Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/FhlNf_48Gdn75F5zHxmGWmsf9gQ.roa
File: FhlNf_48Gdn75F5zHxmGWmsf9gQ.roa (raw, json)
Hash identifier: HjhvmU8QyInoH3lvaB72fhiAJ5t23FwBkfKdKpw0Ss4=
Subject key identifier: 16:19:4D:7F:FE:3C:19:D9:FB:E4:5E:73:1F:19:86:5A:6B:1F:F6:04
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0194221F69E4769368F0C6893CCC47121430
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/FhlNf_48Gdn75F5zHxmGWmsf9gQ.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 88.214.25.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
194.24.160.0/23 maxlen: 23
2001:67c:2c58::/48 maxlen: 48
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:69:e4:76:93:68:f0:c6:89:3c:cc:47:12:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16194d7ffe3c19d9fbe45e731f19865a6b1ff604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:62:bd:3d:a7:34:14:74:50:eb:02:61:3a:
fe:96:d2:da:0b:9b:aa:21:38:4e:65:94:1e:03:5c:
4a:b0:b3:76:11:43:f8:c5:cc:f7:ac:4f:90:d2:b2:
fd:4f:ab:8e:22:fb:e2:30:ac:9a:a2:4b:bf:81:e8:
2c:59:a6:be:bc:e9:b0:97:7e:3b:cf:a7:42:0b:7e:
fd:03:13:ad:9a:a9:11:80:75:52:e3:16:17:55:71:
6d:9c:0f:03:28:07:29:42:27:1f:b8:82:87:97:4b:
c2:24:e1:15:3f:4f:ca:c9:94:f7:97:7f:30:49:68:
71:58:5a:b5:b4:7e:dc:74:a9:a9:6f:67:2a:31:d7:
33:e9:38:a4:9e:12:77:39:7a:e0:e9:13:62:25:05:
ff:bc:bc:71:e4:13:0c:25:75:b1:6c:c7:fa:02:56:
72:c1:76:d9:4f:e7:cc:b1:0e:fd:20:c0:b1:14:59:
69:0c:40:00:71:c4:ee:2e:b7:66:e0:3c:d1:f2:a8:
f5:27:17:04:10:c6:c4:22:f4:9a:1e:f7:6c:e2:72:
dc:61:d6:aa:73:ef:ce:7e:27:7e:e6:d7:a4:7a:6b:
d5:88:fd:e8:0d:89:f6:29:21:22:34:94:04:ca:35:
a6:e5:97:d5:0a:81:7d:e0:64:51:cc:ac:be:c4:68:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:4D:7F:FE:3C:19:D9:FB:E4:5E:73:1F:19:86:5A:6B:1F:F6:04
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/FhlNf_48Gdn75F5zHxmGWmsf9gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0/24
91.228.101.0/24
193.24.208.0/22
194.24.160.0/23
IPv6:
2001:67c:2c58::/48
2a00:1910::/31
Signature Algorithm: sha256WithRSAEncryption
9d:40:41:2f:a6:f3:51:96:5d:d3:48:8c:f0:94:51:7e:1a:42:
0a:4f:ba:33:f0:f7:e4:f5:d9:95:8c:3e:cb:7e:47:74:8e:07:
48:4f:f1:ec:e3:4b:e5:ec:2e:eb:6f:f3:0e:aa:0d:c9:3f:a4:
9b:95:91:37:bc:85:9c:11:6f:ed:42:7d:ea:35:29:06:2e:23:
ee:2e:2f:0d:05:88:ea:ef:7a:c0:ee:41:5e:26:5c:64:0a:d7:
58:77:e8:a7:e0:7f:1e:39:66:96:0b:1c:f9:9a:3c:6a:c0:7c:
f0:35:60:67:4b:eb:42:56:56:f1:0c:1f:d3:16:f6:87:e6:56:
23:29:54:36:da:ba:1c:cd:15:00:77:32:d0:c2:8d:85:b5:ab:
a9:57:00:e3:43:0e:48:e7:35:84:20:5f:05:72:1c:e1:77:8c:
49:e4:b3:ec:76:86:6c:c2:25:4e:38:87:08:fa:a1:29:1b:5a:
94:4b:40:e9:0e:62:dd:d7:2a:de:e3:75:bd:b7:5e:a7:dc:d2:
8d:2d:db:99:33:fb:fe:4e:3b:54:61:11:85:59:2d:09:b0:8b:
26:98:0b:1a:cf:87:5d:06:26:0b:5c:3f:d8:bf:98:78:e4:0a:
51:cd:f1:91:46:93:4e:c3:0c:ca:35:2d:66:43:00:9f:b0:e8:
cd:95:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:42:41 2025 by rpki-client