Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/FVz1Gs3goS-mz1CP7z4LNut0fHE.roa
File: FVz1Gs3goS-mz1CP7z4LNut0fHE.roa (raw, json)
Hash identifier: +EzGyBevLVejen0VLkmFtejit+8sBRd5jz7yFu64Sbw=
Subject key identifier: 15:5C:F5:1A:CD:E0:A1:2F:A6:CF:50:8F:EF:3E:0B:36:EB:74:7C:71
Certificate issuer: /CN=38b912a1eab18eb729745e8978138b25c4407761
Certificate serial: 01941FFA328947605B18060052FC176FDF0D
Authority key identifier: 38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/FVz1Gs3goS-mz1CP7z4LNut0fHE.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44872
IP address blocks: 194.8.60.0/24 maxlen: 24
2001:678:16c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:89:47:60:5b:18:06:00:52:fc:17:6f:df:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b912a1eab18eb729745e8978138b25c4407761
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155cf51acde0a12fa6cf508fef3e0b36eb747c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:10:35:49:be:fc:5b:4a:48:09:6a:b1:1f:
32:37:b2:52:17:74:95:1b:a1:e8:c3:f3:85:af:56:
e8:4c:87:c6:5f:e4:c9:86:71:df:3c:d0:ce:f8:55:
54:0a:4e:20:15:a3:2b:5c:a4:18:32:3b:f0:ce:28:
c2:6b:ea:21:f9:d7:6c:5f:8f:ff:32:35:d7:a3:8a:
ea:1d:ed:cf:e1:52:99:21:11:7a:ea:5e:46:c0:5c:
c7:a4:2c:ee:32:5a:e7:5f:f0:76:7a:83:ae:fb:5a:
1f:19:d8:d3:53:40:41:7b:4f:7c:63:26:76:8b:25:
a4:51:1a:0b:0b:2a:3c:48:c9:b8:e5:b7:c8:04:ce:
29:2b:1c:24:e8:12:3b:36:a6:60:5b:84:51:b3:9d:
73:f8:8c:c7:4b:70:70:a7:9e:09:c3:46:d6:45:98:
06:f8:7d:62:8c:ec:07:be:f5:6a:43:4a:94:2a:0e:
49:a9:60:f2:cf:af:de:96:03:39:9a:b7:f8:7a:4e:
f4:dd:ab:86:0a:05:a9:a7:9e:2c:34:51:2a:8c:d9:
d3:ae:27:bd:71:6f:38:ec:94:bb:c3:da:79:0e:79:
b9:ca:de:24:66:fb:8d:a7:f7:56:3d:92:f4:9d:a5:
3f:de:2d:ff:e9:b5:e5:f6:9b:39:79:50:03:9e:72:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:F5:1A:CD:E0:A1:2F:A6:CF:50:8F:EF:3E:0B:36:EB:74:7C:71
X509v3 Authority Key Identifier:
keyid:38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/FVz1Gs3goS-mz1CP7z4LNut0fHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.60.0/24
IPv6:
2001:678:16c::/48
Signature Algorithm: sha256WithRSAEncryption
31:75:04:72:0a:f7:3f:0d:ee:26:a0:7e:04:26:a3:49:ec:19:
91:2a:c8:2b:91:7f:5b:91:02:e4:1a:26:18:88:59:fa:3c:4f:
00:87:b7:c5:93:d4:72:5d:36:83:96:71:b1:4b:0c:e3:cb:0c:
11:36:b5:80:4a:9d:ea:ab:f8:77:01:74:ec:74:54:db:65:92:
31:fd:97:98:59:0b:c1:0d:91:8e:98:15:26:29:66:0e:1c:5f:
29:53:23:66:ec:32:d6:ea:20:3a:36:ec:ce:01:13:1e:4a:fc:
bf:a9:9b:ad:72:ef:5a:6f:74:0c:10:0d:8f:fc:d2:92:3e:87:
cc:34:76:3b:b3:03:03:e8:c1:f8:b5:7a:ba:d6:c9:5f:d2:87:
cb:1f:f7:b2:9a:0c:59:9f:46:9d:bc:e7:4c:43:d1:61:bc:c2:
11:66:11:59:bf:f6:22:53:2f:fd:b1:8c:cd:91:b6:04:1c:a7:
38:0e:a2:88:32:09:df:73:99:bf:a2:2e:98:36:57:24:b4:7b:
fd:07:c7:62:65:8e:a6:c4:c2:4a:1a:02:80:17:ad:ea:e9:f3:
93:ee:d4:62:6b:de:2b:de:d4:f8:9f:6f:11:94:2c:b7:38:19:
49:b2:0d:e7:c4:71:3a:0e:b6:32:0e:d2:6b:4d:cb:d9:d9:12:
4d:e1:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:58 2025 by rpki-client