Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/FxwY6DkgCYqYs56Lpc87kjzgdPU.roa
File: FxwY6DkgCYqYs56Lpc87kjzgdPU.roa (raw, json)
Hash identifier: 7CHJkwKrF1bq9fb45XF2h1N6t2H114JMM2p4/5nFpL0=
Subject key identifier: 17:1C:18:E8:39:20:09:8A:98:B3:9E:8B:A5:CF:3B:92:3C:E0:74:F5
Certificate issuer: /CN=2d6423025b57bb9caeec9e565a4f7072d1307404
Certificate serial: 04D20051
Authority key identifier: 2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWQjAltXu5yu7J5WWk9wctEwdAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/FxwY6DkgCYqYs56Lpc87kjzgdPU.roa
Signing time: Sat 01 Jan 2022 08:55:21 +0000
ROA not before: Sat 01 Jan 2022 08:55:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.11.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80871505 (0x4d20051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d6423025b57bb9caeec9e565a4f7072d1307404
Validity
Not Before: Jan 1 08:55:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=171c18e83920098a98b39e8ba5cf3b923ce074f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:61:5f:c3:bf:2f:3e:03:89:67:83:12:ae:
ff:27:71:eb:4f:06:46:76:0b:75:7b:3b:26:c6:2d:
b1:fb:8e:1b:81:9e:c4:fe:69:fb:83:b9:bf:3b:78:
28:7c:b2:dc:0c:c7:fd:4f:ae:88:40:0b:c6:69:3a:
bf:f1:83:da:7d:45:8f:35:94:1e:91:ff:df:49:57:
84:ea:a7:f3:d4:cf:4d:48:10:9a:c7:02:41:5c:e1:
b3:57:94:54:0e:29:70:ca:8f:ba:e5:11:75:8b:6f:
6c:67:0d:12:c2:8c:9f:14:e9:42:f3:7a:bc:a8:48:
17:4f:86:c3:d4:8c:3d:22:c7:63:8d:a1:26:c8:1a:
29:e6:54:dc:04:69:86:15:f2:0c:b1:27:73:21:8c:
eb:a5:94:04:22:51:44:37:b0:57:95:59:10:0e:82:
3e:94:c2:85:ac:b5:f3:0e:4f:d1:89:e5:d0:23:07:
d2:e9:2d:d4:b9:01:1a:95:51:97:7a:f0:30:c3:6f:
4d:67:bc:3f:74:84:5c:fd:2d:3c:b4:58:84:80:77:
49:a2:db:15:82:00:4f:71:96:4e:47:1f:d3:31:70:
c5:6f:99:ec:40:c6:7c:69:13:d6:22:fc:8d:e6:06:
4f:af:43:fb:22:d4:48:e8:5c:18:47:cc:eb:39:7a:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1C:18:E8:39:20:09:8A:98:B3:9E:8B:A5:CF:3B:92:3C:E0:74:F5
X509v3 Authority Key Identifier:
keyid:2D:64:23:02:5B:57:BB:9C:AE:EC:9E:56:5A:4F:70:72:D1:30:74:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWQjAltXu5yu7J5WWk9wctEwdAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/FxwY6DkgCYqYs56Lpc87kjzgdPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7c64cd-def0-48ac-ab9e-e8347372ba6c/1/LWQjAltXu5yu7J5WWk9wctEwdAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.230.0/23
Signature Algorithm: sha256WithRSAEncryption
66:d0:5c:f9:72:83:af:b7:f9:89:9e:82:db:b8:da:68:c4:ce:
