Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/FFxk-BcPBkUgJFwE14_BuXHfh6w.roa
File: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (raw, json)
Hash identifier: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=
Subject key identifier: 14:5C:64:F8:17:0F:06:45:20:24:5C:04:D7:8F:C1:B9:71:DF:87:AC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 019424457ABE08934534396528603BD90F88
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/FFxk-BcPBkUgJFwE14_BuXHfh6w.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15787
IP address blocks: 212.69.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7a:be:08:93:45:34:39:65:28:60:3b:d9:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=145c64f8170f064520245c04d78fc1b971df87ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:c7:95:4a:8f:9c:2b:bb:c6:84:b2:5b:d3:
61:79:f7:61:22:b5:8e:6a:c9:10:7b:31:85:cc:24:
26:3d:87:37:a6:a5:84:bb:21:7d:bf:ba:65:6c:81:
09:dc:ef:de:ee:68:b4:4d:6b:01:41:9f:9d:ed:26:
83:67:c8:a9:ff:a2:9c:3c:5a:8f:28:ae:4e:f8:c4:
f8:aa:5b:11:63:04:87:60:21:50:d4:55:cb:e7:0f:
c5:4a:80:be:4a:70:3d:6f:e2:4c:99:d0:25:1f:22:
e3:61:48:7f:fe:8d:0b:69:dd:d9:6a:d4:14:65:13:
ce:5a:3a:34:ee:e3:62:de:66:6c:f9:c7:94:77:31:
18:86:30:aa:7f:82:17:b9:fa:7d:5c:73:0a:0c:87:
54:b6:1d:20:bf:39:cf:30:94:be:e0:24:02:ef:e0:
3f:68:84:0a:2b:78:e2:74:f8:f0:93:ca:40:22:d7:
2a:fc:da:89:d7:88:1d:ee:f7:16:3f:5b:09:b5:04:
75:21:53:1b:cc:43:81:d4:d8:38:ea:4b:b0:75:03:
d7:91:26:e3:c7:93:18:e0:0f:eb:86:ed:22:b6:43:
fb:1c:26:0c:43:0e:f9:17:92:30:3f:1d:88:47:b4:
c1:e4:3b:7f:17:e9:91:88:bd:5c:7e:84:d5:d5:e2:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5C:64:F8:17:0F:06:45:20:24:5C:04:D7:8F:C1:B9:71:DF:87:AC
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/FFxk-BcPBkUgJFwE14_BuXHfh6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:16:53:97:76:50:2f:04:6c:44:2c:54:47:f5:3e:21:c7:02:
8e:eb:cd:7a:b3:6e:46:ab:5a:7e:1a:a6:a9:96:e0:16:89:71:
9c:39:0b:1c:40:c5:cc:bc:12:f4:e2:01:e6:79:43:37:ae:14:
9f:47:3f:b3:bd:69:f8:20:25:00:04:de:26:b0:c3:7e:07:e2:
6f:fa:d0:f4:d1:c6:55:d6:59:7a:64:da:69:cb:28:ed:7c:9d:
74:70:ab:46:9b:b9:90:53:09:9a:ef:1e:06:39:6b:f3:69:6a:
9c:9a:73:8a:18:ec:a0:44:f7:db:50:47:93:a9:25:08:35:cc:
a1:f1:45:b0:86:03:6e:79:c3:70:ff:dc:e0:c9:77:b2:26:9c:
e0:54:8f:d9:14:61:16:33:e5:5f:82:8f:5b:82:62:af:9d:5d:
b3:bb:87:98:60:57:33:a6:e2:56:49:1c:9e:fc:95:c9:69:fc:
ca:0b:d2:39:fb:c9:a4:6b:00:b2:a1:e5:9e:1c:55:2c:b9:ab:
9a:57:5c:c7:a3:05:79:fb:f6:07:96:15:eb:05:64:37:c4:2b:
e9:55:bf:b6:fa:ac:25:49:fe:41:c3:54:10:26:94:03:49:ef:
77:77:c6:16:56:a7:f3:53:84:e1:e1:c2:91:99:e5:d2:e5:af:
dc:63:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client