Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/FVg-EXFcHktuG7QQnavEaXe-fnM.roa
File: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (raw, json)
Hash identifier: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=
Subject key identifier: 15:58:3E:11:71:5C:1E:4B:6E:1B:B4:10:9D:AB:C4:69:77:BE:7E:73
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01942746C48B2646DECAE778AEC0A0ED9F17
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/FVg-EXFcHktuG7QQnavEaXe-fnM.roa
Signing time: Thu 02 Jan 2025 13:48:56 +0000
ROA not before: Thu 02 Jan 2025 13:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43413
IP address blocks: 78.41.16.0/21 maxlen: 21
92.63.48.0/20 maxlen: 20
2a04:bc00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:c4:8b:26:46:de:ca:e7:78:ae:c0:a0:ed:9f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 2 13:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15583e11715c1e4b6e1bb4109dabc46977be7e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:eb:49:b4:2c:4c:4f:8c:3c:72:3b:af:6f:
85:c9:66:c8:d7:48:f9:a6:e7:58:b8:cb:78:12:fd:
54:23:35:36:0a:f6:14:10:48:ce:5b:f5:11:c2:bb:
8d:50:b8:24:1a:8d:0e:85:b3:6e:ec:f6:86:c0:5a:
90:14:9b:a7:e7:21:50:44:5a:68:06:54:ea:f4:21:
52:60:85:7e:a7:a5:55:e9:e5:08:8d:03:80:4f:25:
1e:60:a0:a7:52:8c:76:6b:a6:b4:f6:33:6b:00:ba:
3a:cd:73:92:c0:11:f3:c9:ab:00:8f:64:d9:aa:6c:
8d:07:d3:dd:1b:a1:50:cf:ea:b9:a1:10:ac:d6:4b:
f3:05:c9:c6:87:3f:40:fc:5e:37:25:3d:7d:ae:0c:
92:2e:d2:00:a6:c6:cc:db:a1:c0:77:24:05:32:71:
4f:1c:9a:19:8c:a8:9e:bf:03:5b:d9:4f:b8:ad:ea:
c7:98:24:f2:48:a8:f9:21:a4:bf:b5:1d:29:26:da:
25:8a:36:27:61:ad:a2:fb:ac:32:b2:2a:b2:0b:d7:
52:7d:b3:96:c8:23:56:c5:6d:9c:96:1b:72:a9:73:
b6:66:aa:d3:cf:05:47:96:6b:6b:86:90:05:73:d5:
4c:e4:d3:03:73:c8:bb:da:b3:aa:c9:c6:54:f4:2e:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:3E:11:71:5C:1E:4B:6E:1B:B4:10:9D:AB:C4:69:77:BE:7E:73
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/FVg-EXFcHktuG7QQnavEaXe-fnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.16.0/21
92.63.48.0/20
IPv6:
2a04:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
0a:e3:1d:ee:ce:a4:87:58:a4:c1:f5:05:b0:a4:36:6c:44:43:
9f:18:8c:be:df:e2:9c:a5:2b:9c:ca:8c:4a:be:71:8d:03:18:
6d:18:56:5b:a4:80:9b:0c:57:6d:1b:47:79:e6:06:95:0d:1d:
1a:b6:26:58:dd:51:d1:65:a0:c3:9d:1f:8e:e5:53:ea:fd:23:
96:ac:b0:93:21:fa:b5:83:d5:ee:c0:57:6d:d6:c5:29:1d:8f:
49:ae:b6:32:3d:10:2b:5e:c6:32:4d:39:e1:e0:f0:78:02:1a:
4d:30:19:9d:26:d8:06:9b:5c:18:56:6f:ab:e4:18:0b:ef:10:
f9:e9:50:0f:16:e4:9b:fe:f5:7c:5a:52:12:e2:1b:c0:e2:45:
69:a6:3f:48:26:bd:84:25:ad:5a:fe:68:a2:62:4a:f4:4d:dd:
dd:e1:3b:58:1e:98:b3:06:fe:f3:d9:a4:cc:e5:5a:37:f3:f5:
26:26:7a:5d:37:de:c4:02:a1:28:c4:92:b0:58:57:c7:04:13:
11:41:49:4e:a9:f5:cd:1a:a5:4d:3f:a0:32:5a:0f:a6:5e:de:
33:7f:80:f1:0f:33:c7:be:7e:c5:16:e2:91:f4:13:29:45:9c:
41:b5:23:30:1f:59:20:8b:0a:10:e1:50:07:54:3d:05:ff:26:
e5:0b:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:41 2025 by rpki-client