Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fdv1_eo30mSM3mYoMCIS5tuu9w4.roa
File: fdv1_eo30mSM3mYoMCIS5tuu9w4.roa (raw, json)
Hash identifier: f2wSkbv3fE2GyrwWzl0RPZTnWDUsPiRlsvMfsR2htLM=
Subject key identifier: 7D:DB:F5:FD:EA:37:D2:64:8C:DE:66:28:30:22:12:E6:DB:AE:F7:0E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D24B2B7012D757765B0117BED8D87
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fdv1_eo30mSM3mYoMCIS5tuu9w4.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25185
IP address blocks: 46.47.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:24:b2:b7:01:2d:75:77:65:b0:11:7b:ed:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ddbf5fdea37d2648cde6628302212e6dbaef70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:1f:ce:b3:2c:fd:95:61:61:3a:9b:06:12:
5b:4d:a5:f4:3f:b5:82:35:7f:5a:6b:ea:2d:c0:9f:
a9:7b:3d:9b:00:e1:be:51:c7:d1:9c:87:45:89:05:
89:a0:f5:9c:e4:68:6a:46:68:7b:98:50:e0:c8:d6:
81:93:7b:9f:d7:89:bf:1e:ed:6a:c0:48:69:95:cd:
ae:cb:cd:c6:54:6a:bb:9b:c5:95:0b:dc:9d:ed:ce:
59:7c:c2:c8:e2:34:fa:5f:83:9c:5d:3a:fa:26:c9:
1d:59:57:f6:3a:c4:27:9e:c8:06:82:1a:52:6a:ec:
9d:ee:75:5e:3b:4d:9a:a4:9f:75:2d:8b:5b:81:57:
d0:5f:c4:bb:a8:c5:07:93:d8:1f:7e:c8:20:bb:b8:
a7:0b:c3:27:4d:42:e3:53:23:a2:40:13:9f:89:27:
82:09:a3:64:44:72:f9:65:e4:5f:60:f7:c9:10:51:
1b:fe:f3:6a:41:35:f1:85:73:e3:67:d8:b8:b9:5c:
13:c0:f3:ef:dc:4f:b1:ea:92:10:24:3b:a2:e4:4c:
de:49:4e:a8:9a:a6:2d:33:34:93:59:a5:70:cc:24:
8d:3d:11:1d:57:23:b4:13:64:05:65:11:8b:b2:b0:
27:f0:ed:ec:3c:60:71:83:b8:32:7b:96:ed:a1:21:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:F5:FD:EA:37:D2:64:8C:DE:66:28:30:22:12:E6:DB:AE:F7:0E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fdv1_eo30mSM3mYoMCIS5tuu9w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d8:87:fe:69:bb:24:c4:b2:00:fb:25:65:f9:c3:66:c1:1f:
bb:f9:02:64:a6:ff:a0:99:ab:57:a5:dd:04:87:04:d9:23:7e:
4f:15:31:c5:81:a4:84:33:f7:0e:1c:8c:76:0d:c2:11:00:35:
2d:15:7a:f0:99:a3:31:74:10:7e:52:8a:98:7c:5a:b7:3e:25:
6e:22:5c:04:1e:28:59:14:e1:27:6b:bb:50:b8:0b:75:65:63:
e3:e5:f8:f1:e6:fa:8e:33:0b:13:64:20:57:ac:41:17:eb:8b:
94:6e:fe:98:21:a7:cd:81:68:c1:7c:3d:e8:06:6c:88:13:7d:
81:86:5f:96:58:78:e5:30:eb:79:bb:3c:8e:3b:5f:d1:1e:61:
9d:91:75:e3:92:d0:02:ea:11:91:4c:42:64:8d:d5:cc:d6:15:
e8:96:e1:71:95:b2:b6:e4:8c:18:8c:82:b0:34:b7:dd:7e:72:
c6:47:c8:98:13:ef:f3:51:d2:36:c4:40:ed:c1:6d:5a:ad:34:
c8:e7:f4:8b:f3:5f:e8:f9:24:12:cd:ef:27:22:9d:87:21:1f:
f2:2d:86:15:8b:1f:49:25:3f:07:1f:58:f5:bc:9d:7f:cb:96:
48:3c:af:c3:b0:e6:2b:39:90:72:1e:a9:00:bb:b2:3d:ee:b3:
dc:2c:f9:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijSSytwEtdXdlsBF77Y2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjUwMTAxMTU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRiZjVmZGVhMzdkMjY0OGNkZTY2MjgzMDIyMTJlNmRiYWVmNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV4fzrMs/ZVhYTqbBhJbTaX0P7WC
NX9aa+otwJ+pez2bAOG+UcfRnIdFiQWJoPWc5GhqRmh7mFDgyNaBk3uf14m/Hu1q
wEhplc2uy83GVGq7m8WVC9yd7c5ZfMLI4jT6X4OcXTr6JskdWVf2OsQnnsgGghpS
auyd7nVeO02apJ91LYtbgVfQX8S7qMUHk9gffsggu7inC8MnTULjUyOiQBOfiSeC
CaNkRHL5ZeRfYPfJEFEb/vNqQTXxhXPjZ9i4uVwTwPPv3E+x6pIQJDui5EzeSU6o
mqYtMzSTWaVwzCSNPREdVyO0E2QFZRGLsrAn8O3sPGBxg7gye5btoSG9AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3b9f3qN9JkjN5mKDAiEubbrvcOMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvZmR2MV9lbzMwbVNNM21Zb01DSVM1dHV1OXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALi/1MA0G
CSqGSIb3DQEBCwUAA4IBAQCX2If+abskxLIA+yVl+cNmwR+7+QJkpv+gmatXpd0E
hwTZI35PFTHFgaSEM/cOHIx2DcIRADUtFXrwmaMxdBB+UoqYfFq3PiVuIlwEHihZ
FOEna7tQuAt1ZWPj5fjx5vqOMwsTZCBXrEEX64uUbv6YIafNgWjBfD3oBmyIE32B
hl+WWHjlMOt5uzyOO1/RHmGdkXXjktAC6hGRTEJkjdXM1hXoluFxlbK25IwYjIKw
NLfdfnLGR8iYE+/zUdI2xEDtwW1arTTI5/SL81/o+SQSze8nIp2HIR/yLYYVix9J
JT8HH1j1vJ1/y5ZIPK/DsOYrOZByHqkAu7I97rPcLPnl
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:22 2025 by rpki-client