Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/FPpOTBKmvHdioInyAceH2PiTSvg.roa
File: FPpOTBKmvHdioInyAceH2PiTSvg.roa (raw, json)
Hash identifier: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=
Subject key identifier: 14:FA:4E:4C:12:A6:BC:77:62:A0:89:F2:01:C7:87:D8:F8:93:4A:F8
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 019423D76F76687E7D9F118D12D2F4221B96
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/FPpOTBKmvHdioInyAceH2PiTSvg.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215063
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
2a04:8080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6f:76:68:7e:7d:9f:11:8d:12:d2:f4:22:1b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14fa4e4c12a6bc7762a089f201c787d8f8934af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:fa:d5:37:f8:aa:61:4e:bf:5e:e5:49:f7:
5f:af:34:bc:d3:4e:71:ba:09:fb:56:7b:44:69:49:
9e:3c:c6:74:42:9e:1e:99:90:d9:12:b1:b5:ad:e4:
ca:aa:70:ca:2e:bc:df:53:e9:25:33:ac:6b:d8:0a:
d2:64:51:7f:02:35:cd:b8:ac:29:70:c3:5e:c9:a2:
e4:af:43:04:83:08:c8:d9:ca:40:05:29:79:7a:51:
7c:53:7b:85:47:70:e9:62:f6:80:3d:74:5d:58:ea:
a2:4e:0c:16:f5:5d:64:62:7f:be:3a:07:30:aa:fb:
78:79:75:a5:eb:f7:e2:f2:1e:b9:40:3c:e3:f6:28:
15:d9:70:d4:50:4d:4a:34:61:b3:23:f9:3f:60:3a:
f7:f7:35:37:bf:b8:02:45:54:e6:80:b8:65:3f:a2:
58:73:6c:39:77:53:31:6d:4d:45:a8:f7:49:19:95:
a2:0f:fc:be:b9:46:fc:73:80:5a:e7:b5:f7:e9:c6:
b1:0b:9b:1d:07:ab:9a:6a:74:54:82:8a:b3:80:c1:
9d:8a:8c:49:be:d9:3f:eb:06:a8:f3:0b:90:e1:43:
00:01:9f:b9:c2:75:cf:cc:d1:75:c9:93:5a:93:28:
bf:52:9b:c9:2c:0c:cc:12:31:6b:c9:7c:74:c7:9d:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:4E:4C:12:A6:BC:77:62:A0:89:F2:01:C7:87:D8:F8:93:4A:F8
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/FPpOTBKmvHdioInyAceH2PiTSvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
IPv6:
2a04:8080::/29
Signature Algorithm: sha256WithRSAEncryption
52:23:8d:91:69:54:70:66:e3:9a:a0:b3:80:87:e7:cb:60:39:
5e:dc:b4:f9:01:ad:e8:e0:9c:2b:1f:e0:82:95:c4:53:c7:50:
af:2b:e5:ca:56:ad:1f:55:6f:c6:7b:47:88:2b:ef:bc:c1:63:
dd:8e:c3:fd:f8:c1:a0:df:70:8c:49:3e:27:f7:b8:64:40:11:
4d:b5:d6:04:36:00:9c:78:3f:c6:98:42:52:cd:1d:d1:79:1f:
14:1f:c6:92:bf:e5:f5:b9:2c:4b:1a:da:c2:7b:14:fb:2f:5f:
ad:a8:be:a1:bc:53:eb:79:50:67:95:f5:d0:03:53:1f:cf:fe:
53:21:e6:fc:da:56:a3:5f:9b:1b:2f:3c:4b:f8:3b:8c:73:6d:
80:ec:3b:4d:84:8b:96:f3:c4:3a:8f:c7:e1:47:c7:77:4a:83:
a4:56:6c:11:71:42:74:06:2f:90:13:8d:9f:79:5b:40:b7:9a:
bb:15:1d:c1:bf:7a:de:be:67:75:5f:2a:2e:ae:62:74:de:c6:
6f:4c:77:82:7b:bd:ad:de:b9:17:93:df:56:51:c8:97:6d:28:
9f:a9:e5:3d:02:37:5f:cb:29:d3:0c:cf:a7:68:7c:15:b6:f7:
39:3f:77:cd:0e:6a:c1:db:7b:18:6d:4c:8a:87:e9:62:77:49:
dd:98:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:17 2025 by rpki-client