Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/FC3w5rLrHddsA2aesaaUGgl5a5s.roa
File: FC3w5rLrHddsA2aesaaUGgl5a5s.roa (raw, json)
Hash identifier: SpeRCYDczSPJ3ICTbgMbnMQ9AAbzaK2Zx6aqokc6TRc=
Subject key identifier: 14:2D:F0:E6:B2:EB:1D:D7:6C:03:66:9E:B1:A6:94:1A:09:79:6B:9B
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018CC424614A73D34F9B203042ECB4692D46
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/FC3w5rLrHddsA2aesaaUGgl5a5s.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210761
IP address blocks: 64.187.208.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:61:4a:73:d3:4f:9b:20:30:42:ec:b4:69:2d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142df0e6b2eb1dd76c03669eb1a6941a09796b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:2f:56:66:00:fa:72:9c:41:a1:72:c1:44:
1c:60:65:07:df:32:58:87:77:cf:80:e2:e0:c7:ee:
ee:59:d3:1e:ef:28:6f:2f:18:e3:5c:d0:8a:ba:42:
9e:c6:79:a6:9f:16:c2:0b:d5:6f:1a:f3:81:26:ed:
07:d2:4b:ae:e5:6b:37:c2:1d:4f:58:f6:e9:8d:47:
8c:63:49:4a:23:f0:14:97:fd:fd:45:0b:e8:5d:12:
11:64:eb:aa:c9:b4:22:f9:29:d6:d4:b8:85:9d:23:
1d:ca:fc:3d:59:d2:99:ac:85:1c:ab:80:e9:01:1e:
ac:6a:b6:ed:21:98:db:f7:2c:da:4b:50:88:d7:19:
21:20:5b:3a:45:11:9e:94:d7:0d:aa:9d:f8:8f:4f:
14:67:bc:13:50:24:5d:0a:d7:3e:ca:41:65:7c:01:
ab:21:39:49:1f:e2:3f:ce:0a:76:fb:e3:54:db:69:
c7:36:18:eb:61:a1:e1:d1:d7:58:b4:4a:96:5e:ee:
b8:38:ad:7d:ea:09:8e:b9:a2:83:80:2d:2f:0f:e1:
90:77:5e:6f:b0:39:5f:6b:94:15:b4:a1:c4:69:08:
61:78:20:6d:42:2b:f8:3a:67:a4:70:18:bd:a1:be:
3d:b4:8c:71:c7:d3:8d:80:4c:54:2a:19:99:12:8c:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:F0:E6:B2:EB:1D:D7:6C:03:66:9E:B1:A6:94:1A:09:79:6B:9B
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/FC3w5rLrHddsA2aesaaUGgl5a5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:19:d2:0f:d1:f4:b3:3a:7d:63:0e:b9:e0:01:ba:db:dc:13:
48:5a:7d:6c:0d:05:4a:04:42:05:69:0e:6f:de:17:fb:f8:b3:
83:45:7c:aa:c5:22:83:90:4c:72:0e:54:c2:a5:50:4d:e7:67:
cc:9b:73:03:b3:1c:c2:57:0a:dc:d9:69:4b:33:c7:f0:e6:b7:
56:9d:e3:d4:a1:7e:6b:22:7b:01:69:c6:5e:93:d0:b9:2c:ae:
9a:fc:ee:3f:12:fe:ea:3a:d0:da:96:64:0b:53:34:9c:e8:76:
ea:08:34:3c:cf:94:8f:cc:2e:53:03:d7:39:59:65:d6:f3:7e:
f9:64:32:57:d2:bb:4f:28:93:2f:5a:6d:97:06:84:11:8c:95:
7a:ec:1a:dc:f5:22:79:d3:33:77:62:1c:13:2d:d4:c0:c9:07:
dc:d4:5e:78:0d:81:27:f9:5a:f2:06:da:1f:c5:44:60:18:c3:
cc:07:e6:68:77:1f:7b:cd:95:2b:17:fe:e0:2e:38:d8:f0:2b:
b9:55:82:c8:63:8a:64:07:ec:93:fc:1e:e4:89:1f:22:9b:7a:
06:09:2b:32:7a:92:2d:7d:7e:b4:0a:00:2a:72:b9:7b:c1:66:
09:95:85:1a:dc:82:56:06:33:9b:c8:0f:8a:fa:1c:d0:00:8b:
49:04:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:09 2025 by rpki-client