Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/FERbP680nVn9-OXBaT2aTWtd8aw.roa
File: FERbP680nVn9-OXBaT2aTWtd8aw.roa (raw, json)
Hash identifier: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=
Subject key identifier: 14:44:5B:3F:AF:34:9D:59:FD:F8:E5:C1:69:3D:9A:4D:6B:5D:F1:AC
Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial: 0194266BAEE66218B0724FCADF8B4569155A
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/FERbP680nVn9-OXBaT2aTWtd8aw.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 89.107.184.0/21 maxlen: 21
185.18.92.0/22 maxlen: 22
2a01:50c0:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ae:e6:62:18:b0:72:4f:ca:df:8b:45:69:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14445b3faf349d59fdf8e5c1693d9a4d6b5df1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:9d:dd:6e:1f:c0:ef:9c:af:b8:91:3d:c9:
f6:bb:d7:ac:6a:88:e9:0a:13:d2:d6:e1:85:e0:73:
2c:a4:65:92:94:5e:0c:0a:e1:99:2f:53:de:01:1f:
37:d4:d5:f4:d1:64:42:c5:53:23:22:ab:04:ac:f3:
19:0e:6d:3c:9f:58:41:65:f1:78:f5:62:ab:4b:4c:
d0:57:32:de:51:7a:7d:7f:e5:8f:cb:d9:96:58:81:
ea:73:72:85:14:85:78:3f:aa:59:7b:30:5e:01:95:
d1:15:12:28:7a:08:ea:23:bb:d1:d3:ec:3b:c3:30:
27:24:9d:ea:12:04:37:ec:1c:3b:2b:1b:8a:ad:90:
0d:08:00:16:ff:ea:f3:c5:61:32:22:2a:5b:6b:94:
54:f5:3d:8e:16:c4:86:6a:4e:a5:b7:02:90:fd:e8:
26:4d:8a:a6:4f:6a:63:82:c9:86:8b:28:89:e8:28:
34:c7:4b:18:90:b9:02:f5:49:40:7f:d7:2e:ac:e2:
b0:d5:73:b0:02:4b:4f:2c:53:e4:1d:c2:10:8a:38:
ea:b3:16:15:cc:03:6d:0e:aa:94:db:98:76:cf:69:
1d:99:3b:14:cf:3f:53:93:1b:53:ba:66:bf:f4:cc:
d5:f5:19:04:1e:ab:8b:9f:e9:f9:e4:21:a6:bc:ab:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:5B:3F:AF:34:9D:59:FD:F8:E5:C1:69:3D:9A:4D:6B:5D:F1:AC
X509v3 Authority Key Identifier:
keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/FERbP680nVn9-OXBaT2aTWtd8aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.184.0/21
185.18.92.0/22
IPv6:
2a01:50c0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
6c:f5:30:2f:5a:75:b5:68:6f:97:ff:d4:46:5e:c5:16:90:67:
da:5d:3b:6a:b1:0e:28:63:37:5d:26:5f:de:4c:87:4d:b2:e1:
00:56:a6:e7:a3:6d:6b:82:46:a9:53:e2:d1:67:31:10:bd:2d:
5f:f0:38:e0:e6:f7:e4:49:11:6b:e1:17:63:57:75:17:2a:92:
d9:dc:13:2e:c1:5d:a7:1f:f9:01:99:d2:28:30:c0:eb:96:24:
5c:51:85:07:eb:27:95:5c:d5:4a:1a:c3:bc:ac:1e:b5:1d:9d:
14:aa:da:ea:d0:cd:5e:7f:f6:07:97:ae:3d:21:2b:df:bc:c6:
bb:1b:0e:91:4a:9c:29:73:7d:8d:83:26:51:52:f8:06:2a:7e:
68:2a:7b:ee:47:3f:e5:51:1c:a3:5e:5e:c8:d3:17:f4:38:4b:
65:6d:53:9a:5e:27:04:90:af:b5:89:5b:70:b6:f1:f1:b3:c3:
2c:c3:56:7d:4c:63:47:4b:94:d9:89:73:82:88:ad:b9:33:02:
7f:7f:26:13:e6:c1:a0:79:77:64:bb:c0:1f:45:37:f4:e6:1a:
ea:d2:84:7d:74:36:58:b2:a6:5a:b0:6b:41:bf:8b:8b:15:39:
84:26:0f:02:f0:1b:f6:00:56:12:a6:07:76:09:1d:5b:58:3d:
31:84:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:43 2025 by rpki-client