Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FACURSdoz5OXAwHWNlnhNICg9F0.roa
File: FACURSdoz5OXAwHWNlnhNICg9F0.roa (raw, json)
Hash identifier: 3U3F3vpoSGWG8W05XxfcjCVl5f3g2xqAcWZcxKLJRAE=
Subject key identifier: 14:00:94:45:27:68:CF:93:97:03:01:D6:36:59:E1:34:80:A0:F4:5D
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 0194252197BB781B950714F996228DD5C0B6
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FACURSdoz5OXAwHWNlnhNICg9F0.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1955
IP address blocks: 193.6.0.0/16 maxlen: 16
193.224.0.0/15 maxlen: 15
195.111.0.0/16 maxlen: 16
195.199.0.0/16 maxlen: 16
2001:738::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:97:bb:78:1b:95:07:14:f9:96:22:8d:d5:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140094452768cf93970301d63659e13480a0f45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:30:73:1c:93:1f:86:1a:87:82:2f:14:bb:
4f:a0:1b:47:72:2a:ec:24:c3:a0:53:db:a0:f2:69:
02:e4:97:05:eb:52:ae:60:8d:45:94:4c:94:d2:48:
83:bc:7d:4c:99:89:33:84:88:95:58:87:21:ce:b2:
b1:84:1d:9a:4e:06:b9:db:7d:56:7a:47:47:10:1b:
8a:aa:02:af:16:b3:f1:a1:67:07:8f:8f:81:f7:0f:
7c:60:51:7b:fd:c0:9c:bf:df:67:66:d5:d5:70:ad:
e3:77:f1:ff:df:49:38:e7:70:e4:95:34:58:ff:5f:
cb:93:fe:ce:79:f4:5e:9a:ed:e7:a6:6d:09:50:55:
2a:76:74:da:d7:02:87:2f:04:83:f7:f8:8b:13:7e:
a7:21:c4:3f:10:92:df:23:e2:88:a9:d0:35:e8:5f:
38:ca:b3:51:a5:f2:c0:49:6c:1a:c6:77:a7:ef:cd:
fe:01:87:3e:5a:58:7a:a3:06:f4:ad:f6:f3:e1:fe:
11:b0:e0:8f:ea:da:cd:9c:e3:dd:5d:5e:e0:8e:bd:
72:a9:cd:4b:1d:1f:17:d7:04:c5:4a:72:09:36:c4:
69:18:8b:cc:85:99:f3:e7:a3:3b:98:1a:13:45:cb:
98:ab:bf:bb:f2:d0:97:7b:6f:d2:56:ac:19:d7:3b:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:94:45:27:68:CF:93:97:03:01:D6:36:59:E1:34:80:A0:F4:5D
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/FACURSdoz5OXAwHWNlnhNICg9F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.6.0.0/16
193.224.0.0/15
195.111.0.0/16
195.199.0.0/16
IPv6:
2001:738::/32
Signature Algorithm: sha256WithRSAEncryption
35:d2:01:13:23:d1:67:b2:c8:85:f3:88:28:e2:d8:94:f1:52:
32:be:6a:a1:e9:1c:91:fa:36:db:53:25:3f:5e:63:5d:37:39:
f8:67:c4:18:25:7e:1c:fd:62:5d:97:9a:8f:74:62:fe:0f:61:
25:25:7c:69:bf:e6:93:0d:57:e4:90:18:ce:02:9b:cb:b1:c6:
cf:ab:31:09:2a:66:a1:8e:a6:54:aa:5d:06:33:ef:27:7c:74:
4c:d1:80:62:3c:1a:8c:08:98:15:4b:7d:c9:9f:94:4e:aa:ff:
ae:20:d0:59:d5:23:e8:24:b1:94:95:d0:25:95:d5:29:fa:82:
18:2d:f4:16:c5:ed:8f:ac:50:f6:84:0b:2d:9a:72:91:20:0e:
98:9f:88:82:dd:1e:df:98:c6:71:5d:a7:f9:0c:22:bd:39:72:
73:c3:1a:4c:e9:bc:ae:73:2b:5b:73:37:c3:a4:b5:79:a6:ab:
b1:33:07:59:e9:85:2c:36:ed:7a:08:a1:4a:bd:c1:b4:8a:3b:
aa:5c:52:85:87:3b:13:b8:46:62:7b:35:d8:bd:48:b7:90:c1:
89:14:18:97:51:05:92:95:b8:2e:bc:c3:d5:02:c6:91:2f:1c:
d1:4a:3f:cb:2b:cc:d5:19:d0:50:7d:ca:22:61:f4:58:a6:81:
2e:9f:51:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:51 2025 by rpki-client