Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/FPTheWvBK1JsV9CbWUJy4Tfa7ts.roa
File: FPTheWvBK1JsV9CbWUJy4Tfa7ts.roa (raw, json)
Hash identifier: 9tMRXcCpHQELqP53ptNH22SwERV7GAPJXlavHzisebg=
Subject key identifier: 14:F4:E1:79:6B:C1:2B:52:6C:57:D0:9B:59:42:72:E1:37:DA:EE:DB
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA1D4F5384B89FB706280E9DA5570
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/FPTheWvBK1JsV9CbWUJy4Tfa7ts.roa
Signing time: Sun 01 Jan 2023 11:14:51 +0000
ROA not before: Sun 01 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24614
IP address blocks: 193.140.252.0/23 maxlen: 23
194.27.188.0/22 maxlen: 22
194.27.196.0/22 maxlen: 22
193.255.252.0/22 maxlen: 22
194.27.238.0/23 maxlen: 23
194.27.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a1:d4:f5:38:4b:89:fb:70:62:80:e9:da:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f4e1796bc12b526c57d09b594272e137daeedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:7c:f0:d4:c4:5a:98:ad:36:c8:67:10:e8:
56:17:82:b3:39:6b:94:f2:ee:4b:16:ce:f2:46:9b:
f9:35:d2:45:12:23:6b:9c:fb:51:b7:20:fc:f8:8e:
69:93:b9:1b:b5:1b:19:ec:5b:ad:fb:fd:23:49:f6:
8f:87:eb:fc:d4:aa:5c:90:a6:23:5b:72:4f:58:37:
f9:11:ed:1a:b1:bb:a3:f7:02:22:91:93:84:81:ed:
1c:37:3c:90:99:76:71:a1:6f:43:ab:f7:18:69:21:
27:e3:be:67:7d:ff:89:50:ec:c8:c5:1c:5c:50:a7:
53:ab:f2:a0:c7:99:f4:fe:d8:83:32:11:e4:ed:87:
a9:fe:28:56:0f:2a:22:bd:78:b0:0c:60:64:e2:98:
a3:a9:93:50:bc:49:b5:c3:5f:d0:47:31:50:72:81:
d1:ba:d1:cf:30:95:97:f2:bf:d6:d7:03:47:6c:f5:
90:0d:53:58:0f:90:86:cd:03:2e:83:a3:32:ec:1f:
c3:b8:80:4f:1e:8e:45:73:7d:c0:ea:5a:d2:0b:59:
b3:fd:89:65:7f:84:70:c5:8a:a6:e0:b0:a1:d1:c6:
24:06:90:45:b6:c2:4d:21:42:96:b2:00:2e:b1:49:
1e:47:05:1c:1b:18:7e:60:63:41:93:e7:7a:43:05:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:E1:79:6B:C1:2B:52:6C:57:D0:9B:59:42:72:E1:37:DA:EE:DB
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/FPTheWvBK1JsV9CbWUJy4Tfa7ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.252.0/23
193.255.252.0/22
194.27.188.0/22
194.27.196.0/22
194.27.238.0-194.27.255.255
Signature Algorithm: sha256WithRSAEncryption
91:09:5b:3e:0b:57:c4:67:b7:3a:6f:b6:4a:3f:2d:54:a3:f8:
db:91:67:8b:15:57:a6:bc:fb:30:ce:e0:8e:14:04:4a:ce:90:
eb:a9:2c:fe:dc:b6:5e:20:7a:39:48:57:79:c5:66:c1:2d:dd:
4d:61:c6:13:71:df:47:f4:52:2c:bf:2f:54:5d:5a:41:3e:1c:
82:7c:15:e4:72:2a:9d:13:97:2c:82:1f:97:7d:87:cc:43:3d:
2b:4b:11:ef:68:27:fa:da:55:d9:07:3e:60:b4:97:50:1a:d4:
94:50:21:a1:ca:99:0e:6e:95:2c:38:0d:16:cf:3d:da:64:00:
16:44:36:1b:d3:48:65:57:c4:07:fe:ab:11:0a:38:8d:65:73:
f3:60:2e:81:86:e0:41:e7:62:0f:c8:c4:d5:c5:54:cb:d0:99:
9a:23:8f:41:ce:7c:0c:e9:94:c3:b9:a8:4f:59:c5:26:21:c6:
d9:9c:bc:20:0b:0e:fb:29:9d:1b:b8:73:54:61:d4:c4:38:c9:
61:3b:cd:52:8a:2c:98:8a:3d:4e:9f:9b:c9:a9:f4:b2:4c:62:
6e:b2:9c:f8:b8:ad:6d:57:9a:79:f1:f8:cd:ed:4b:bf:23:52:
87:6e:83:1e:cd:08:84:87:6d:67:18:4a:c9:b7:a7:78:e8:99:
c2:ab:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:58:50 2025 by rpki-client