Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa
File: FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa (raw, json)
Hash identifier: 2VPc3+k14YDj+VEpbWgXk3gPVop/bti9KbQmxBYKhTk=
Subject key identifier: 14:64:7C:13:44:5E:1D:54:BA:C7:AF:DA:FD:8F:CF:A0:9C:65:FC:7E
Certificate issuer: /CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Certificate serial: 018CC64B24835F8B3BFBDF4927298558E5CB
Authority key identifier: 6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 193.200.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:24:83:5f:8b:3b:fb:df:49:27:29:85:58:e5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14647c13445e1d54bac7afdafd8fcfa09c65fc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:8b:fc:85:ff:8a:ca:1a:2d:d0:f8:b6:73:
6a:9d:c0:5e:97:e7:a3:b1:b6:df:82:2e:06:98:0a:
a3:69:8d:cd:f5:31:98:10:42:4e:3f:22:0b:7c:36:
21:fe:65:cf:db:6b:e1:67:0d:f2:8b:07:18:f7:03:
8e:d2:ba:23:3d:d4:45:a8:42:56:86:bc:e1:ec:d7:
1b:52:47:42:c8:3e:0d:66:65:ff:ea:f4:1f:41:dc:
51:49:23:95:fe:0b:0a:52:55:fd:03:6f:31:fd:e1:
a6:a6:bc:d8:1a:4f:c7:36:23:f3:74:a6:07:e5:50:
29:dc:0b:7d:41:95:6b:b7:b1:a5:af:65:70:29:11:
fb:3c:13:a5:22:9e:2e:ff:a0:a9:e0:a3:14:4a:94:
12:d3:b7:0f:d9:7b:e9:3d:4e:d0:a3:b5:dd:cf:3c:
e3:83:8e:8f:27:93:d2:28:e0:a6:cc:e9:6f:e9:05:
7e:da:21:d2:c7:af:d9:62:21:a1:b3:9e:50:a6:2d:
39:b7:3e:fe:49:d7:3a:3b:56:5c:91:be:e1:29:6f:
fd:f8:2d:42:dd:d1:1b:e5:4a:9a:6e:a0:62:81:84:
b7:33:12:25:73:a5:ed:8d:74:ed:2c:c3:64:6e:4c:
97:20:28:89:39:48:46:20:a0:c2:e9:c0:0b:3e:8a:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:7C:13:44:5E:1D:54:BA:C7:AF:DA:FD:8F:CF:A0:9C:65:FC:7E
X509v3 Authority Key Identifier:
keyid:6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.61.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:a6:e3:11:2a:03:3f:de:d2:89:1d:c4:27:f2:b5:db:d4:
b2:78:8e:a5:a8:26:38:ea:9c:76:57:5d:c5:29:aa:85:80:04:
17:76:a1:a2:05:e9:6b:3f:af:b8:80:3a:cd:de:00:ab:7f:7a:
1e:fb:82:5b:17:e5:e5:ba:1a:70:b8:53:b1:32:c5:24:4a:fc:
59:de:a3:dd:6c:57:64:5d:76:26:ab:27:a5:00:60:64:5d:ab:
0d:67:ba:97:52:4f:9e:bf:33:11:ba:c7:c9:5c:1f:9c:0a:3f:
bd:60:02:b8:bc:82:de:1d:16:b7:c9:f4:04:c7:e8:da:57:33:
0d:2b:8b:8d:6a:db:e7:99:cd:c3:9b:5c:a9:96:bc:f2:07:1c:
7d:40:73:b0:89:f6:de:1b:02:d5:f2:2c:08:18:da:ad:95:10:
79:ce:27:8f:8f:29:09:3d:15:ba:b0:a2:bc:19:c9:12:74:75:
7a:e7:77:d5:57:f1:5b:af:27:8a:04:0d:67:77:85:cb:76:30:
16:59:8b:a9:bb:02:e5:3a:30:1c:e3:1d:2b:4a:1d:58:8c:60:
6a:fe:97:0c:b9:1d:f7:0c:b3:74:b0:1e:d3:8d:ee:75:33:f6:
71:93:4f:1f:a5:e1:2b:84:68:3e:eb:71:f6:4f:d8:83:99:78:
a4:43:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:36:51 2025 by rpki-client