Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/FJbMRoaeqUROvHlAGq4wmoQYILM.roa
File: FJbMRoaeqUROvHlAGq4wmoQYILM.roa (raw, json)
Hash identifier: G0ATkDYnJKgoVnTVybxUdjgTUNHLuVT+jWu/8m7BU7A=
Subject key identifier: 14:96:CC:46:86:9E:A9:44:4E:BC:79:40:1A:AE:30:9A:84:18:20:B3
Certificate issuer: /CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Certificate serial: 01856CAF1EBE38E46DB63A160A6594586357
Authority key identifier: 2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/FJbMRoaeqUROvHlAGq4wmoQYILM.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62005
IP address blocks: 213.109.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1e:be:38:e4:6d:b6:3a:16:0a:65:94:58:63:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c256b1d4abb21395d97263a5fa8d3a55391db61
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1496cc46869ea9444ebc79401aae309a841820b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:13:b1:97:e0:d9:11:0c:5a:08:cc:fc:ce:
19:f6:d7:8b:f4:6e:35:47:75:ad:0e:4f:e0:4b:74:
78:fc:88:1a:8b:b2:8c:05:70:ab:db:fa:f5:e6:64:
06:c6:5e:ef:92:6b:62:ae:62:ab:c1:e6:1b:ae:0d:
b5:fb:76:42:c1:8c:1a:8a:c9:86:65:47:b8:56:21:
8e:63:ff:e8:fa:cf:52:d6:cb:67:f3:f2:3f:42:31:
ff:a4:74:37:ec:98:02:f5:f6:1a:e2:88:fa:1a:f2:
0d:d7:5c:c4:ca:4e:25:b3:39:c8:aa:09:6a:f8:b3:
ea:70:9e:03:7d:76:14:46:0b:4c:d4:fa:60:8e:14:
80:93:6f:74:ce:ce:18:0b:8b:6a:f6:90:aa:e2:14:
61:7f:a8:82:5e:fb:61:d6:71:0e:b6:bf:3a:12:2d:
06:62:8a:d5:ac:71:1c:77:05:83:2f:06:36:c7:4e:
fd:5f:a1:f4:28:4d:2e:07:0c:94:c5:a6:cc:60:84:
4f:8c:97:53:5d:79:29:c3:71:7b:ac:62:ed:e3:2c:
10:cf:1c:5e:43:96:83:b8:1c:4b:ed:7e:ad:38:dc:
d0:0e:d4:a0:b2:9e:54:2a:a3:e8:db:97:f8:b8:ff:
d7:b6:c8:e3:9b:7e:68:fb:cf:1f:6a:12:a3:38:25:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:CC:46:86:9E:A9:44:4E:BC:79:40:1A:AE:30:9A:84:18:20:B3
X509v3 Authority Key Identifier:
keyid:2C:25:6B:1D:4A:BB:21:39:5D:97:26:3A:5F:A8:D3:A5:53:91:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LCVrHUq7ITldlyY6X6jTpVOR22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/FJbMRoaeqUROvHlAGq4wmoQYILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f14e76-cacf-45ce-8080-2c2905c3c83f/1/LCVrHUq7ITldlyY6X6jTpVOR22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b9:4c:0c:de:0c:e7:df:70:0c:d5:cc:83:ff:5f:6b:20:e4:
f3:e7:ca:aa:9b:9f:68:a5:cd:e7:1a:9a:e5:46:dd:15:34:bd:
46:46:ba:69:c2:fe:99:46:4f:3e:29:e2:6e:09:f4:c1:cd:1c:
66:6b:e0:5d:a5:ed:16:d8:99:4d:25:a5:6b:74:fb:7d:1c:85:
ca:10:46:f0:f7:de:95:af:d2:48:ff:07:36:2c:12:43:9b:95:
ad:1b:1b:52:b0:65:45:1a:18:5d:87:30:90:b0:b0:ed:34:71:
5d:5a:73:f1:a9:0e:f0:86:4e:f8:c7:db:dd:07:6d:68:8f:b0:
72:72:8d:9e:a3:50:e8:c0:09:d8:c6:1b:d8:1f:2a:ad:1e:9a:
e5:9d:3b:4a:19:2f:69:32:2d:26:27:d8:e4:eb:0a:5d:52:e1:
61:1f:70:79:89:ae:b4:4d:73:f4:8d:38:3d:2c:90:89:f3:2b:
0c:10:12:18:0c:38:d8:76:fd:78:da:a3:51:a9:bf:5b:1a:41:
7f:33:54:68:67:50:11:9e:90:98:2e:b6:8b:fa:60:fe:aa:5d:
12:94:a6:12:88:4a:1e:53:e9:47:e0:9f:10:da:a0:bf:b2:36:
6d:36:a9:0c:e6:09:93:2d:2a:9d:dd:e7:02:97:3a:36:d2:43:
c0:3c:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:26:16 2025 by rpki-client