Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/FN9RGBMyQ31Y_fViha13qkky7DI.roa
File: FN9RGBMyQ31Y_fViha13qkky7DI.roa (raw, json)
Hash identifier: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=
Subject key identifier: 14:DF:51:18:13:32:43:7D:58:FD:F5:62:85:AD:77:AA:49:32:EC:32
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019425218088B92B1AB9DA61A215E388736D
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/FN9RGBMyQ31Y_fViha13qkky7DI.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203424
IP address blocks: 147.12.32.0/19 maxlen: 19
185.45.176.0/22 maxlen: 22
195.181.128.0/19 maxlen: 19
213.128.160.0/19 maxlen: 19
217.116.80.0/20 maxlen: 20
2a02:2c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:80:88:b9:2b:1a:b9:da:61:a2:15:e3:88:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14df51181332437d58fdf56285ad77aa4932ec32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:cb:2c:cf:bf:7f:37:a1:59:96:c8:92:87:
80:a0:bb:90:00:02:a0:9f:a1:a3:8d:c7:1b:44:a0:
fa:e9:d5:2e:31:0e:e2:45:b8:dc:a6:96:be:b2:52:
20:56:5f:be:0d:3e:0e:5a:2d:b6:2c:2d:16:d8:c4:
75:0f:53:38:3b:ec:b3:82:72:22:58:3d:9a:ac:90:
2c:74:48:83:f4:13:bf:9a:0d:f4:05:6d:f1:3e:ad:
78:4b:d7:19:6c:bd:28:41:8f:a0:45:ad:87:d0:f0:
52:b1:87:c9:bb:47:ca:02:2c:8d:2f:9a:af:c7:1d:
a8:9a:42:0f:88:64:45:3f:c1:3d:2e:7b:d8:29:e6:
1c:fc:50:9e:53:1e:1a:d3:0b:8e:c0:27:0f:51:a5:
58:54:8d:89:6a:17:65:e6:ff:87:7e:b3:f3:03:b5:
13:70:15:1d:d6:8b:e4:1a:0d:5c:d0:1c:c3:1b:fd:
c6:d3:fb:b7:5a:b1:ab:95:83:ca:1d:f2:7e:b7:49:
49:93:4d:b7:fb:ad:f0:e1:2a:d1:86:ce:f7:61:3a:
76:e0:e0:d7:a6:55:67:ad:8e:e8:95:c5:92:6a:63:
93:2a:85:b9:3f:1d:3c:37:3b:f3:96:fc:30:f6:2b:
d4:15:7f:d8:ab:80:2a:d6:9d:be:7c:c2:37:f8:33:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:51:18:13:32:43:7D:58:FD:F5:62:85:AD:77:AA:49:32:EC:32
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/FN9RGBMyQ31Y_fViha13qkky7DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.32.0/19
185.45.176.0/22
195.181.128.0/19
213.128.160.0/19
217.116.80.0/20
IPv6:
2a02:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
32:97:ba:70:79:df:c8:49:69:b9:eb:ab:7c:37:db:10:d1:e1:
af:0f:58:7a:7c:f8:45:77:1d:8d:2a:c5:ee:fb:f0:47:70:79:
e2:c8:71:eb:41:30:77:81:8f:7c:73:de:df:2a:fb:2a:a6:49:
3c:bb:8f:06:fa:19:14:96:4a:e1:0f:7e:85:00:8e:ab:2b:82:
0d:24:28:18:30:a8:d3:11:83:99:ff:a9:27:a3:62:d4:d1:b6:
43:ad:57:9d:48:58:b1:a4:66:8b:cc:dc:ce:4f:f2:d0:2e:f8:
90:cb:e5:af:c8:9a:9c:08:4f:49:70:6c:b2:c2:b8:bc:27:9c:
07:6b:e7:2e:52:52:e6:66:c2:7e:39:31:6f:72:bc:d7:da:95:
bf:66:75:f9:12:78:84:7b:c4:b5:94:62:2f:af:47:74:7c:38:
8d:28:1d:87:6a:e3:cb:b9:da:93:40:42:99:f7:14:a8:c7:17:
e0:5e:82:e5:0d:2f:cd:33:63:ff:48:f3:bb:e7:62:3f:84:b9:
e3:d3:f4:b1:50:73:01:a8:97:4e:1e:95:3e:ea:16:f1:cc:64:
23:92:5b:1c:d0:05:48:00:96:1b:e9:f4:cd:07:d3:c3:05:4c:
ed:35:c1:ff:47:e1:ee:3e:a3:5e:90:21:3d:97:1f:33:b9:4d:
6d:6b:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:13 2025 by rpki-client