Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fmhcvTIsdKP9alYaJ5KSsU1ApbA.roa
File: fmhcvTIsdKP9alYaJ5KSsU1ApbA.roa (raw, json)
Hash identifier: n57d/ftBqbPowK/Z3D+3GPpicSr0v/1Pi57+NMSp5M4=
Subject key identifier: 7E:68:5C:BD:32:2C:74:A3:FD:6A:56:1A:27:92:92:B1:4D:40:A5:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942825122395440D448A1970B3CEA2133D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fmhcvTIsdKP9alYaJ5KSsU1ApbA.roa
Signing time: Thu 02 Jan 2025 17:51:45 +0000
ROA not before: Thu 02 Jan 2025 17:51:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214822
IP address blocks: 195.133.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:12:23:95:44:0d:44:8a:19:70:b3:ce:a2:13:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e685cbd322c74a3fd6a561a279292b14d40a5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:70:2a:d5:da:ae:95:85:ab:4a:0c:0a:85:
50:b4:33:a1:0b:60:04:ed:72:80:1a:9f:01:ca:30:
1b:0a:ca:d3:9d:ed:6f:4b:0a:73:84:0c:dc:b1:03:
78:15:fb:dc:bb:a7:3d:51:4b:5c:72:2f:ab:7e:84:
e7:dc:0f:2e:fd:c5:73:e0:80:95:93:9f:80:a6:16:
8d:1f:72:54:4c:93:76:62:56:70:a3:ba:fd:95:90:
32:1a:dd:c1:0f:3b:ed:cb:b0:d5:f2:f8:f0:09:40:
54:99:ac:b6:8f:67:a5:bc:91:68:30:7b:71:60:3e:
41:df:fe:3a:98:1b:e4:cb:a1:59:ee:0d:8e:56:23:
a2:19:c5:ae:a4:65:03:8e:a4:be:d0:f0:74:6e:16:
11:9c:fd:c3:99:79:97:6c:db:c3:25:e1:91:38:30:
e7:df:f3:5c:27:3a:29:30:99:d1:ab:02:d1:05:81:
7f:74:35:74:af:71:01:ef:8a:27:85:b5:98:d5:24:
d4:90:8c:88:39:32:5c:73:9b:db:48:66:61:93:64:
91:bb:de:c1:72:28:89:c6:74:5a:36:29:e6:61:ea:
e0:90:99:11:c4:cf:a6:42:e8:b5:8f:e4:04:e6:e4:
b9:d2:f4:fb:06:8a:ed:66:40:c8:3a:dc:cd:01:bd:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:5C:BD:32:2C:74:A3:FD:6A:56:1A:27:92:92:B1:4D:40:A5:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fmhcvTIsdKP9alYaJ5KSsU1ApbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:8a:79:78:93:ef:29:26:61:29:ae:da:83:9f:35:05:96:
14:98:f5:67:da:31:3c:16:9b:ef:38:44:08:58:23:95:88:fd:
1b:89:67:f8:e8:9e:5e:f8:88:42:a9:f3:42:ef:6c:72:d3:a9:
cd:fc:6d:12:a8:d8:ec:8b:70:78:81:39:44:fc:9c:4c:f6:a6:
74:1e:24:dc:3c:e8:26:22:4b:e5:06:7b:fe:af:27:9f:7e:18:
d4:eb:3c:7d:28:bb:7f:56:d9:a6:6b:d7:ec:bc:ce:f8:c2:94:
5b:f9:b3:0f:d9:1b:89:2b:18:09:1d:eb:c3:4d:54:93:84:9c:
8e:ad:24:c0:b3:dd:48:98:10:a0:98:df:71:16:a6:8c:c5:5b:
01:40:83:4d:e8:74:5b:25:b1:98:7e:ac:7e:ec:8b:c5:be:dc:
ea:47:38:0d:51:cc:72:00:c6:0f:9e:ef:cb:94:56:4b:41:6f:
1a:b5:84:c5:3f:0b:c8:fa:63:43:50:dd:c4:87:c9:a0:f3:ce:
15:16:40:31:d3:40:43:70:78:6d:09:12:5e:4f:24:9e:dc:e6:
1c:be:9a:5f:9e:76:dc:8d:3b:c9:e6:72:c9:de:6d:be:e1:69:
a2:27:7e:d1:47:d6:73:37:d7:d9:9e:38:5e:bf:05:cd:a5:b9:
d6:eb:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:06 2025 by rpki-client