Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/FlMwpVhhzOnlI98FCuuPuGot9bQ.roa
File: FlMwpVhhzOnlI98FCuuPuGot9bQ.roa (raw, json)
Hash identifier: /BsQPEbTnqDnW/pY6NV7HtiCNmoT7eOQLfGKTzTDd9Y=
Subject key identifier: 16:53:30:A5:58:61:CC:E9:E5:23:DF:05:0A:EB:8F:B8:6A:2D:F5:B4
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B50308BDBABDCCFBE7737176EEC6
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/FlMwpVhhzOnlI98FCuuPuGot9bQ.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202744
IP address blocks: 94.177.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b5:03:08:bd:ba:bd:cc:fb:e7:73:71:76:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=165330a55861cce9e523df050aeb8fb86a2df5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:a6:65:d2:f4:0e:00:03:d0:51:61:e0:e8:
a9:b8:73:db:39:63:12:d8:54:d1:c1:cc:b0:a4:01:
86:0d:0f:34:f9:78:c5:59:97:fd:c7:d3:4e:51:e6:
c6:36:de:63:4c:df:9d:65:64:5f:c3:12:3b:e6:97:
75:71:e1:b1:af:d8:be:1c:5c:84:db:39:ef:c4:f0:
f4:1d:60:bf:0f:09:11:f2:be:93:cb:8a:52:28:d5:
df:5e:18:75:e6:dd:58:2e:7a:8e:01:8b:99:88:73:
6c:b9:fc:77:4b:0d:ad:37:9b:14:82:19:5d:15:ba:
0e:40:d9:58:76:54:bf:6e:6c:44:96:2e:3a:87:cb:
50:a5:4a:7b:fb:30:48:45:dc:b1:55:41:62:ec:6b:
3a:8f:49:02:61:ff:9c:b5:29:b1:07:9c:5d:53:77:
d2:b9:71:b8:95:a9:f0:06:c5:ec:61:a4:9a:79:f1:
38:cd:de:9a:61:ed:55:be:94:a3:be:c4:6c:25:d5:
49:f1:78:d5:e0:2a:55:a4:99:63:df:db:a0:5c:f5:
e1:58:f4:50:eb:ab:ed:c7:97:c4:eb:a3:2b:31:79:
37:5f:33:c1:4e:8d:dd:7d:2b:d3:51:b5:85:14:0b:
1e:8f:c4:17:e8:bb:7a:25:2b:5e:b1:de:c0:4d:00:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:30:A5:58:61:CC:E9:E5:23:DF:05:0A:EB:8F:B8:6A:2D:F5:B4
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/FlMwpVhhzOnlI98FCuuPuGot9bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.129.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:00:be:f4:88:1b:eb:df:fc:ad:95:ee:ed:8f:c5:b0:03:15:
85:43:65:43:d6:d9:25:4f:65:f6:df:5d:ad:f4:27:ab:98:47:
a4:a2:da:8e:a0:d7:84:a0:74:c6:70:8c:0c:7e:5d:4d:7a:5d:
47:a1:56:b1:7e:8b:a8:f7:2c:b5:1d:32:98:4e:b2:f6:6c:94:
b0:87:f6:0e:fa:02:5a:51:23:5d:b2:7f:aa:db:b8:c2:16:e8:
b2:31:ed:e5:14:ae:3c:ce:76:0d:c0:d0:ec:ed:46:c1:b7:ca:
7c:44:a0:0d:c9:9b:b5:aa:d2:e2:e4:5c:09:ed:dc:66:3a:45:
4b:ad:28:70:9a:22:10:23:67:a6:85:aa:77:6d:b3:91:16:2f:
ef:64:fe:1d:8c:04:50:6a:f1:10:ad:ad:be:7f:fe:b2:5e:84:
a5:88:b2:d1:b4:28:1b:ae:ce:7d:11:29:3b:d2:26:d9:74:0f:
a1:8f:8c:d5:23:ad:3c:dc:a0:b9:1b:c1:a6:ee:1e:d5:3a:66:
8e:09:bd:bb:68:dc:64:68:14:5f:7e:f6:ec:37:bd:ea:72:e0:
b4:74:f4:bc:8e:7c:09:d1:30:cd:3b:db:f9:9a:1e:c8:d5:f5:
49:d8:e4:7f:47:0e:75:75:c2:8a:b8:76:34:7f:de:df:07:00:
e7:85:82:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:58 2025 by rpki-client