Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FyUTxCdx6ahVsvGmsqlzhjebHvY.roa
File: FyUTxCdx6ahVsvGmsqlzhjebHvY.roa (raw, json)
Hash identifier: LVteJq6NqygXyJmpy44tYX55dOzKzHNFBtj3SpjGy2Q=
Subject key identifier: 17:25:13:C4:27:71:E9:A8:55:B2:F1:A6:B2:A9:73:86:37:9B:1E:F6
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194335E81ADD31B1D3D04307D7F9E26B23F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FyUTxCdx6ahVsvGmsqlzhjebHvY.roa
Signing time: Sat 04 Jan 2025 22:10:19 +0000
ROA not before: Sat 04 Jan 2025 22:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213638
IP address blocks: 79.174.20.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:5e:81:ad:d3:1b:1d:3d:04:30:7d:7f:9e:26:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 4 22:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=172513c42771e9a855b2f1a6b2a97386379b1ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:56:c4:b1:c2:6a:d2:a7:0a:69:57:00:a5:
6c:2f:45:d8:a3:df:e0:c6:12:51:ff:ce:f3:1f:1c:
c3:43:cf:fd:ad:7f:a8:47:38:93:d2:eb:09:28:8b:
6b:01:56:32:05:95:6e:01:cb:9b:8a:f9:14:3e:66:
25:ab:dd:33:96:d0:62:70:e3:4d:e9:62:e4:aa:ca:
4a:e2:c9:92:ae:8c:11:3a:4c:91:42:9c:ef:19:16:
b5:0c:6d:83:8b:33:39:fe:50:3a:56:b8:47:47:2f:
ee:06:d0:e7:73:2f:a3:b4:a8:1b:0a:7e:9c:1a:43:
87:b5:7a:ed:ed:ad:e4:3a:b4:a4:f1:5d:5f:24:2a:
01:da:12:80:6a:70:ea:ed:94:56:c9:04:08:3c:52:
1f:07:9b:87:ef:6d:fe:80:6d:b7:68:2d:5e:3c:66:
3b:cb:34:a0:c5:74:8c:ce:f3:84:a9:b3:a9:f2:a6:
a8:01:f9:e1:9c:7c:8e:ba:75:76:56:cd:8e:9b:82:
09:5d:42:81:bb:21:7d:b4:d3:79:f3:de:aa:c5:2a:
9b:52:50:db:b8:45:64:0e:2a:b5:f1:cc:91:e2:51:
c2:e1:d8:3c:83:fa:1c:be:ab:e6:d8:c1:12:16:90:
5b:31:5d:d2:20:14:ef:f9:cc:ff:36:b2:a8:8f:9f:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:13:C4:27:71:E9:A8:55:B2:F1:A6:B2:A9:73:86:37:9B:1E:F6
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/FyUTxCdx6ahVsvGmsqlzhjebHvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c4:d9:b7:11:62:e3:34:8c:20:e2:4d:8c:89:93:13:45:11:
a6:40:bc:48:61:96:a7:b5:41:0f:5e:d1:ec:dc:41:51:14:37:
86:f4:12:75:03:11:3e:71:ae:95:bd:0d:8f:88:04:8b:2d:d9:
95:6c:0b:f9:9d:dd:41:e9:3a:f6:dd:dc:6b:bc:eb:38:fe:de:
df:0e:24:0f:5b:9c:89:67:0f:13:2f:0f:68:f3:f6:39:1f:8a:
52:71:61:b4:80:69:5f:72:fc:9e:58:a4:b4:0f:35:45:d3:9a:
46:48:bb:2a:47:de:43:d3:e6:ea:7e:c0:68:55:18:2c:f9:24:
4a:4a:da:d9:83:3c:86:6e:48:13:1e:06:e3:36:cd:c9:12:77:
c1:2e:14:c1:dd:d6:15:63:fa:39:f3:4e:03:db:47:fe:23:7e:
42:03:b6:cb:aa:fb:be:0a:e7:e0:04:3a:aa:6d:a1:35:24:0f:
99:18:8e:87:f5:df:57:3e:19:7b:95:c1:77:98:68:d2:be:85:
52:42:58:a6:ca:00:64:09:2e:dc:5d:0f:38:58:3d:79:70:ea:
8f:6b:e6:e3:f6:46:11:bd:20:c8:8e:a4:39:56:7c:c4:b1:e9:
0d:85:25:71:d8:e6:10:3f:43:85:2e:9e:2a:50:0a:47:e3:55:
ac:01:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:07 2025 by rpki-client