Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/64zRShTV31-oIpx-wKCS8H98LZE.roa
File: 64zRShTV31-oIpx-wKCS8H98LZE.roa (raw, json)
Hash identifier: BgDFhrJmyJFk7YH+jYYjlsS94cvZOyBrU+0fh461ZcY=
Subject key identifier: EB:8C:D1:4A:14:D5:DF:5F:A8:22:9C:7E:C0:A0:92:F0:7F:7C:2D:91
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 0194222018B1E7F892809E8BA0A4D91F621B
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/64zRShTV31-oIpx-wKCS8H98LZE.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29246
IP address blocks: 185.89.168.0/22 maxlen: 22
195.68.250.0/23 maxlen: 23
2a00:18a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:b1:e7:f8:92:80:9e:8b:a0:a4:d9:1f:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb8cd14a14d5df5fa8229c7ec0a092f07f7c2d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:a6:01:0f:60:ac:68:ed:79:dd:97:bb:69:
43:73:10:a3:54:65:27:58:8c:ce:da:9d:9d:a0:47:
b2:fe:91:84:4b:b0:21:fa:32:9d:2d:b6:54:2f:dc:
c4:5c:34:f6:79:83:df:b5:6d:e0:f7:08:22:14:74:
54:37:e4:54:fb:ea:37:01:c6:37:43:a4:27:1e:73:
bd:f5:6d:6c:09:ba:ca:4f:c8:b5:d5:25:2e:96:51:
38:b5:e0:be:dd:7b:38:f2:a1:d9:cf:af:31:92:76:
2e:f7:e4:74:99:2b:d7:4b:19:c2:7a:c0:07:73:21:
8b:29:bd:c2:0d:d0:58:4b:4e:02:c2:5b:3d:4f:56:
a5:41:ad:be:3f:2b:3a:62:e6:cf:0e:93:45:e0:9f:
51:f6:e8:ea:32:de:35:a4:14:a4:a3:db:54:40:bf:
ef:d7:7d:f7:c9:fa:ed:d1:a7:ba:74:f3:8c:53:06:
b7:2a:30:2f:f2:90:01:1e:23:02:43:7d:a7:b7:82:
f7:9c:bf:cb:f0:d4:c7:ec:dc:e2:0b:af:cb:1b:1c:
a7:06:0c:44:50:ce:00:10:02:ee:83:56:e6:6d:01:
3c:a8:b6:e3:7a:b7:0a:8d:43:e8:c0:63:20:de:6f:
dc:b0:be:c3:95:66:7c:65:ec:9e:b5:ea:76:a1:3b:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8C:D1:4A:14:D5:DF:5F:A8:22:9C:7E:C0:A0:92:F0:7F:7C:2D:91
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/64zRShTV31-oIpx-wKCS8H98LZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.168.0/22
195.68.250.0/23
IPv6:
2a00:18a8::/32
Signature Algorithm: sha256WithRSAEncryption
80:c3:06:a1:34:6d:42:a9:d2:78:73:10:d9:50:f7:34:18:89:
93:91:7c:15:04:ae:3c:c1:12:26:37:54:ba:7f:a0:2f:db:97:
93:03:8b:eb:f0:f3:c0:32:10:8e:30:19:02:09:0a:52:88:bd:
56:0f:8f:50:f8:66:7e:72:6f:f6:22:6a:d6:4c:f2:52:80:cc:
4c:20:6e:7d:16:cb:d7:6a:20:98:b4:f1:db:94:eb:ce:7f:fe:
3a:9f:fe:84:9e:a9:34:af:de:11:61:fb:ad:14:46:7a:d3:63:
87:c7:67:20:ee:ff:ec:95:90:ac:0b:f1:08:de:28:9e:d4:ec:
d7:ff:be:4f:fd:55:82:ea:67:12:7a:48:77:f7:8e:dd:ef:dd:
5b:00:3e:10:ed:6b:99:dd:40:34:fa:dc:5a:57:be:0a:7a:1c:
82:4c:8c:ae:68:8e:ad:10:7d:c7:80:7c:41:1d:e5:15:f8:4f:
5e:4d:1f:3c:ea:5b:36:fb:6f:5c:ba:01:a9:8d:a4:49:21:24:
8a:80:36:49:3d:40:69:44:0e:18:55:e7:09:b2:a1:03:22:06:
a5:6b:7c:48:e5:a4:c8:33:0b:f5:b2:bf:06:fb:b5:fa:05:02:
2d:b9:f9:00:84:09:c8:2f:fa:19:0c:14:1d:14:10:cf:a6:43:
8a:f8:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:18 2025 by rpki-client