Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Flwvhhtmnugnw0Jq8XM4728h_tc.roa
File: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (raw, json)
Hash identifier: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=
Subject key identifier: 16:5C:2F:86:1B:66:9E:E8:27:C3:42:6A:F1:73:38:EF:6F:21:FE:D7
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 01942747703343D1D3E439AC12E061BDE989
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Flwvhhtmnugnw0Jq8XM4728h_tc.roa
Signing time: Thu 02 Jan 2025 13:49:40 +0000
ROA not before: Thu 02 Jan 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 94.242.0.0/19 maxlen: 19
94.242.0.0/23 maxlen: 23
94.242.32.0/20 maxlen: 20
2a00:1838::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:70:33:43:d1:d3:e4:39:ac:12:e0:61:bd:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Jan 2 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=165c2f861b669ee827c3426af17338ef6f21fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:2c:f6:16:e7:da:5c:03:47:d8:49:d0:32:
16:99:2c:eb:a5:12:51:5e:8e:70:f5:13:ec:4c:8e:
f2:53:23:db:b7:20:34:e7:53:d0:b2:ce:c3:ef:b9:
a6:0b:eb:a0:5b:06:0e:c8:48:5a:2c:cb:9a:ca:97:
a0:21:64:92:6e:a8:92:85:10:ec:d0:60:17:10:66:
4a:18:80:e3:1e:29:c8:8e:3a:82:64:2d:fd:af:5f:
5e:bd:3b:f6:39:82:79:68:05:3d:fd:79:cb:13:73:
97:23:ff:94:93:5f:0e:6c:98:ef:49:1f:e9:d6:5c:
7c:68:d1:17:5a:d7:6e:98:aa:e8:84:3c:5a:d0:9f:
89:04:e6:1c:50:0c:32:e9:fc:f0:e7:2d:a0:90:6c:
8b:f7:db:5c:85:51:9a:0b:8a:cf:c0:45:04:36:c7:
c8:f5:d3:bc:46:6e:23:1d:9a:31:81:f8:48:dd:e3:
39:8a:ca:0e:81:eb:47:27:47:86:c4:39:0b:08:58:
34:71:b1:b5:26:cb:87:a9:97:70:6e:d0:d3:5f:c6:
f3:5e:67:90:12:97:57:fc:5b:36:32:d6:12:4c:d1:
c1:fd:80:04:92:6b:8a:53:67:d5:e5:cd:67:dd:a6:
9e:e0:f2:69:73:1b:37:1c:88:8a:57:cf:b1:67:f9:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:2F:86:1B:66:9E:E8:27:C3:42:6A:F1:73:38:EF:6F:21:FE:D7
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/Flwvhhtmnugnw0Jq8XM4728h_tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.242.0.0-94.242.47.255
IPv6:
2a00:1838::/32
Signature Algorithm: sha256WithRSAEncryption
22:18:41:a0:8f:d1:30:2f:c7:cb:41:d7:7f:c0:f3:66:86:ef:
d3:7e:12:69:51:21:8e:63:b6:e6:fe:9d:dd:7c:57:51:0a:e6:
1a:19:62:a8:58:a9:bb:f8:ea:f9:21:ce:56:b7:d1:a7:fd:e0:
39:45:d6:1e:69:07:58:d1:5e:59:3a:52:54:76:91:66:6e:44:
a9:f4:d9:45:6c:00:56:a1:b4:2d:45:f0:18:5a:b1:c3:4d:75:
4e:c4:d6:c8:5d:e2:09:70:0c:f0:54:30:e9:fc:d9:33:d7:a2:
a3:c9:bf:7f:0f:4e:13:d7:2c:11:07:4d:24:23:06:e3:25:80:
2c:b1:fa:ab:ad:81:75:8f:59:db:04:40:66:9b:56:02:38:de:
03:5e:71:d7:ef:86:0b:ab:b8:e6:c6:63:ea:7f:80:59:bf:bf:
fb:3c:8b:0e:17:0d:67:b7:92:f3:26:fc:8f:18:b0:15:9e:ae:
e0:27:76:d1:d4:ce:ea:34:88:72:38:86:bd:02:32:e5:e2:7c:
67:91:5e:4b:e8:a8:4b:b9:40:ac:78:ad:4d:90:22:1c:7a:3e:
aa:83:c2:d2:4b:21:b9:d8:10:2a:a4:06:9a:c8:8a:3b:a7:d2:
97:4c:6c:9d:c9:e9:e9:e1:93:24:74:58:e1:00:60:88:1c:5f:
0d:9b:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:20 2025 by rpki-client