Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/Fezrzno06jPF9kifbXHX27nmWc8.roa
File: Fezrzno06jPF9kifbXHX27nmWc8.roa (raw, json)
Hash identifier: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=
Subject key identifier: 15:EC:EB:CE:7A:34:EA:33:C5:F6:48:9F:6D:71:D7:DB:B9:E6:59:CF
Certificate issuer: /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial: 0194228D6F84FB1243438A89727035707BAA
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/Fezrzno06jPF9kifbXHX27nmWc8.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62022
IP address blocks: 185.50.244.0/22 maxlen: 22
2a04:c0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6f:84:fb:12:43:43:8a:89:72:70:35:70:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ecebce7a34ea33c5f6489f6d71d7dbb9e659cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:7f:b1:91:b5:e8:81:b8:ce:67:bf:13:54:
2f:6e:56:0b:26:a9:01:54:ba:77:ee:43:f9:d6:57:
6a:3d:d2:5e:06:92:47:c8:4e:74:e8:ac:01:ff:fa:
dd:49:bd:06:37:3d:b5:96:5c:73:96:e1:dc:69:97:
d6:a1:c6:a9:f6:05:99:8e:3a:09:98:29:6e:7a:60:
21:2b:4c:8e:5a:78:31:72:8d:35:c6:5d:c4:a9:96:
df:2e:0b:c4:0e:53:80:eb:35:99:9a:af:c8:d2:d1:
f9:81:3b:89:b5:8e:b0:a4:f1:fc:b0:f1:51:62:a1:
3e:e2:8f:a8:7f:40:61:49:7f:de:08:38:a1:26:ea:
74:09:5d:ee:5b:8d:51:b1:4c:44:66:f2:22:cd:d6:
b6:13:f9:d9:a7:c7:e2:a4:20:0f:95:30:b0:f4:25:
09:6b:6c:10:b4:ac:e7:fb:60:53:88:83:b8:0d:d4:
e8:3d:15:75:3e:5d:28:93:39:35:7d:aa:45:cf:83:
eb:e1:6f:d2:2f:27:2b:83:15:e8:fd:72:43:9c:bc:
99:bc:07:10:74:6e:e8:2e:91:af:13:df:a7:02:81:
ac:f2:7a:e6:d1:cf:ca:7f:b9:cd:8a:28:10:0d:51:
e2:c0:ed:bb:ff:88:36:f5:02:5b:22:fa:77:57:37:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EC:EB:CE:7A:34:EA:33:C5:F6:48:9F:6D:71:D7:DB:B9:E6:59:CF
X509v3 Authority Key Identifier:
keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/Fezrzno06jPF9kifbXHX27nmWc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.244.0/22
IPv6:
2a04:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:3b:1f:b9:dd:92:ea:b5:dd:72:3a:9b:20:ce:72:66:63:91:
81:2c:b1:4a:72:af:c6:e5:8a:60:7d:2c:65:d7:eb:8c:fc:fb:
0d:6a:97:cd:25:36:97:82:cd:5d:71:3e:25:fb:64:b5:33:fb:
04:ee:ea:9e:14:bb:77:3e:f1:0f:57:ed:03:ca:01:73:31:7e:
76:7c:d4:d0:f0:69:c4:3c:0c:89:ce:ea:63:ac:07:e7:5a:de:
3a:04:95:d7:eb:27:31:07:1d:8a:6d:70:88:e5:d4:4b:59:89:
06:ba:60:fc:17:5a:2e:65:d5:2d:9b:db:5e:51:08:05:82:87:
9f:a6:76:b9:7a:2c:d0:11:77:a5:ba:3b:90:3d:cb:b7:b2:56:
6b:fb:19:5c:db:08:85:fd:f8:23:58:b6:94:3b:fc:32:4d:6b:
64:74:c2:f2:ea:d4:c0:01:19:53:cf:d9:75:35:a6:f1:4b:82:
db:58:c6:83:f9:2a:5d:73:8a:1b:43:ef:20:2d:b0:39:07:03:
e0:08:c0:bc:f0:fc:60:37:04:48:8d:83:3f:5e:ac:a2:3c:ef:
73:79:34:49:e5:59:58:83:75:83:88:5d:6d:01:12:f5:30:18:
86:56:e5:b5:39:04:cf:d1:f0:7a:63:43:4d:aa:20:92:d3:10:
fa:83:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:40 2025 by rpki-client