Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/1fzx311S5jcwOa4F8HMO1WGGMRs.roa
File: 1fzx311S5jcwOa4F8HMO1WGGMRs.roa (raw, json)
Hash identifier: Nf7uyvKCbxyvq+ckjdshr/ayknm9CnDDcdCg9xx36FM=
Subject key identifier: D5:FC:F1:DF:5D:52:E6:37:30:39:AE:05:F0:73:0E:D5:61:86:31:1B
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 019425FC24DA063132525AB0E79DE9AC2F36
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/1fzx311S5jcwOa4F8HMO1WGGMRs.roa
Signing time: Thu 02 Jan 2025 07:47:48 +0000
ROA not before: Thu 02 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216333
IP address blocks: 194.8.133.0/24 maxlen: 24
2a13:d6c0:1::/48 maxlen: 48
2a13:d6c0:20::/48 maxlen: 48
2a13:d6c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:24:da:06:31:32:52:5a:b0:e7:9d:e9:ac:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Jan 2 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fcf1df5d52e6373039ae05f0730ed56186311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:2b:9b:53:d4:d5:ea:dd:7b:07:34:d3:7b:
4e:44:56:8e:c0:b5:76:ab:36:aa:96:8a:d5:6d:26:
1f:ba:12:ce:3a:8c:08:c2:e3:c3:fc:40:fe:f4:b9:
5f:8c:a5:84:c4:e5:51:ec:e6:fb:b0:18:13:d9:55:
8c:18:9a:6b:94:e1:c3:e5:da:87:2d:98:cc:aa:57:
3b:9b:2e:a1:79:c3:3e:6d:37:eb:3e:06:62:2a:a3:
b9:d6:c3:a7:cb:22:6a:e8:8f:01:b3:34:73:44:cb:
70:9a:b9:29:7e:15:13:e8:41:47:24:72:2e:59:24:
91:bf:91:60:0f:af:d0:c9:ac:ed:ef:6e:3a:e3:14:
b3:31:61:44:35:46:b4:27:09:c6:35:f1:49:a8:0f:
94:5f:fb:6a:8a:2f:2f:ff:f8:ad:43:c6:f7:74:b9:
f4:49:cd:03:2f:c2:8e:e3:34:24:14:b6:5d:06:c2:
e8:78:41:70:18:21:78:d7:99:ef:99:98:cd:cd:b3:
f8:5d:01:88:d6:8e:56:1d:5b:9a:8c:d2:fc:09:70:
24:10:f9:ce:0e:07:6a:e4:8f:0a:62:98:d7:7b:64:
b2:81:94:af:b3:9a:70:83:32:16:75:9d:e8:8d:36:
9c:28:c3:90:06:f7:b5:56:90:f0:5d:8f:bd:5b:9e:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:F1:DF:5D:52:E6:37:30:39:AE:05:F0:73:0E:D5:61:86:31:1B
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/1fzx311S5jcwOa4F8HMO1WGGMRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.133.0/24
IPv6:
2a13:d6c0:1::/48
2a13:d6c0:20::/48
2a13:d6c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
90:0c:7a:95:ce:9b:94:f3:59:a9:0b:84:bb:5c:eb:a0:9f:68:
f5:59:c7:a7:33:a4:3d:06:80:ce:41:13:90:37:f4:67:a6:91:
08:b2:3e:e7:ce:e3:44:b7:47:5b:f2:94:91:f2:b5:94:79:1b:
ca:d5:a4:b7:06:de:15:4e:1b:fd:01:d7:cf:49:3e:da:7e:ed:
96:4a:53:44:db:9b:e7:ee:8e:a0:e8:32:b7:36:6e:b9:f9:cf:
16:25:4e:50:ff:23:39:83:f3:a5:94:f6:88:6f:7d:f3:ef:37:
e0:48:db:ea:37:bc:4a:9d:8b:61:f2:32:13:ae:14:9c:cd:0c:
06:21:c2:3f:d9:f1:a6:c4:30:75:55:70:86:11:c9:76:0c:89:
ad:1e:be:d1:ba:12:00:45:ae:ab:07:f1:fc:67:74:86:1a:7c:
3b:71:e0:3f:15:47:cb:37:75:db:dd:6d:94:66:ef:7e:94:12:
77:f4:30:67:a1:ca:b2:1f:ad:ea:ce:cd:de:5d:5d:06:06:70:
a9:98:40:13:20:d9:ef:77:89:72:30:4f:29:3b:5f:ab:e4:6f:
d4:5f:09:2f:10:5b:ca:df:2a:76:6a:8a:b8:a2:b1:c5:0c:7a:
5c:ce:0d:f5:30:16:d7:69:43:44:97:94:64:c8:cb:6b:02:28:
ef:60:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:42 2025 by rpki-client