fe:9e:16:85:dd:
ab:cf:ce:13:60:4b:67:23:89:a7:5f:5a:e2:3b:a8:
96:3e:d2:b8:c4:e6:76:e9:b3:c2:22:86:47:cf:d1:
61:96:cf:7a:93:0f:ee:7e:11:12:fd:e8:ef:ca:9d:
44:2a:89:7a:a5:bb:40:f1:be:e4:98:c1:ae:24:fa:
9c:24:8a:48:bd:dd:d7:31:e8:dc:f0:d5:84:62:58:
3d:5c:51:c0:5f:20:81:c9:5a:d6:0a:85:ea:b0:b6:
7d:2d:35:1e:9e:4d:5a:f5:9e:4c:dd:e8:7f:64:bf:
f2:a8:6c:6f:fb:3a:3d:d0:b2:4f:dd:e1:73:6f:b3:
5e:5d:4c:7d:7d:88:cf:80:42:a7:e0:5c:6f:c1:91:
3f:1f:c0:29:8a:b6:67:01:a5:2d:cd:f8:63:67:a7:
8d:fe:19:64:ab:5b:7f:d6:bf:b2:d2:25:2c:4d:27:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C2:48:27:FE:EC:1A:7F:DE:15:F8:AF:59:86:71:27:B8:9A:E0:70
X509v3 Authority Key Identifier:
keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5b:95:01:a6:ae:0e:54:37:b5:47:ec:7b:f7:58:19:b4:9e:
70:06:a6:a2:1e:3f:e5:66:d2:a9:a0:33:2c:f8:72:e1:db:2a:
90:57:56:8e:e5:6e:8a:ea:01:28:5d:b4:16:48:cc:db:8a:ff:
81:51:fc:bd:92:c9:b4:f5:33:6a:88:d1:be:2a:c0:4c:d0:48:
8f:8a:46:5c:6f:b7:72:fc:92:df:17:fe:45:7e:f4:e7:7d:1b:
44:f4:0b:c0:ce:00:c0:9e:9c:76:e5:16:5f:50:68:f8:f3:15:
39:89:ad:ed:13:c6:32:21:38:74:40:d6:38:72:c9:b5:42:1d:
6d:25:92:0f:cc:6c:b3:3a:43:fe:c3:6a:34:f6:f1:ac:a8:7a:
f6:e4:f6:b1:6f:84:64:99:41:69:91:59:e4:ec:ca:fc:0f:43:
cf:6a:54:9c:d1:58:e9:ff:b0:fa:d0:78:89:a0:bf:dd:17:50:
7c:1c:b7:73:a7:45:1e:ac:dc:e2:c9:e8:ad:00:c1:7c:af:c5:
0f:29:9f:ee:00:e8:6d:17:50:3c:15:1d:50:e6:b2:1e:9c:87:
7d:cb:85:38:aa:6b:95:94:5f:0a:b7:d0:dd:50:a8:ce:e1:55:
a7:71:63:b8:16:fc:54:d9:76:55:fd:34:e5:02:b2:da:d1:8e:
f6:f4:a8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:24 2025 by rpki-client