Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fm18RFfmtw-ty_MOYt1iAF-NS08.roa
File: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (raw, json)
Hash identifier: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=
Subject key identifier: 16:6D:7C:44:57:E6:B7:0F:AD:CB:F3:0E:62:DD:62:00:5F:8D:4B:4F
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019424448EA628A88594884454D02DCA8C26
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fm18RFfmtw-ty_MOYt1iAF-NS08.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198389
IP address blocks: 94.240.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:a6:28:a8:85:94:88:44:54:d0:2d:ca:8c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=166d7c4457e6b70fadcbf30e62dd62005f8d4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:2a:fb:38:59:e0:8e:52:1d:d8:c7:de:fb:
cc:ca:cc:03:3e:82:f5:c9:d6:f4:cd:c7:68:26:40:
1f:d9:59:e4:51:a6:ba:4c:63:19:73:97:dd:7e:92:
27:c0:dc:61:de:04:b3:2f:b5:ce:5f:a9:99:6f:58:
62:40:91:3c:13:00:a3:6f:b6:e0:81:53:97:d7:9d:
58:8b:0c:b0:a3:e7:0d:f6:ba:4d:9f:37:11:13:2e:
c6:7d:e7:f3:41:1f:db:57:e9:8f:c1:be:69:a5:e8:
f2:0f:62:3e:ca:06:3e:c2:8b:7d:4f:44:0d:77:5c:
10:63:29:eb:e0:30:72:80:77:72:92:27:74:22:fa:
5b:d3:87:33:6c:5a:de:31:d9:96:ff:ab:8a:76:f7:
2e:ee:08:54:c6:3d:b4:a2:a0:b1:8d:54:24:d9:07:
aa:29:3f:bb:af:35:c0:3b:ab:89:46:ad:a7:91:b8:
dd:c2:31:b2:7c:58:4b:0e:0b:a9:80:ad:04:07:a9:
ff:46:e7:fa:ee:07:16:00:a1:5d:12:9f:fa:04:a6:
c1:0c:1b:71:5d:f3:6c:c8:d6:bb:1e:72:fa:29:ea:
ad:92:f8:70:6d:a8:5f:82:54:29:db:71:35:2b:fb:
0e:0b:32:4b:8d:24:e1:12:05:1f:72:59:0c:ee:99:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6D:7C:44:57:E6:B7:0F:AD:CB:F3:0E:62:DD:62:00:5F:8D:4B:4F
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fm18RFfmtw-ty_MOYt1iAF-NS08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b2:22:be:d1:1e:87:16:26:fb:80:e7:90:3f:9b:9e:2d:22:
d7:17:76:62:14:ef:c3:98:a0:9f:71:93:53:03:e3:d7:fa:9c:
4e:ba:7b:fd:1f:53:94:63:7e:e9:41:fc:f7:9f:3e:77:13:ff:
ef:fd:de:30:e0:aa:0b:88:43:e5:b0:bc:2a:b4:19:73:47:c4:
fc:d5:aa:df:b0:d9:a8:9a:50:34:d7:61:03:66:4d:0d:aa:e3:
4a:e3:de:58:d5:ff:f8:02:82:9e:d5:0c:5b:87:08:dc:e6:91:
b3:f1:ae:be:23:ba:88:cd:9d:da:85:00:36:ac:17:10:3b:9d:
e3:7a:03:91:8b:65:ba:90:dd:f5:eb:8a:05:8f:9b:ba:d5:fb:
20:cb:c8:01:c0:c4:e2:40:f0:24:04:5b:d7:1f:05:be:29:78:
8e:28:92:7c:46:cd:6d:15:b2:27:50:c2:67:fa:43:c3:86:5e:
ae:5c:60:fe:c4:aa:32:dc:d9:30:62:f3:51:a7:7b:7b:d5:e3:
43:d8:9e:42:5f:04:25:35:22:20:f7:27:6f:f5:1b:96:44:47:
c9:4f:9b:b5:8d:87:58:45:a1:68:8c:53:df:bf:34:36:0f:87:
43:58:d1:86:e2:53:fa:57:31:36:8a:ae:26:7f:ea:57:0d:24:
6d:3e:3e:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRI6mKKiFlIhEVNAtyowmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl
NTQ2YTQwHhcNMjUwMTAxMjM0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjZkN2M0NDU3ZTZiNzBmYWRjYmYzMGU2MmRkNjIwMDVmOGQ0YjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Yq+zhZ4I5SHdjH3vvMyswDPoL1
ydb0zcdoJkAf2VnkUaa6TGMZc5fdfpInwNxh3gSzL7XOX6mZb1hiQJE8EwCjb7bg
gVOX151Yiwywo+cN9rpNnzcREy7GfefzQR/bV+mPwb5ppejyD2I+ygY+wot9T0QN
d1wQYynr4DBygHdykid0Ivpb04czbFreMdmW/6uKdvcu7ghUxj20oqCxjVQk2Qeq
KT+7rzXAO6uJRq2nkbjdwjGyfFhLDgupgK0EB6n/Ruf67gcWAKFdEp/6BKbBDBtx
XfNsyNa7HnL6KeqtkvhwbahfglQp23E1K/sOCzJLjSThEgUfclkM7pkUewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZtfERX5rcPrcvzDmLdYgBfjUtPMB8GA1UdIwQY
MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt
MjMwNDllNGQyZjEyLzEvRm0xOFJGZm10dy10eV9NT1l0MWlBRi1OUzA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy
LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvANMA0G
CSqGSIb3DQEBCwUAA4IBAQAPsiK+0R6HFib7gOeQP5ueLSLXF3ZiFO/DmKCfcZNT
A+PX+pxOunv9H1OUY37pQfz3nz53E//v/d4w4KoLiEPlsLwqtBlzR8T81arfsNmo
mlA012EDZk0NquNK495Y1f/4AoKe1Qxbhwjc5pGz8a6+I7qIzZ3ahQA2rBcQO53j
egORi2W6kN3164oFj5u61fsgy8gBwMTiQPAkBFvXHwW+KXiOKJJ8Rs1tFbInUMJn
+kPDhl6uXGD+xKoy3NkwYvNRp3t71eND2J5CXwQlNSIg9ydv9RuWREfJT5u1jYdY
RaFojFPfvzQ2D4dDWNGG4lP6VzE2iq4mf+pXDSRtPj7S
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:33 2025 by rpki-client