Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa
File: FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa (raw, json)
Hash identifier: SxzdVdUSQKrcckNUFu+lpTFeygIkg6UP1Y+6mqUGLxE=
Subject key identifier: 14:D2:3E:28:E5:94:E0:7B:D8:57:BB:34:4B:C1:D2:1F:F3:00:5C:AB
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 0194244482E216C4F49F127D774527C06B41
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50825
IP address blocks: 5.181.92.0/22 maxlen: 24
78.24.96.0/22 maxlen: 24
178.17.0.0/20 maxlen: 24
185.63.96.0/22 maxlen: 24
2a03:c20::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:82:e2:16:c4:f4:9f:12:7d:77:45:27:c0:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d23e28e594e07bd857bb344bc1d21ff3005cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:29:3b:21:c0:5d:a6:8e:a7:6f:af:1e:16:
d2:b0:b7:38:18:cf:74:1b:39:23:aa:f4:58:b1:ab:
44:3a:1f:68:01:7f:09:ad:3d:c3:24:77:c6:50:e0:
8d:b8:56:60:a1:77:e5:78:c6:8c:e7:4c:72:bb:ba:
87:32:2b:f1:18:d3:e9:cd:5d:c3:96:b3:da:0e:6d:
82:b9:99:9c:32:bf:d7:9d:9d:7d:43:0c:d7:db:fe:
14:7c:8e:23:08:9c:39:91:e2:0f:55:c9:b0:b0:95:
89:45:dc:d7:88:17:b7:a5:68:34:02:4f:92:7b:61:
a7:a5:29:0c:ff:7c:0b:8d:8d:64:b5:e4:7c:d6:46:
fe:94:9e:0f:ed:c6:43:80:d0:73:93:87:5a:77:7d:
2f:91:b8:7a:21:68:c6:e3:80:19:86:d4:bb:2c:fc:
36:af:58:6f:eb:6b:f0:bb:fe:81:35:6c:9b:3e:d0:
c1:3d:1c:9b:da:0c:8b:75:20:67:62:49:9f:a1:b6:
85:bc:34:9e:c2:3f:98:51:cf:37:32:d4:2e:36:6e:
6f:c6:22:13:52:6d:ca:f0:bb:e7:da:68:e9:b0:5d:
17:c4:3c:23:8f:74:dd:7e:30:cb:ae:03:72:31:fb:
c8:f6:53:51:f5:bc:33:56:a6:df:43:6c:fb:3b:5d:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:3E:28:E5:94:E0:7B:D8:57:BB:34:4B:C1:D2:1F:F3:00:5C:AB
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/FNI-KOWU4HvYV7s0S8HSH_MAXKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.92.0/22
78.24.96.0/22
178.17.0.0/20
185.63.96.0/22
IPv6:
2a03:c20::/29
Signature Algorithm: sha256WithRSAEncryption
82:6d:f3:e7:80:5e:58:35:98:33:99:4b:be:61:49:66:e6:d5:
a7:b8:d8:39:93:6a:7b:e9:c9:68:be:dd:8f:6f:25:6c:ca:35:
68:b5:4e:85:73:b7:c9:9c:fa:58:a4:72:aa:63:96:d5:6c:8e:
45:50:45:75:81:9b:64:25:84:4a:5d:5d:57:f6:8f:c7:ce:9d:
2a:43:e0:96:ad:ae:04:a2:68:ef:68:42:39:d8:b9:08:b3:27:
ef:ec:5a:87:51:dc:d7:b3:9e:96:42:6e:7a:2e:a6:93:44:4a:
e0:4f:19:b4:3e:17:46:58:e8:3e:99:e5:73:fb:36:00:72:dd:
7f:19:c4:3e:b0:11:e9:42:1e:4b:db:7a:e7:c1:92:94:4a:d7:
75:59:d4:a0:53:d0:89:e4:bb:88:0d:ae:da:63:a1:24:14:77:
1f:87:d5:6e:e0:33:2d:55:e8:04:4c:d9:02:86:c2:b9:a0:fe:
2d:ad:58:86:aa:b7:23:d5:68:1f:6c:95:87:db:35:cb:91:b2:
7e:8b:21:52:a1:7f:70:7e:58:a7:a5:f2:05:de:08:88:f7:f6:
3a:73:92:05:45:17:54:7d:1b:bd:76:e3:fd:6e:02:b3:8d:ee:
40:e0:1f:73:d5:2c:b2:dd:d7:77:f7:ce:8f:65:53:60:90:41:
b3:27:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:21 2025 by rpki-client