Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/FcxOa46i5VosXV9jFzuygwRi3e8.roa
File: FcxOa46i5VosXV9jFzuygwRi3e8.roa (raw, json)
Hash identifier: v/oJSyF/yJZ2BhCLKkxRZQP6GdRk/bgB/pgiUwCfCdo=
Subject key identifier: 15:CC:4E:6B:8E:A2:E5:5A:2C:5D:5F:63:17:3B:B2:83:04:62:DD:EF
Certificate issuer: /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial: 018615D50F2ADB5D49A873000F961DAE89DD
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/FcxOa46i5VosXV9jFzuygwRi3e8.roa
Signing time: Fri 03 Feb 2023 05:52:09 +0000
ROA not before: Fri 03 Feb 2023 05:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 193.246.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:d5:0f:2a:db:5d:49:a8:73:00:0f:96:1d:ae:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Validity
Not Before: Feb 3 05:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15cc4e6b8ea2e55a2c5d5f63173bb2830462ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:3e:71:bd:34:15:a9:07:66:f8:5d:85:06:
4f:0e:e9:a5:46:68:2e:f6:64:b8:f5:e6:6b:7e:a5:
2f:dd:39:e4:a7:a6:4c:67:a3:01:1b:d0:35:20:ff:
92:04:0c:e7:08:56:46:b3:64:a1:82:c4:5b:86:c0:
8d:28:17:d3:e4:30:57:d3:1c:41:f4:d2:80:02:f5:
ab:8c:84:a4:d7:20:31:9b:36:6d:5c:bf:74:13:31:
46:d3:f9:f8:2d:35:f7:d6:85:e5:44:37:5e:c7:51:
a6:06:a8:be:bd:43:26:c0:f5:8a:92:97:27:8e:c6:
80:05:dc:13:ab:81:cd:6f:b8:aa:09:c9:0a:81:51:
62:54:00:86:0e:6c:7a:22:95:45:5c:db:d0:66:47:
c8:8a:c5:b0:c0:5e:11:aa:af:f0:ad:9f:55:bf:df:
70:d3:2f:7b:ee:90:b1:ab:6e:10:5b:0f:f0:20:fb:
91:02:53:09:a6:ee:b8:19:cb:2c:97:0e:00:80:7d:
c9:d3:a0:9d:7d:5b:91:63:f3:9a:a6:30:d8:46:22:
8f:30:e3:1d:a6:ba:0c:c7:eb:4e:1c:d2:8c:07:1e:
24:df:ca:5f:aa:a7:77:46:39:1b:79:56:19:32:1f:
00:24:6f:86:7c:fe:70:32:fc:97:40:72:17:8e:e2:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:4E:6B:8E:A2:E5:5A:2C:5D:5F:63:17:3B:B2:83:04:62:DD:EF
X509v3 Authority Key Identifier:
keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/FcxOa46i5VosXV9jFzuygwRi3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.103.0/24
Signature Algorithm: sha256WithRSAEncryption
10:42:ac:09:7c:1e:cf:e2:6b:70:89:8e:b0:d7:92:f5:3c:20:
cb:51:e1:14:bb:7b:70:c9:69:97:af:3a:6b:90:c7:72:cf:68:
d7:c8:fd:cb:50:6e:1d:5b:39:ce:64:90:b5:0c:35:f2:3a:c3:
bf:c4:15:24:5f:a9:90:50:17:0c:cf:90:ec:4f:d7:ef:6c:c3:
33:20:5a:7f:8c:d1:b3:5e:55:b7:57:4f:ac:b5:45:c2:58:17:
b7:93:a0:4e:0f:34:29:5b:4f:60:f3:16:72:58:62:15:1c:7e:
a6:2c:1b:5c:fa:12:32:c0:a8:62:ae:c7:5a:ec:08:cb:98:a1:
9b:83:9c:95:72:91:47:b1:15:b7:91:26:d2:83:f0:e3:c9:57:
57:85:dc:da:a5:81:08:de:c4:32:b2:6c:3c:8b:09:d3:9c:16:
56:a5:d6:ef:76:fc:78:ba:08:1d:59:40:11:b8:e4:d8:cc:b4:
a0:8b:ed:1e:e5:61:03:bd:56:70:af:bc:c6:26:10:4e:38:b4:
c6:62:b2:f3:ec:c3:79:6a:68:65:fa:6f:ae:8d:69:42:d0:46:
99:f5:ea:e2:68:5e:2d:52:52:23:c4:e6:44:19:b6:a6:97:c3:
81:c2:12:51:9d:ce:26:82:92:fa:7b:60:0b:6c:e7:2f:53:1c:
1d:51:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:29 2025 by rpki-client