Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/FUtAFL_v1PP_Z8A582DPNCPsEeU.roa
File: FUtAFL_v1PP_Z8A582DPNCPsEeU.roa (raw, json)
Hash identifier: cfrvngraylPndm6j/Fsg4z/dITP9YTFQvdEV2VqJUnQ=
Subject key identifier: 15:4B:40:14:BF:EF:D4:F3:FF:67:C0:39:F3:60:CF:34:23:EC:11:E5
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0191F6420A61E8EE2BF615385337EE8A3C21
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/FUtAFL_v1PP_Z8A582DPNCPsEeU.roa
Signing time: Sun 15 Sep 2024 15:16:48 +0000
ROA not before: Sun 15 Sep 2024 15:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 82.97.196.0/23 maxlen: 24
82.97.199.0/24 maxlen: 24
89.38.106.0/23 maxlen: 24
91.238.148.0/23 maxlen: 24
185.77.250.0/23 maxlen: 24
188.214.89.0/24 maxlen: 24
188.241.59.0/24 maxlen: 24
193.169.8.0/23 maxlen: 24
193.192.52.0/23 maxlen: 24
193.239.172.0/23 maxlen: 24
193.239.246.0/23 maxlen: 24
194.24.234.0/23 maxlen: 24
194.88.134.0/23 maxlen: 24
194.135.132.0/23 maxlen: 24
194.246.106.0/23 maxlen: 24
195.2.196.0/23 maxlen: 24
195.13.48.0/23 maxlen: 24
195.34.80.0/23 maxlen: 24
195.93.140.0/23 maxlen: 24
195.128.188.0/23 maxlen: 24
195.133.208.0/23 maxlen: 24
195.135.192.0/23 maxlen: 24
195.189.250.0/23 maxlen: 24
195.210.44.0/23 maxlen: 24
195.254.140.0/23 maxlen: 24
213.159.10.0/23 maxlen: 24
213.159.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f6:42:0a:61:e8:ee:2b:f6:15:38:53:37:ee:8a:3c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Sep 15 15:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=154b4014bfefd4f3ff67c039f360cf3423ec11e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fa:07:cf:a5:57:41:51:68:90:22:f6:0e:58:
7a:78:7c:0d:f3:ea:10:bd:4e:29:f6:d1:7f:18:aa:
ac:38:5f:73:6c:85:54:a1:fb:e9:04:f8:0f:de:fb:
18:32:03:ab:cc:ec:e0:02:39:e9:7d:22:62:e4:e7:
44:96:09:f1:25:91:9f:37:db:d7:27:4e:54:f3:cf:
49:9f:3a:8f:8f:5f:31:bf:2d:a4:ba:dc:21:ef:27:
84:99:a7:bb:6f:7f:dd:87:08:ca:23:4d:c2:78:e6:
41:a1:f2:e4:32:72:b6:76:8d:05:84:98:f0:4f:45:
04:ad:e1:bc:0e:9a:99:ed:d1:fd:d9:29:71:e5:1b:
8e:53:22:d8:d1:81:9c:83:0f:ec:20:01:62:2a:03:
2a:44:83:91:5b:4d:c8:c0:d8:0f:5d:2b:f9:52:f3:
c4:2d:c6:9b:a3:b1:39:ce:14:89:e2:69:6f:50:5a:
00:f7:ff:a3:5b:85:ed:a0:3a:2e:1f:2c:a7:d1:16:
05:99:0d:4d:54:1b:e1:f5:40:ef:2c:34:d8:79:a9:
d3:82:79:48:2a:06:34:30:30:55:0d:66:03:bd:07:
27:fa:f0:08:df:66:b9:2e:a2:06:1b:a7:f5:3d:a0:
f7:c0:a1:1b:6c:fc:2a:b2:10:ca:a4:4a:94:73:31:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:40:14:BF:EF:D4:F3:FF:67:C0:39:F3:60:CF:34:23:EC:11:E5
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/FUtAFL_v1PP_Z8A582DPNCPsEeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.196.0/23
82.97.199.0/24
89.38.106.0/23
91.238.148.0/23
185.77.250.0/23
188.214.89.0/24
188.241.59.0/24
193.169.8.0/23
193.192.52.0/23
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.132.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
54:20:9d:f4:a8:5a:c4:77:9d:87:28:19:cc:0e:5d:57:ea:34:
11:13:e8:cb:db:cd:88:f6:ed:a3:49:e2:c5:28:f9:fe:f1:58:
32:cb:c9:10:64:3a:a2:d2:64:5b:ff:20:b1:50:2f:de:30:5d:
bc:95:d4:05:cd:ab:e2:53:72:62:6a:ac:89:fa:31:c4:68:6f:
c1:34:93:6c:0d:c0:c9:25:95:ad:e5:6c:5b:34:93:be:68:6d:
f6:4c:de:de:03:d2:9b:e0:b2:a6:21:29:a4:58:99:9f:5a:dc:
ba:43:a6:4b:64:f6:a1:7c:cb:12:59:3c:62:3f:f6:da:ed:74:
ef:da:fc:e3:00:68:94:ad:cc:cc:e9:69:5a:a2:6f:93:bd:9a:
12:34:13:17:66:ff:8c:7c:07:1e:23:00:6a:5a:3a:6c:b9:44:
e4:4b:71:68:b7:30:af:36:29:c8:16:34:13:b6:99:c6:f9:ab:
28:43:7c:17:bf:db:4a:31:3b:a0:5a:84:82:8f:01:68:24:a6:
85:c4:60:a9:d2:d6:10:68:6f:ef:54:2c:bf:f5:45:ce:ff:92:
21:f9:41:b8:9f:a2:27:a6:9e:c9:f9:f1:e2:6f:65:0d:0c:fa:
4e:fb:19:9c:62:6d:13:0d:ee:7d:50:6e:be:e8:b7:43:8e:58:
04:a8:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:08 2025 by rpki-client