Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/fiaOnousA3w1k2Tm4l4eVVMuQvU.roa
File: fiaOnousA3w1k2Tm4l4eVVMuQvU.roa (raw, json)
Hash identifier: 8OG1yxGs0ekx4Dmt06+QBnp418Got1o3hjFg9PXzxDw=
Subject key identifier: 7E:26:8E:9E:8B:AC:03:7C:35:93:64:E6:E2:5E:1E:55:53:2E:42:F5
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 01942521C0845A97533BFA7216571D371342
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/fiaOnousA3w1k2Tm4l4eVVMuQvU.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 92.119.61.0/24 maxlen: 24
92.119.62.0/24 maxlen: 24
92.119.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c0:84:5a:97:53:3b:fa:72:16:57:1d:37:13:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e268e9e8bac037c359364e6e25e1e55532e42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:a3:2f:2a:35:0b:48:ff:81:30:c8:34:0b:
29:c3:e8:4f:3b:0e:06:2b:fc:4a:ca:bd:1b:cc:f8:
e1:cb:a0:d6:83:be:6b:dc:31:e0:b8:87:b0:3d:fb:
b8:0a:ac:75:96:26:c4:bd:05:7d:33:dd:60:77:23:
74:25:cd:0d:7d:10:47:25:c2:34:ef:91:3f:18:59:
62:43:30:2a:c3:99:c3:ff:f0:03:ad:64:2e:ca:de:
4e:9c:78:ec:15:51:57:15:cb:7c:b3:aa:22:83:4e:
00:51:a7:45:03:4a:c8:31:19:5c:e4:f4:93:70:11:
c6:b2:50:25:e7:d1:ff:e1:3d:ff:ea:cd:be:01:29:
21:d0:f8:a1:7c:cb:fa:cc:12:30:a1:b0:87:87:50:
5d:77:0d:99:4b:01:22:fe:b0:ab:29:41:a3:30:5d:
20:1b:9f:9c:ee:22:ff:3d:12:c8:ac:dd:a3:f8:66:
52:d2:09:31:8c:04:8d:c0:be:2e:8f:a7:40:0a:f6:
a4:d5:95:2d:b2:ee:85:01:fa:47:45:12:03:39:73:
a9:fe:27:1f:f5:31:27:59:a5:7b:f5:91:0c:a4:25:
18:a7:47:44:d6:fb:69:5b:65:b7:62:78:b8:70:4e:
27:35:6c:be:0f:90:be:61:7f:83:26:07:dd:7e:b0:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:8E:9E:8B:AC:03:7C:35:93:64:E6:E2:5E:1E:55:53:2E:42:F5
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/fiaOnousA3w1k2Tm4l4eVVMuQvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.61.0-92.119.63.255
Signature Algorithm: sha256WithRSAEncryption
87:c1:9d:0c:32:cf:c1:9c:bd:ad:34:34:74:77:88:6f:32:be:
d4:78:4f:e9:e2:be:f7:d2:83:f7:3c:44:50:3c:98:55:45:c8:
6f:5e:86:65:4d:18:cf:09:cc:70:46:b0:4d:ac:d5:83:b1:89:
b4:d8:8c:53:b5:27:f0:df:00:7e:60:9f:63:e7:de:d0:94:cb:
67:cc:6c:f2:7e:2e:12:2a:f3:69:f1:dc:4a:b9:5b:fd:c2:12:
2e:c2:0a:90:46:28:06:2f:b5:b5:fe:9b:64:1c:26:96:58:80:
44:90:2d:2d:a2:82:ce:7b:e1:b7:dc:28:3f:22:0a:df:0d:db:
e9:06:85:ff:44:19:80:66:37:c1:42:be:84:48:7e:c9:01:c8:
0a:23:53:e3:c5:48:02:87:51:b5:03:fb:be:aa:a4:cc:25:8c:
80:68:5d:c3:8f:7f:02:05:7e:ed:06:1a:21:8c:20:89:c9:29:
fd:da:ce:b3:60:ad:35:93:fb:63:f6:34:54:fc:00:aa:be:9f:
86:c4:f6:f0:3b:d3:58:58:97:cf:c7:96:ff:5b:92:16:96:65:
d0:c2:b6:df:b1:32:70:71:d4:ce:95:90:d2:af:6a:67:0a:e2:
c3:8e:a8:81:c9:73:26:72:bd:6d:54:e3:66:23:b4:13:25:2a:
ad:48:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:09 2025 by rpki-client