Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/FRyMmxASxmy-8j0poAKeBfWYQOw.roa
File: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (raw, json)
Hash identifier: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=
Subject key identifier: 15:1C:8C:9B:10:12:C6:6C:BE:F2:3D:29:A0:02:9E:05:F5:98:40:EC
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 019422FC44A6D0DBB79BC8C17E29D06EC7C5
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/FRyMmxASxmy-8j0poAKeBfWYQOw.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2603
IP address blocks: 109.105.96.0/20 maxlen: 20
109.105.112.0/21 maxlen: 21
109.105.120.0/22 maxlen: 22
185.174.116.0/22 maxlen: 22
2001:948::/29 maxlen: 29
2001:948::/32 maxlen: 32
2001:948:feed::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:44:a6:d0:db:b7:9b:c8:c1:7e:29:d0:6e:c7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151c8c9b1012c66cbef23d29a0029e05f59840ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:77:7a:41:ca:fc:59:65:28:41:8a:e1:ce:
df:0f:59:9c:f0:29:f0:0c:6f:4b:24:9c:1c:f4:6d:
74:5d:a3:d8:62:47:3b:24:87:64:59:a7:36:9d:18:
b4:54:50:ad:4c:68:a3:3f:14:f8:57:e3:1a:72:a3:
04:3c:26:47:c9:a4:0e:02:ee:d7:6a:1f:6e:52:23:
af:c6:61:6b:93:b7:c5:2d:de:95:11:25:cc:ba:e1:
61:dd:f5:10:28:a1:c9:f1:37:1a:49:86:f2:56:d9:
41:83:36:f5:c7:76:9a:c7:04:9a:2c:fd:3c:b6:24:
22:76:9e:df:ea:2e:87:69:2c:65:2f:a1:73:20:70:
b6:4c:8d:3c:24:fe:4a:e9:d4:a4:a2:db:25:c7:22:
22:7e:05:63:e0:3c:51:2e:7b:c8:76:90:cc:b6:4a:
ec:5d:50:a0:7c:a0:c2:46:43:17:aa:82:f8:08:21:
20:0b:83:db:6b:4a:c0:e3:96:ee:15:be:6b:4a:e7:
e8:30:ab:9c:5b:3d:eb:79:4d:bc:1a:6c:93:2e:6e:
bb:3d:7c:8c:5a:29:fd:4a:bf:1e:69:38:90:f4:68:
63:90:5e:75:6e:8c:32:d1:59:7f:fc:02:5b:74:d1:
42:12:0f:67:29:a7:85:47:24:bc:b1:97:68:a7:a8:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:8C:9B:10:12:C6:6C:BE:F2:3D:29:A0:02:9E:05:F5:98:40:EC
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/FRyMmxASxmy-8j0poAKeBfWYQOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.96.0-109.105.123.255
185.174.116.0/22
IPv6:
2001:948::/29
Signature Algorithm: sha256WithRSAEncryption
1e:06:ed:60:7b:88:64:2d:3b:32:ff:19:59:2f:4f:64:5c:31:
7f:c2:fc:24:92:c0:ad:68:9c:d0:5e:8e:c8:e6:69:11:ce:42:
f0:9b:81:88:f3:75:89:e0:83:fc:d0:e6:07:42:38:1f:76:b8:
7b:1d:a7:1d:d0:38:7c:56:57:a0:38:47:61:47:3f:de:27:1a:
86:f5:2f:ad:b0:19:40:84:e6:ae:ee:a2:67:5d:12:24:4a:fa:
e7:7b:d4:69:60:fb:d3:2e:01:6a:8e:73:f5:e9:8b:52:b6:01:
da:70:d2:b2:da:af:d6:a3:ad:02:0d:0c:59:53:50:58:f4:46:
cd:ad:80:17:a2:02:47:92:b4:0b:37:b1:ef:9a:19:9e:38:75:
a6:d1:ca:e3:4d:35:4b:f9:74:a0:9d:ea:7b:8a:38:95:c1:f1:
c8:45:a3:b3:ac:80:7d:da:11:b9:58:5f:ff:7b:a8:8b:85:a9:
9c:af:52:14:d0:94:e7:de:6e:7e:22:85:cb:76:f8:78:04:ba:
cb:aa:12:5f:be:37:86:dc:c3:80:b2:f9:00:48:3e:1a:15:c4:
6e:69:27:8e:5e:f9:1e:bc:20:a6:1c:29:c3:7b:ca:99:2a:11:
13:e2:d1:db:59:d8:ad:c1:ac:18:6c:0b:57:e2:74:8f:b5:8c:
1d:19:d3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:10:38 2025 by rpki-client