Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FCLA8M032EwPVSliWKDu0fDlnPE.roa
File: FCLA8M032EwPVSliWKDu0fDlnPE.roa (raw, json)
Hash identifier: mxbROZOE42PzUqwm62cDGMgZG6BYzZ2DWS8LB2fyuxA=
Subject key identifier: 14:22:C0:F0:CD:37:D8:4C:0F:55:29:62:58:A0:EE:D1:F0:E5:9C:F1
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 019424B38FE1625F3609C57F35BC9B1C2A9A
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FCLA8M032EwPVSliWKDu0fDlnPE.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202945
IP address blocks: 45.154.60.0/24 maxlen: 24
2a0f:b100::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:e1:62:5f:36:09:c5:7f:35:bc:9b:1c:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1422c0f0cd37d84c0f55296258a0eed1f0e59cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:69:41:13:0d:08:fc:9b:cb:a7:f9:ef:20:
2e:94:57:e8:93:0f:5a:33:0c:d6:b4:1c:a7:c0:30:
a1:69:3d:cc:ba:52:05:d7:03:6f:50:2c:13:d5:a6:
aa:76:d8:f5:4a:aa:f0:f3:35:87:bb:ad:ce:53:de:
b0:8d:f7:1a:df:45:7d:12:7a:70:69:46:13:41:2b:
bc:78:cc:d1:bf:c5:38:91:24:9f:b4:98:b6:36:4b:
b8:58:c4:e3:c4:7b:92:38:aa:34:85:03:25:47:0f:
81:f1:ad:3b:14:6a:f2:9f:dc:e8:5e:df:e4:5a:cd:
25:e4:8d:7b:ee:10:11:d8:ba:85:92:fd:99:c1:dd:
4d:78:2a:af:2e:54:95:f1:78:2e:f2:50:8a:23:2b:
00:6b:ff:f9:f9:ad:23:75:72:fc:de:e3:33:b0:cc:
ef:fa:98:a9:d7:48:cd:c3:7c:4c:38:fd:cf:ba:9e:
43:67:0a:09:0b:65:34:ee:e1:d6:16:b8:f2:dd:b5:
49:3a:4d:f4:05:6d:18:29:09:04:a7:f6:b6:47:9c:
32:f9:0c:56:45:a7:85:8c:b9:5c:21:55:bb:e7:f3:
d5:09:6c:3a:74:71:b8:38:0e:c5:0a:60:15:57:68:
af:c0:70:7b:f0:d1:18:5f:96:54:22:57:15:6d:d7:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:22:C0:F0:CD:37:D8:4C:0F:55:29:62:58:A0:EE:D1:F0:E5:9C:F1
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FCLA8M032EwPVSliWKDu0fDlnPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.60.0/24
IPv6:
2a0f:b100::/44
Signature Algorithm: sha256WithRSAEncryption
5f:d3:69:10:4b:d1:b2:2b:eb:8e:3c:12:68:34:fd:a6:61:b8:
8c:fe:a4:ec:8a:66:e0:8e:45:32:fd:b8:77:7a:61:9e:78:58:
cc:51:2b:ee:f5:78:f6:a6:29:dc:ad:a6:78:8c:83:ce:9f:a1:
92:a6:6b:c7:2c:c5:37:84:ca:f3:e0:69:16:89:8f:2e:53:65:
09:33:5a:0f:5d:96:3e:ce:6b:13:36:8c:f6:15:5b:98:85:4d:
7a:b2:c7:e2:90:5e:51:70:c7:c1:25:7e:ac:85:75:31:a9:fe:
ba:1a:36:82:de:3e:16:07:83:7d:ba:bd:7a:db:90:50:f3:01:
55:2c:26:63:14:5b:9b:26:fe:c5:06:af:18:7d:45:8d:81:02:
9f:3c:66:90:a3:bd:de:41:3c:ab:fb:ee:83:87:ca:71:0c:f8:
de:a2:a3:20:75:35:7b:34:38:0c:18:4d:20:ca:65:e3:5f:98:
65:59:16:a0:3d:b8:b4:37:f4:9a:4b:e6:fd:23:88:61:44:09:
6e:18:a6:ff:f7:5e:f3:1a:72:ed:d8:f8:63:c7:06:df:83:c8:
03:4f:05:c2:49:f3:b4:20:a9:80:7a:a0:f9:c7:6c:5f:fd:15:
1e:6b:c2:b0:6a:97:3a:02:58:3e:4d:95:95:80:ec:d9:f0:d0:
65:b4:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:52 2025 by rpki-client