Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNh7kPE_xVya7AEw9iMeNa81TD4.roa
File: FNh7kPE_xVya7AEw9iMeNa81TD4.roa (raw, json)
Hash identifier: YjATkDo0wgwEbF9iX0NTb3SsCIiVT+hUFZD4sXlqHHc=
Subject key identifier: 14:D8:7B:90:F1:3F:C5:5C:9A:EC:01:30:F6:23:1E:35:AF:35:4C:3E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487905AF0E13C3BC3A857F0A53DF03
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNh7kPE_xVya7AEw9iMeNa81TD4.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207448
IP address blocks: 193.235.64.0/24 maxlen: 24
2a01:280:358::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:79:05:af:0e:13:c3:bc:3a:85:7f:0a:53:df:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d87b90f13fc55c9aec0130f6231e35af354c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:21:8b:e7:b2:b6:5a:ec:dc:f4:32:95:b5:
48:60:d2:33:43:78:9e:de:5d:c3:0c:71:be:d7:7c:
a3:17:63:c0:18:d8:08:27:3a:48:93:57:2c:4f:af:
9f:84:f8:fd:99:24:75:38:e0:58:6d:1b:49:f2:07:
48:8e:3c:0e:91:2e:83:2d:58:f0:8a:18:4c:80:f2:
57:8c:45:f9:e7:8d:05:b4:27:fd:a3:26:41:6b:62:
22:44:1d:7b:ef:c1:50:36:de:1f:81:7b:29:82:92:
05:74:d7:23:0b:55:be:da:b2:bd:e5:71:d1:c1:dc:
de:30:5a:de:6d:4d:b3:04:13:41:46:9b:a6:a1:51:
e5:cc:a6:cb:ea:e5:07:8d:4f:69:c0:8e:26:b9:29:
4d:76:7a:70:4f:14:15:f0:87:7c:d2:d8:7d:a7:4c:
48:43:41:e7:1a:a4:65:7b:4a:57:6b:63:ee:f7:5d:
51:08:3f:29:07:48:c2:2e:1b:1f:f1:a9:a9:a1:d1:
1d:f3:ba:c2:e3:1b:7c:3c:6b:d4:6c:8a:de:3e:04:
6b:ed:8b:3e:28:b7:34:8b:32:de:71:fc:37:85:77:
e3:78:99:f0:9c:58:86:10:3d:14:e5:dc:30:27:e0:
c5:4a:55:22:0f:4c:ae:1b:ce:02:ba:c2:f5:d3:ff:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:7B:90:F1:3F:C5:5C:9A:EC:01:30:F6:23:1E:35:AF:35:4C:3E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNh7kPE_xVya7AEw9iMeNa81TD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.64.0/24
IPv6:
2a01:280:358::/48
Signature Algorithm: sha256WithRSAEncryption
10:25:aa:52:9e:f6:9a:f3:c2:c8:81:73:c2:ea:d6:d1:10:a6:
bb:71:35:f9:84:5a:c1:85:61:bb:a3:5a:c2:86:a5:90:f4:6e:
66:da:80:54:eb:59:d1:1a:23:03:a1:d4:38:79:a6:01:df:73:
19:38:37:c8:6b:1d:9d:3f:0c:a2:be:d7:cc:82:20:e8:44:c8:
c8:d3:1e:7c:31:1a:45:d2:b0:fd:f8:fb:fd:15:8a:9d:2d:b9:
44:15:a3:d7:71:f5:66:be:0e:20:55:82:38:1b:20:92:16:da:
c8:7b:68:b2:82:8b:c7:74:fa:ba:c4:ac:aa:9f:c3:3b:05:43:
fe:79:38:e3:55:a0:b3:cc:8c:8c:05:cc:45:89:7c:0e:45:40:
4d:19:d0:21:bd:67:6c:8c:da:38:4a:d4:93:30:1d:9f:40:68:
32:9e:ec:9d:19:af:4f:97:b0:2f:04:ea:ab:34:0c:c6:87:e6:
a4:7d:94:a7:f4:f6:16:78:8d:b9:c1:73:67:21:c3:ae:f6:fd:
9e:3b:1e:9b:79:c9:47:e6:d0:23:72:0c:ef:81:2b:85:33:15:
ce:1f:55:e1:c0:1b:9d:2a:1d:af:2a:17:4e:c8:4c:57:4e:47:
f0:23:e0:06:e4:6e:7c:e7:3c:ef:9f:38:7c:42:aa:1d:25:4a:
f5:28:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:05 2025 by rpki-client