Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/FUkNFEnF7Th3No4GN_vT32jewGY.roa
File: FUkNFEnF7Th3No4GN_vT32jewGY.roa (raw, json)
Hash identifier: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=
Subject key identifier: 15:49:0D:14:49:C5:ED:38:77:36:8E:06:37:FB:D3:DF:68:DE:C0:66
Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Certificate serial: 01941FFA0FA48DC25A0E7448CF2546D1E1F5
Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/FUkNFEnF7Th3No4GN_vT32jewGY.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5408
IP address blocks: 150.140.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0f:a4:8d:c2:5a:0e:74:48:cf:25:46:d1:e1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15490d1449c5ed3877368e0637fbd3df68dec066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:06:8f:74:43:15:1c:69:e8:fa:47:ff:87:29:
10:94:f1:de:00:2b:a7:b9:33:f6:78:f0:b8:69:ad:
9c:2a:49:38:5b:eb:53:52:34:cf:91:6d:af:13:dd:
37:80:0d:24:8d:42:45:9c:ed:36:6e:08:79:0c:1c:
b5:5d:fe:9a:e0:e3:fa:a7:e7:e5:fd:23:59:f7:d2:
4f:6f:9c:b6:73:b8:d8:a5:7c:29:25:16:fe:6e:64:
f2:73:0e:86:4d:2c:16:49:cd:9c:82:18:94:c2:54:
f9:13:cf:84:ae:06:70:3f:7f:c3:e8:4e:db:96:51:
5c:27:4f:d5:89:34:34:54:4e:ad:0b:d3:75:7f:ec:
db:1f:fc:ba:8e:c6:22:cf:7a:5a:31:d8:bc:cb:55:
a2:11:47:64:f4:7c:89:4e:de:e7:fc:ea:b4:74:60:
0f:27:55:0f:ca:1f:dc:92:e0:bb:88:08:c3:64:b1:
93:f7:4b:b8:d8:7d:fe:2f:be:7f:42:51:9e:40:2d:
00:87:9d:d6:01:e9:ea:8b:ab:29:13:2e:b9:ca:12:
ab:11:d1:3a:78:f6:dd:05:ef:8f:d8:7a:5d:24:09:
39:2b:1f:de:9c:66:1f:4c:c5:82:fc:5c:64:2e:fa:
64:ec:6a:25:0b:d0:eb:dc:65:80:c9:fc:ab:80:74:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:49:0D:14:49:C5:ED:38:77:36:8E:06:37:FB:D3:DF:68:DE:C0:66
X509v3 Authority Key Identifier:
keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/FUkNFEnF7Th3No4GN_vT32jewGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.128.0/17
Signature Algorithm: sha256WithRSAEncryption
28:ad:20:80:a8:1e:7b:d7:0c:b6:95:e7:b9:91:56:38:82:f4:
1b:bc:46:a1:ea:d1:6a:dc:3d:1c:c7:a6:2f:ba:05:f1:fd:47:
c8:66:71:c5:c2:ba:2f:82:eb:b5:fc:d8:13:e7:e6:48:6f:37:
82:9d:75:af:fe:8f:67:65:46:e0:42:48:26:89:d6:b4:e6:57:
02:71:57:0a:02:bd:e9:e6:9a:87:09:e4:60:ce:61:d3:62:dd:
a7:d5:86:19:72:e8:d6:13:63:35:b7:ac:5c:ef:88:a1:92:67:
81:c4:e2:96:41:15:73:34:2b:10:b1:c7:5e:70:c7:9f:a1:ca:
40:13:fa:ee:f3:43:4b:c8:8e:a8:b9:63:ca:e2:74:a0:d3:8c:
d3:bf:c0:fb:6e:55:83:cb:12:88:4b:cd:95:f7:6f:db:4d:91:
9b:74:bc:ee:50:0d:90:bf:37:e2:d0:d8:5f:04:c7:20:1d:b9:
25:01:1c:83:9f:ab:b4:e5:74:8e:f0:fb:90:7e:e0:fc:82:2b:
d0:80:b3:f3:0a:98:26:d5:79:d4:a5:1f:44:ad:a3:7c:ff:e6:
3c:81:48:42:3d:f3:83:a1:ca:ff:23:d5:52:b4:14:bc:c8:53:
a1:95:bb:db:12:d7:a9:8f:12:a1:ca:b9:9b:f2:ee:0e:32:68:
38:77:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:07 2025 by rpki-client