Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ftxseE_q62DFdcTMs1a6AXSaLB4.roa
File: ftxseE_q62DFdcTMs1a6AXSaLB4.roa (raw, json)
Hash identifier: Qrw4jY30xcZ2zGLs9dwRMpnFeUZ7xsPsOVQj//dpm+8=
Subject key identifier: 7E:DC:6C:78:4F:EA:EB:60:C5:75:C4:CC:B3:56:BA:01:74:9A:2C:1E
Certificate issuer: /CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Certificate serial: 01856E2F81743610AF97BA72E3513814D2EB
Authority key identifier: 69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ftxseE_q62DFdcTMs1a6AXSaLB4.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:81:74:36:10:af:97:ba:72:e3:51:38:14:d2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ddaba23c37fe8df60be2de253f78dab0cb9bd7
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7edc6c784feaeb60c575c4ccb356ba01749a2c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:f0:08:3a:38:d7:c2:b6:14:47:26:5b:a2:
e1:d3:31:67:4a:42:38:22:ee:ae:aa:51:00:2f:9c:
14:a1:ff:2b:99:f9:75:04:ca:6b:44:83:7c:7b:df:
f5:a9:f1:e1:b3:89:0f:4e:6e:bf:dc:f4:ad:3c:7e:
53:f2:05:5e:c1:1b:e3:36:6c:dc:a2:25:a2:b2:1d:
b4:73:a7:c7:75:c8:6c:b4:47:97:3e:50:f8:ff:b3:
6c:c2:3c:e9:78:b0:bf:d8:f4:6b:86:70:a8:dc:23:
97:31:27:b3:99:47:ad:e7:95:88:80:9c:2d:ad:69:
b2:2f:de:81:27:36:16:a3:bf:a4:f0:a2:a2:d2:f4:
53:8e:ad:d9:91:93:bc:27:50:7a:0e:5a:8d:9e:1d:
b7:c8:19:bf:e0:df:7e:d0:a0:80:92:a1:12:61:4e:
81:fc:f1:4b:e2:f0:96:f1:68:8b:88:36:69:32:3b:
f4:6b:57:56:a6:c0:62:21:64:3a:94:be:d4:fb:de:
f3:bd:37:54:78:52:47:e8:4f:84:63:45:87:dd:f7:
d3:75:2f:ba:05:e1:cf:12:09:ec:eb:35:8f:14:79:
f8:cc:db:a3:e5:b4:6a:3a:de:80:69:1b:6f:63:0b:
fd:b0:a3:8c:49:d4:0b:69:96:11:fe:f2:7b:36:dc:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DC:6C:78:4F:EA:EB:60:C5:75:C4:CC:B3:56:BA:01:74:9A:2C:1E
X509v3 Authority Key Identifier:
keyid:69:DD:AB:A2:3C:37:FE:8D:F6:0B:E2:DE:25:3F:78:DA:B0:CB:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad2rojw3_o32C-LeJT942rDLm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ftxseE_q62DFdcTMs1a6AXSaLB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/dcd87a-2303-4550-bfd6-081c5b8630b0/1/ad2rojw3_o32C-LeJT942rDLm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:7c:b9:42:3a:40:07:94:8a:a3:7a:8c:1d:f4:ab:7d:18:74:
a7:6e:17:9c:b7:f0:ce:bc:ab:39:13:69:99:01:21:ae:a2:39:
1a:c5:f2:44:28:4a:4e:1c:be:8e:11:a5:33:11:ac:71:a8:95:
c7:71:15:61:d7:b1:7b:3f:a1:80:1e:ca:aa:16:ed:99:4c:43:
8c:0a:8e:55:b1:a7:c8:fa:93:63:c3:4d:c4:8f:63:d0:a7:1a:
4f:12:96:d9:94:c1:27:51:92:d3:9f:a3:23:c7:2f:3d:94:79:
f6:f5:73:1b:26:0c:37:42:7c:3b:2e:3f:cb:23:a2:3e:83:bb:
bc:d3:73:4e:7f:0f:eb:18:bc:d8:61:83:bb:f6:5a:42:3f:39:
c4:ae:ab:7a:1f:63:1f:bd:c8:0b:7d:0d:b9:85:31:4d:ae:b7:
c2:f8:1b:7f:09:e2:23:83:ff:d3:2f:51:98:65:9f:29:8a:36:
b3:3f:2a:70:d7:60:f4:cd:93:70:52:d3:6c:3d:4f:34:b4:37:
62:00:40:8b:84:59:bf:2f:76:64:77:20:0b:59:ab:08:f8:93:
c2:06:33:b8:15:81:76:c9:f4:2c:57:83:2b:d8:23:e5:b5:38:
d3:41:72:65:5e:8e:bc:a8:a4:56:e6:e8:05:65:b9:cf:8f:f3:
c5:f4:ed:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL4F0NhCvl7py41E4FNLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGRhYmEyM2MzN2ZlOGRmNjBiZTJkZTI1M2Y3OGRhYjBj
YjliZDcwHhcNMjMwMTAxMTYzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWRjNmM3ODRmZWFlYjYwYzU3NWM0Y2NiMzU2YmEwMTc0OWEyYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr3wCDo418K2FEcmW6Lh0zFnSkI4
Iu6uqlEAL5wUof8rmfl1BMprRIN8e9/1qfHhs4kPTm6/3PStPH5T8gVewRvjNmzc
oiWish20c6fHdchstEeXPlD4/7NswjzpeLC/2PRrhnCo3COXMSezmUet55WIgJwt
rWmyL96BJzYWo7+k8KKi0vRTjq3ZkZO8J1B6DlqNnh23yBm/4N9+0KCAkqESYU6B
/PFL4vCW8WiLiDZpMjv0a1dWpsBiIWQ6lL7U+97zvTdUeFJH6E+EY0WH3ffTdS+6
BeHPEgns6zWPFHn4zNuj5bRqOt6AaRtvYwv9sKOMSdQLaZYR/vJ7NtwX+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7cbHhP6utgxXXEzLNWugF0miweMB8GA1UdIwQY
MBaAFGndq6I8N/6N9gvi3iU/eNqwy5vXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWQycm9qdzNfbzMyQy1MZUpUOTQyckRMbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kY2Q4N2EtMjMwMy00NTUwLWJmZDYt
MDgxYzViODYzMGIwLzEvZnR4c2VFX3E2MkRGZGNUTXMxYTZBWFNhTEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kY2Q4N2EtMjMwMy00NTUwLWJmZDYtMDgxYzViODYzMGIw
LzEvYWQycm9qdzNfbzMyQy1MZUpUOTQyckRMbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjuZMA0G
CSqGSIb3DQEBCwUAA4IBAQA6fLlCOkAHlIqjeowd9Kt9GHSnbhect/DOvKs5E2mZ
ASGuojkaxfJEKEpOHL6OEaUzEaxxqJXHcRVh17F7P6GAHsqqFu2ZTEOMCo5VsafI
+pNjw03Ej2PQpxpPEpbZlMEnUZLTn6Mjxy89lHn29XMbJgw3Qnw7Lj/LI6I+g7u8
03NOfw/rGLzYYYO79lpCPznErqt6H2MfvcgLfQ25hTFNrrfC+Bt/CeIjg//TL1GY
ZZ8pijazPypw12D0zZNwUtNsPU80tDdiAECLhFm/L3ZkdyALWasI+JPCBjO4FYF2
yfQsV4Mr2CPltTjTQXJlXo68qKRW5ugFZbnPj/PF9O00
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:59:50 2025 by rpki-client