Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/FC1xMOdQbAPnJ0PVr43uxCEkjy4.roa
File: FC1xMOdQbAPnJ0PVr43uxCEkjy4.roa (raw, json)
Hash identifier: t2INmN0IRGkC4afX9t2Zc/Ledmz0w7wTVWvdxV8t0BI=
Subject key identifier: 14:2D:71:30:E7:50:6C:03:E7:27:43:D5:AF:8D:EE:C4:21:24:8F:2E
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F8A1CBC99A70697E82C519B175C8
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/FC1xMOdQbAPnJ0PVr43uxCEkjy4.roa
Signing time: Thu 15 Aug 2024 09:35:00 +0000
ROA not before: Thu 15 Aug 2024 09:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12967
IP address blocks: 193.149.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f8:a1:cb:c9:9a:70:69:7e:82:c5:19:b1:75:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142d7130e7506c03e72743d5af8deec421248f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:ac:04:e4:f1:a6:48:aa:92:8b:02:f3:98:
83:a2:d3:c7:d0:ae:6e:c1:9e:3d:7d:fd:e0:ea:68:
af:b8:83:c5:2e:b6:0f:f7:73:41:e8:13:db:5f:8c:
67:7d:ac:41:32:c4:93:a1:0f:e8:cf:80:a8:19:2f:
ac:9e:51:e1:5e:d9:b5:5d:e3:fc:07:92:02:dc:9d:
39:5b:16:7c:73:4f:21:47:69:25:e8:8a:9d:29:aa:
ac:6d:f2:90:00:6f:66:a8:7c:38:36:26:e6:25:99:
e0:8a:e9:b3:4f:99:4d:f7:e8:57:c2:29:45:a8:e2:
e1:12:be:58:1c:28:31:4b:8b:7d:99:53:1e:db:f1:
dc:95:92:66:5e:9f:d1:ee:c8:87:cb:91:a1:88:c2:
91:13:9d:dc:45:fe:db:9e:18:c8:0c:d5:8e:7d:41:
e5:fe:6e:46:f2:13:33:a5:87:42:e9:b4:fe:34:35:
e9:1b:27:a8:0a:d1:30:5e:3e:72:a6:e3:32:91:f2:
7b:77:be:2c:b5:78:8e:f2:6b:af:ec:6d:9b:78:4e:
f3:b5:b4:47:04:a0:a6:92:fc:f4:1e:6f:e5:da:dc:
d5:33:51:83:14:52:ce:61:41:aa:e5:34:84:b1:f8:
49:c1:bd:22:29:8d:df:50:aa:95:b5:4c:22:99:59:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:71:30:E7:50:6C:03:E7:27:43:D5:AF:8D:EE:C4:21:24:8F:2E
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/FC1xMOdQbAPnJ0PVr43uxCEkjy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.192.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bf:25:20:da:5e:fc:cc:4c:f1:fe:e1:2f:8d:3d:36:e0:93:
38:a8:bb:c5:3f:00:8b:a5:42:94:dc:4d:ac:67:7c:57:9c:fc:
46:1c:e8:82:0f:d7:0f:fb:ea:d5:88:00:bc:56:94:d1:13:26:
9f:80:81:a9:be:25:0a:85:76:1e:c2:2d:af:e2:47:3c:6c:9b:
3e:cf:6d:69:21:02:80:9a:2f:1b:d6:e4:49:2d:96:f7:2c:40:
8c:8c:f3:63:9e:8c:94:ac:49:10:96:4d:c8:11:3e:14:e2:62:
19:d8:b0:51:38:54:50:c8:6e:be:86:fb:73:45:48:70:df:01:
62:ca:f1:92:66:b1:1e:18:a6:9a:26:eb:a4:ff:e3:9f:f7:bd:
fa:2b:d9:18:4a:3c:b2:3d:3e:2b:75:03:87:71:f7:69:6c:a3:
fa:fb:59:cf:59:b7:2c:68:1b:03:f7:2b:e6:f3:2a:f9:81:c3:
f7:dd:03:ca:29:d4:01:e4:86:35:cf:2d:13:f1:2e:7c:f1:b9:
3c:bb:e0:1d:cb:2b:53:c7:f5:83:e1:a1:27:06:5a:70:88:f4:
29:15:17:f2:f8:68:d6:de:66:b4:3c:9f:af:2c:04:fb:31:99:
e5:89:4b:db:53:68:34:5b:c3:66:64:52:a6:13:17:9e:f5:32:
6c:88:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:34 2025 by rpki-client