f7:a3:73:92:c5:ed:4d:12:d7:4b:70:bb:aa:3b:1c:c6:91:c1:
58:8f:f4:1b:8a:9e:c6:61:18:ac:ce:c0:b0:6c:e1:01:d8:18:
0b:2d:14:52:93:ce:89:0c:52:61:29:92:44:c6:e8:2c:f7:c2:
d6:b0:66:4c:99:45:26:82:f7:6a:b3:1a:fe:cf:59:b6:21:26:
d3:3b:7f:3e:08:e6:3a:dd:b7:fd:38:d3:78:26:4f:c9:48:97:
36:c0:83:27:5e:e3:cc:c8:19:2f:d8:87:08:64:35:58:24:1d:
30:69:ee:81:5d:19:c4:b8:ba:3f:0b:43:4c:48:54:60:5a:1b:
9f:1e:1a:42:f6:f8:5d:f0:b3:c6:e3:b0:85:90:9c:82:31:d2:
bd:b6:02:7e:40:43:2e:65:52:e0:63:26:e2:1d:15:91:58:06:
b6:33:db:60:ec:72:3f:a1:d7:65:32:05:28:a4:a0:52:42:ce:
38:7c:00:e5:42:63:f2:70:68:96:92:9d:41:a9:97:1c:d3:58:
6b:4c:8b:ff:30:39:9d:0b:a8:0f:5e:bb:a8:9d:09:55:87:12:
50:2b:9e:fd:e9:cd:bb:ec:d3:d1:89:21:56:82:a5:f7:08:16:
66:59:87:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBNIAUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDY0MjMwMjViNTdiYjljYWVlYzllNTY1YTRmNzA3MmQxMzA3NDA0MB4XDTIyMDEw
MTA4NTUyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTcxYzE4ZTgzOTIw
MDk4YTk4YjM5ZThiYTVjZjNiOTIzY2UwNzRmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANoyYV/Dvy8+A4lngxKu/ydx608GRnYLdXs7JsYtsfuOG4Ge
xP5p+4O5vzt4KHyy3AzH/U+uiEALxmk6v/GD2n1FjzWUHpH/30lXhOqn89TPTUgQ
mscCQVzhs1eUVA4pcMqPuuURdYtvbGcNEsKMnxTpQvN6vKhIF0+Gw9SMPSLHY42h
JsgaKeZU3ARphhXyDLEncyGM66WUBCJRRDewV5VZEA6CPpTChay18w5P0Ynl0CMH
0ukt1LkBGpVRl3rwMMNvTWe8P3SEXP0tPLRYhIB3SaLbFYIAT3GWTkcf0zFwxW+Z
7EDGfGkT1iL8jeYGT69D+yLUSOhcGEfM6zl6He0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXHBjoOSAJipiznoulzzuSPOB09TAfBgNVHSMEGDAWgBQtZCMCW1e7nK7s
nlZaT3By0TB0BDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xXUWpBbHRYdTV5dTdKNVdXazl3Y3RFd2RBUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvN2M2NGNkLWRlZjAtNDhhYy1hYjllLWU4MzQ3MzcyYmE2Yy8x
L0Z4d1k2RGtnQ1lxWXM1NkxwYzg3a2p6Z2RQVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
N2M2NGNkLWRlZjAtNDhhYy1hYjllLWU4MzQ3MzcyYmE2Yy8xL0xXUWpBbHRYdTV5
dTdKNVdXazl3Y3RFd2RBUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcIL5jANBgkqhkiG9w0BAQsFAAOC
AQEAZtBc+XKDr7f5iZ6C27jaaMTO96NzksXtTRLXS3C7qjscxpHBWI/0G4qexmEY
rM7AsGzhAdgYCy0UUpPOiQxSYSmSRMboLPfC1rBmTJlFJoL3arMa/s9ZtiEm0zt/
PgjmOt23/TjTeCZPyUiXNsCDJ17jzMgZL9iHCGQ1WCQdMGnugV0ZxLi6PwtDTEhU
YFobnx4aQvb4XfCzxuOwhZCcgjHSvbYCfkBDLmVS4GMm4h0VkVgGtjPbYOxyP6HX
ZTIFKKSgUkLOOHwA5UJj8nBolpKdQamXHNNYa0yL/zA5nQuoD167qJ0JVYcSUCue
/enNu+zT0YkhVoKl9wgWZlmHdw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:59:40 2025 by rpki-client