Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/FVXywhCMQxXeLPPrmosnO1le09c.roa
File: FVXywhCMQxXeLPPrmosnO1le09c.roa (raw, json)
Hash identifier: ZG5Nu3b2gFC/pvp7nH8WOiBbcxg4ZFOB2/uxAxfD7CU=
Subject key identifier: 15:55:F2:C2:10:8C:43:15:DE:2C:F3:EB:9A:8B:27:3B:59:5E:D3:D7
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 0194266C104E39C20DA8C5C25E3EAF1F938E
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/FVXywhCMQxXeLPPrmosnO1le09c.roa
Signing time: Thu 02 Jan 2025 09:50:03 +0000
ROA not before: Thu 02 Jan 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200356
IP address blocks: 62.182.100.0/23 maxlen: 24
193.84.18.0/24 maxlen: 24
2a02:4bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:10:4e:39:c2:0d:a8:c5:c2:5e:3e:af:1f:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1555f2c2108c4315de2cf3eb9a8b273b595ed3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:40:ed:05:12:1d:94:f4:41:a7:1e:96:8e:
f3:5a:b6:ae:6f:d5:f3:26:79:8f:88:51:3e:8a:e4:
0a:88:0b:2d:b0:52:11:7e:16:9b:50:18:c8:97:d5:
59:6c:bf:24:8c:b6:fb:72:2a:09:8e:8c:bb:b4:04:
44:b8:71:63:30:bb:40:5c:98:70:f6:59:4e:7f:74:
f8:d6:46:2c:b3:9b:db:30:a7:88:a7:25:b5:a0:57:
cd:12:0b:a1:64:80:97:f5:e1:fc:af:68:b4:e9:14:
cb:52:99:29:b9:bf:dd:32:8f:58:fc:db:a4:48:a7:
d3:c3:54:e1:05:d4:8c:21:7d:6f:e4:0e:ee:df:86:
e1:c0:8f:09:bd:23:cb:21:f8:98:f0:30:f8:0c:60:
57:20:07:d1:98:96:31:59:1e:90:58:99:0d:07:42:
0e:3a:b0:e7:7c:44:2a:e4:67:54:b5:6a:c8:6b:fe:
c3:0d:83:92:12:33:78:c5:a2:2c:1d:7b:3e:d4:66:
a7:11:17:e0:50:44:08:03:6f:05:b3:1c:45:84:b8:
44:f3:31:3e:53:8b:0c:01:bf:ba:4c:08:c5:0f:80:
9c:28:ca:66:a0:e6:42:25:87:ea:ae:9a:87:67:57:
74:ff:a2:13:5e:0c:1a:47:1a:32:92:aa:47:d6:4c:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:F2:C2:10:8C:43:15:DE:2C:F3:EB:9A:8B:27:3B:59:5E:D3:D7
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/FVXywhCMQxXeLPPrmosnO1le09c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.100.0/23
193.84.18.0/24
IPv6:
2a02:4bb::/32
Signature Algorithm: sha256WithRSAEncryption
a3:e3:ad:b3:8f:dd:65:6d:c2:8a:5e:4b:bc:e5:7d:d1:3d:75:
13:1e:05:d7:86:73:87:fd:01:28:e9:28:41:ac:14:ac:48:54:
54:c9:28:e2:ce:39:45:94:33:35:8d:d6:91:7c:ba:0a:40:5a:
6a:46:d2:33:e3:71:66:40:b7:00:d7:d2:56:4b:9d:c3:39:6e:
65:2b:62:5c:dc:e7:73:7b:c8:07:e6:80:41:ff:a1:e5:96:46:
56:ee:17:83:0a:99:41:1a:0c:c0:75:81:23:90:43:7d:ff:2f:
da:2f:6b:ca:9b:70:0a:34:88:27:16:33:d8:07:bc:41:54:4d:
99:9e:37:bf:3b:2d:50:12:dc:d1:5c:74:e0:7b:28:32:4c:93:
f2:b8:17:94:69:f8:de:60:c9:eb:3d:a0:24:e3:a2:13:f9:c4:
7b:69:87:30:70:6f:8e:15:b2:9b:64:6c:5f:a9:19:36:f3:ee:
77:92:b1:0a:d8:42:14:68:bb:03:9a:f6:d9:38:52:71:69:82:
f4:0a:c9:a0:b1:12:fb:b5:06:43:c1:88:2b:b1:af:d5:ff:ae:
2c:a0:ef:44:5e:14:1b:1d:81:69:0e:56:0b:6b:9a:d2:82:26:
99:6b:b5:63:12:2a:fa:43:86:13:30:91:80:7a:ca:e5:a7:33:
22:65:ac:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:41 2025 by rpki-client