Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa
File: FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa (raw, json)
Hash identifier: zmpLfs/691bdiYAVSZTFtEj2DvlsbiXT1z8hvns9wAo=
Subject key identifier: 16:20:9E:63:F9:81:10:12:C1:45:B2:F5:E0:93:10:8D:6F:D3:12:94
Certificate issuer: /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial: 01941F8C8B1909E1DBDF9625FB03B1AFEB85
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 193.34.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:19:09:e1:db:df:96:25:fb:03:b1:af:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16209e63f9811012c145b2f5e093108d6fd31294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:c3:3a:c2:0c:ef:76:da:df:17:f9:25:11:
23:b6:26:86:81:16:5c:15:e5:76:f3:67:c7:db:e4:
b2:ec:df:0a:5c:03:c9:58:7b:6c:90:d2:ed:bc:ee:
b4:e9:87:3c:42:8b:07:a3:b1:d8:da:a0:9d:e2:87:
fc:cd:65:1f:a5:ac:94:60:dd:69:f0:e8:1f:89:3b:
30:a1:14:df:92:d1:3e:70:e8:52:31:5b:25:ab:72:
71:4b:03:94:bc:0b:77:fd:6b:74:bd:6a:e4:d2:50:
b6:c3:56:2e:1f:23:35:5f:15:80:ae:b7:47:67:69:
93:30:d3:d2:ee:1e:21:25:d7:d5:49:9b:e8:50:f1:
22:a2:bb:de:91:4d:81:6b:60:d0:13:93:ca:9c:37:
5d:13:00:c2:9d:8c:d7:49:fc:1e:b6:09:0d:f0:89:
85:36:51:9e:68:f0:78:f7:a6:7a:ff:da:ad:14:89:
18:cb:d7:ee:f2:85:9b:62:8d:ca:d3:94:3c:0a:34:
30:73:c6:26:89:4b:0b:e4:81:d0:ae:1e:55:79:a0:
c8:32:82:91:d4:07:d7:d9:47:f3:4d:22:b5:33:16:
73:d1:ea:6a:de:f5:69:b7:0e:dd:3f:13:90:f3:f8:
0f:f0:37:3b:c8:1d:d0:ba:d5:b2:fd:de:55:0b:17:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:9E:63:F9:81:10:12:C1:45:B2:F5:E0:93:10:8D:6F:D3:12:94
X509v3 Authority Key Identifier:
keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/FiCeY_mBEBLBRbL14JMQjW_TEpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.4.0/22
Signature Algorithm: sha256WithRSAEncryption
56:af:83:5a:16:3a:42:af:82:58:f2:b5:14:3e:f7:0a:96:7b:
2b:25:41:76:42:19:e7:32:22:25:55:f4:1e:26:15:02:78:87:
a0:1c:21:bf:4a:ec:c1:e0:8c:3b:25:62:65:d8:60:3c:a4:2a:
a0:ae:2c:66:16:88:53:4d:ce:05:79:b0:f6:b0:f0:99:2b:18:
1a:78:5c:e4:0c:55:02:6b:dd:30:5b:f8:02:a8:b9:6d:94:e1:
fd:f2:fc:c0:01:bf:1a:d7:9b:65:c3:13:27:f5:87:e3:25:48:
c6:6a:01:18:e2:a0:d8:c1:55:7c:65:a7:20:8b:f6:99:cc:e9:
91:24:34:ac:a8:f6:9f:e4:51:26:3a:19:40:a1:b5:3e:cd:de:
78:bd:31:ab:0c:b3:fc:96:04:d3:d3:5e:9e:15:e7:cb:16:06:
bd:4b:7d:47:22:60:70:0f:21:58:1b:a8:1a:9e:9b:1f:95:32:
10:ef:fd:8c:84:cb:06:72:ba:5a:a8:9b:40:4b:eb:f0:2b:ef:
2e:e6:b0:cd:df:fc:1e:42:a0:e4:78:c1:1f:1e:6f:1b:03:3f:
d8:26:48:bd:95:e6:cd:c1:62:e4:b0:2c:dc:04:10:ba:3d:7b:
d7:40:2a:f2:fb:a6:e2:20:15:4e:e7:9a:3d:37:da:41:64:0f:
c6:a0:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:11 2025 by rpki-client