Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/FFuyCzey-ipHJjO6uFxO4LXEWh8.roa
File: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (raw, json)
Hash identifier: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=
Subject key identifier: 14:5B:B2:0B:37:B2:FA:2A:47:26:33:BA:B8:5C:4E:E0:B5:C4:5A:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019422FB85697192DB4670DAE5D5B15B3924
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/FFuyCzey-ipHJjO6uFxO4LXEWh8.roa
Signing time: Wed 01 Jan 2025 17:48:16 +0000
ROA not before: Wed 01 Jan 2025 17:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215081
IP address blocks: 94.154.8.0/24 maxlen: 24
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:85:69:71:92:db:46:70:da:e5:d5:b1:5b:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=145bb20b37b2fa2a472633bab85c4ee0b5c45a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:6c:8f:2b:bb:45:92:5f:77:bf:30:3a:fd:
39:e3:22:19:9c:c5:b6:30:81:ae:4a:b8:0f:b4:89:
cb:ac:44:eb:33:a7:37:19:fe:fa:63:ae:b9:fd:3a:
17:8c:f9:ee:28:ef:8c:2a:f0:59:b5:11:7e:51:49:
e5:7f:f8:cf:ba:32:b7:b6:89:f6:fa:cd:4e:ef:c5:
1b:5f:7b:7a:ff:da:c0:50:43:70:de:49:e3:c6:13:
cf:d1:59:85:84:ca:23:d1:91:e9:08:2b:ca:aa:9a:
40:c2:4f:5e:95:c5:5e:44:b4:0e:c5:52:b1:83:ac:
2e:84:5b:4d:a2:df:69:63:8e:43:fe:69:60:63:11:
c9:11:b2:68:dc:57:84:8e:92:bd:83:d0:1b:d7:74:
3a:5e:45:bc:e1:2c:62:8f:d1:37:19:c2:73:34:77:
99:6c:2b:2e:de:d9:c7:d6:08:11:5c:1a:ea:1a:23:
af:0b:ca:3a:a3:c2:b4:d6:15:39:8e:12:b3:3f:cb:
b4:ce:f7:cf:95:4d:11:7e:08:4f:05:8e:80:1a:5c:
78:e8:2a:c0:4f:cb:40:62:71:b3:7b:22:8b:a3:8d:
d6:11:1c:02:64:92:17:a8:f0:f8:86:e3:75:b6:7a:
b2:b2:5b:7e:68:9c:09:0a:c7:b5:64:da:fc:7f:02:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:B2:0B:37:B2:FA:2A:47:26:33:BA:B8:5C:4E:E0:B5:C4:5A:1F
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/FFuyCzey-ipHJjO6uFxO4LXEWh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
178.211.157.0/24
185.234.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:16:5e:bc:16:39:1c:84:d3:0d:e0:bf:8d:09:2b:1f:e2:f9:
8a:67:6d:bb:58:38:d0:c7:91:17:dd:49:10:f9:c9:64:81:27:
bc:34:3f:fc:3e:b7:9d:b0:2d:af:81:13:72:62:12:f2:d6:3d:
bd:b7:98:53:1a:90:00:e7:94:a9:2f:23:72:7a:8f:39:e6:f6:
c5:4f:d5:cf:8d:f0:21:35:92:ca:e0:d6:3a:22:e5:06:36:38:
f7:be:37:e4:89:67:1e:06:fb:39:22:02:74:be:98:1e:f0:8a:
be:dd:05:77:1b:56:15:4d:b4:d6:bd:75:00:48:29:dd:10:67:
03:b6:6b:57:58:df:be:5b:d9:95:b2:0e:c0:0e:1b:aa:65:9d:
0f:94:bf:f6:50:c3:98:c5:15:3a:ce:75:09:dc:00:d5:25:0c:
d8:40:df:e4:95:79:a9:e8:55:90:e8:b5:a9:82:5b:b7:55:59:
d3:3c:09:1f:84:91:8c:3e:49:42:eb:67:1c:36:e7:7f:e8:c6:
dc:8c:55:12:82:8c:a1:90:68:00:2a:b4:3d:d2:bd:3a:0c:43:
8d:ce:ce:7f:61:96:88:51:a5:23:98:57:c6:02:5b:7b:e4:5d:
0f:cb:1a:77:5a:a7:af:0b:17:24:c4:25:c3:8c:d9:ec:8c:f7:
58:5f:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:00:55 2025 by rpki-client