Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/FasPE0L4fE1899bsu_j-7tmu6ok.roa
File: FasPE0L4fE1899bsu_j-7tmu6ok.roa (raw, json)
Hash identifier: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=
Subject key identifier: 15:AB:0F:13:42:F8:7C:4D:7C:F7:D6:EC:BB:F8:FE:EE:D9:AE:EA:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 019422FAED8FA261CB67D7124BA0AE12D899
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/FasPE0L4fE1899bsu_j-7tmu6ok.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 194.11.133.0/24 maxlen: 24
194.11.134.0/24 maxlen: 24
194.11.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ed:8f:a2:61:cb:67:d7:12:4b:a0:ae:12:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ab0f1342f87c4d7cf7d6ecbbf8feeed9aeea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:21:c0:53:5a:cb:e5:b7:5c:4f:77:64:c2:
90:54:3e:d7:b4:88:b0:b0:c1:9d:81:6d:3e:a9:e1:
ce:aa:7c:14:46:17:a1:cd:8c:33:f5:74:f3:5b:90:
72:71:5b:c7:29:2d:a8:59:3e:b4:9f:b5:d3:36:2f:
12:a2:0d:7b:a3:b3:01:3d:a4:d8:01:28:f2:68:3a:
01:c3:7f:ed:5b:e0:d1:7b:e9:41:97:96:7c:43:10:
f8:bd:dc:b5:d4:d7:d5:f5:5c:74:c6:2a:fd:75:cb:
6c:36:c1:67:e9:f1:b8:6b:5a:09:4c:a0:81:f5:a1:
f4:b5:68:d0:e1:28:79:94:50:91:1c:1f:80:1a:8f:
a9:7a:68:b5:e5:b0:44:c2:cd:f2:72:c1:71:0d:3e:
5b:09:38:05:95:5c:70:1c:27:2d:96:62:57:84:a1:
aa:55:bd:c7:1f:6a:1d:56:de:74:ee:dd:fa:f6:03:
e2:f6:af:9a:56:5d:c5:59:05:b9:af:53:a2:fa:eb:
51:db:31:43:29:a5:b6:58:23:03:83:9d:fd:e6:c5:
df:7e:40:e0:c9:98:d8:c6:e1:e2:6e:34:80:dc:7f:
fd:f2:31:24:b1:d9:1d:07:b6:9d:af:db:fe:a5:0e:
cd:4f:75:06:03:fc:9f:80:c4:f5:81:c5:4c:01:ef:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:0F:13:42:F8:7C:4D:7C:F7:D6:EC:BB:F8:FE:EE:D9:AE:EA:89
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/FasPE0L4fE1899bsu_j-7tmu6ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.133.0-194.11.135.255
Signature Algorithm: sha256WithRSAEncryption
6f:c5:8f:8b:6d:b5:b3:cb:12:56:81:9b:4e:0c:47:a6:ab:32:
68:06:3c:0d:d1:a7:0d:83:0e:0b:a3:e5:e8:25:ab:11:99:c0:
1d:5a:b2:d1:a0:3d:00:67:45:cf:b9:9f:90:38:e9:a2:84:26:
57:9e:cd:a7:f3:e6:95:a9:f4:1d:9a:45:f9:7d:2c:5f:95:10:
fe:10:c1:15:02:2e:77:09:b3:17:59:8c:6e:54:8f:ae:96:65:
11:9f:0e:4b:2d:5e:05:4b:43:89:da:c7:75:f7:ee:8e:0b:00:
39:a6:f2:89:7c:00:76:99:42:c5:37:36:c6:45:d9:dd:6c:11:
07:7f:b9:fc:db:61:35:ed:03:89:80:f9:ee:be:58:c3:e9:f8:
a6:01:80:91:1f:d1:31:89:04:21:f6:0c:3f:84:da:c9:06:a0:
cf:d9:10:9e:09:14:4e:f5:17:84:c7:7c:8b:b5:39:5b:11:be:
93:cb:db:c3:36:1b:76:3f:e4:14:f0:33:7d:22:06:0d:15:7c:
b0:25:0d:31:a3:5a:50:5a:e1:15:04:9e:52:2f:e9:78:41:a2:
2e:55:88:4b:2f:eb:cb:af:67:ac:e6:c6:a7:d0:bb:9f:d3:ce:
01:0b:6d:db:09:b5:95:bf:c4:f0:aa:9d:95:2e:1f:c5:03:5b:
e4:af:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:10:18 2025 by rpki-client