Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNwWWeb_jHTB5OY1P1jDoa9XU1k.roa
File: FNwWWeb_jHTB5OY1P1jDoa9XU1k.roa (raw, json)
Hash identifier: 3NTpwQW7mTvTLVLMZ2malNep0t78rrm9FDQoZf/uoWw=
Subject key identifier: 14:DC:16:59:E6:FF:8C:74:C1:E4:E6:35:3F:58:C3:A1:AF:57:53:59
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274885A5C48AA8BA97628C27D05881A9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNwWWeb_jHTB5OY1P1jDoa9XU1k.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214686
IP address blocks: 193.181.64.0/24 maxlen: 24
193.181.126.0/24 maxlen: 24
193.181.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:85:a5:c4:8a:a8:ba:97:62:8c:27:d0:58:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14dc1659e6ff8c74c1e4e6353f58c3a1af575359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:13:d6:1e:eb:c0:4c:11:f6:f3:96:4d:5e:
51:63:a4:2c:ab:ff:5f:09:4c:65:5e:03:6c:db:d2:
8d:62:f4:d4:4f:a5:cc:b1:bf:86:51:17:d6:71:27:
25:e9:67:7a:59:c6:4f:68:d4:ad:d3:10:14:fc:aa:
90:18:61:43:e5:eb:d6:8f:17:3f:cb:a0:04:86:5a:
37:e6:12:0e:50:b2:c3:1c:41:55:fe:d8:85:47:27:
d3:16:f6:46:d2:db:f5:62:97:94:15:d4:95:cd:80:
28:90:75:7d:4b:7a:71:3f:27:7f:0e:00:eb:1f:0b:
5f:c6:31:4b:bb:6a:cc:11:f0:aa:6e:7a:87:9f:48:
43:ea:ea:0d:9f:b9:27:a8:91:a0:9e:53:e7:23:06:
91:90:9b:f3:14:03:a9:69:83:9f:84:0f:9b:90:6b:
0f:29:f2:34:b9:8d:24:83:67:9f:61:58:44:e6:85:
79:49:30:ee:82:88:e7:cb:84:e8:d0:69:d3:53:e3:
55:f9:5e:e5:4e:8f:52:81:5e:be:8a:af:02:53:2f:
28:a7:52:80:8a:e8:1f:14:cf:a9:6d:dd:a4:9e:41:
05:f5:31:11:fd:0e:d0:8e:05:08:bb:67:f2:eb:7a:
d6:1a:ff:34:ee:85:8b:3d:9f:17:18:2a:cc:e0:97:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:16:59:E6:FF:8C:74:C1:E4:E6:35:3F:58:C3:A1:AF:57:53:59
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FNwWWeb_jHTB5OY1P1jDoa9XU1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.64.0/24
193.181.126.0/23
Signature Algorithm: sha256WithRSAEncryption
af:f1:d4:bf:84:7d:7a:9d:19:2e:e7:86:cd:a3:81:2f:d6:74:
1e:2d:e8:f9:dc:0a:68:7c:76:3c:cd:8b:e9:45:46:35:22:a6:
34:f6:82:ae:6c:d9:ac:16:03:47:05:5f:51:5b:f6:5d:e6:3e:
6d:1a:27:39:2c:4e:05:72:fa:2f:dd:dd:99:46:f6:46:9a:0e:
eb:07:dd:66:5b:8d:1d:43:2c:43:7c:22:f5:23:60:07:ee:74:
2f:5e:41:a3:48:cc:d8:c7:be:55:9a:29:11:64:c2:38:b4:e4:
3e:d5:74:02:7c:fc:e5:9f:02:59:44:a8:73:42:7d:4c:67:ea:
7e:2e:2c:6a:02:ce:47:4f:ee:bd:fc:77:aa:29:72:fc:c9:93:
2f:58:9a:5b:33:a1:20:7e:b2:ea:b8:d5:08:43:a0:df:2d:65:
e1:0c:d5:b0:7d:cb:80:bf:e2:d7:ef:28:2a:59:27:a9:57:f6:
b9:a9:d8:44:df:98:c6:07:e8:a8:79:93:5b:0d:43:c0:2e:b6:
80:a6:54:64:ef:9b:02:f2:27:73:76:fc:b8:97:41:b7:c8:03:
f7:d0:f6:3e:b7:ff:fa:ac:c3:77:88:c9:69:e7:86:d9:39:ef:
3e:5c:5d:c7:b0:79:86:f0:21:a3:96:7d:1e:7b:49:a8:ec:fb:
e9:ff:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:39 2025 by rpki-client