Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa
File: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (raw, json)
Hash identifier: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=
Subject key identifier: 14:A5:B7:31:BF:2D:C0:DF:A3:90:CC:DD:88:25:AC:FF:1D:95:53:EA
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 019424447D452B265069D319409B3653ACCB
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa
Signing time: Wed 01 Jan 2025 23:47:35 +0000
ROA not before: Wed 01 Jan 2025 23:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40985
IP address blocks: 195.189.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:7d:45:2b:26:50:69:d3:19:40:9b:36:53:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: Jan 1 23:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a5b731bf2dc0dfa390ccdd8825acff1d9553ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:69:0c:2e:f4:33:ee:64:e7:90:bc:e6:9c:
c3:fa:0f:b7:d7:22:57:1c:24:80:1d:fa:9c:10:84:
26:59:5d:f9:00:4f:38:00:67:72:6c:89:0f:fa:e8:
38:2d:c6:f7:6c:5f:a5:a0:bd:b0:81:b8:1c:a1:f1:
66:81:35:71:99:5e:b0:75:27:12:b4:95:fc:b4:03:
3a:88:eb:17:0f:62:78:e4:6f:9e:67:77:fc:9f:3d:
d3:1c:4b:b9:0d:fe:17:e3:10:be:2c:37:8e:45:21:
36:80:c5:c6:c6:be:52:87:93:89:04:3c:4d:0c:7a:
63:30:cb:b9:05:a6:6e:7a:77:b0:90:4f:e6:cf:b2:
da:8f:d8:c7:a2:5a:fd:f2:a3:1f:ac:6f:ec:6f:a3:
2d:f4:49:c4:65:7e:d5:bb:e5:08:e9:dc:82:63:d9:
af:c0:7b:3e:e7:9a:ca:6a:29:0c:e5:98:6c:94:32:
56:e7:a5:c7:89:24:6d:3d:5f:d2:21:98:3e:84:de:
e3:eb:7d:d8:e1:ea:2b:fc:9b:80:62:0f:6a:55:1b:
d4:a2:3a:35:99:4a:8f:24:60:7f:96:1c:ba:7d:d8:
f1:14:be:b0:73:bd:66:e4:0d:1b:25:07:40:0c:71:
f3:7f:db:f3:c1:51:a1:61:cf:62:f6:96:b0:f8:21:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:B7:31:BF:2D:C0:DF:A3:90:CC:DD:88:25:AC:FF:1D:95:53:EA
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.216.0/23
Signature Algorithm: sha256WithRSAEncryption
eb:82:17:a8:dc:6f:29:5b:72:cc:c1:03:47:9d:88:c6:4d:28:
40:2b:1b:7d:48:9c:d1:5f:9b:8d:f2:1b:e5:1e:39:85:5f:36:
81:34:7d:55:b2:98:54:81:c6:12:ab:a8:5e:70:e5:c0:37:93:
02:76:51:ff:24:8c:51:ce:39:ad:9c:d7:ae:85:f4:69:f7:f6:
31:5b:c0:fe:a2:b1:10:09:c3:d9:e5:0c:d4:eb:f8:3e:4d:22:
01:50:47:2c:b7:32:c1:86:b5:ed:a6:49:f2:6d:a3:93:b2:3c:
3a:45:62:33:8e:f9:10:14:7e:8e:ed:f5:47:e0:40:c4:75:a5:
fe:ba:74:b7:50:15:1f:05:11:58:1d:51:c2:95:2d:57:cc:d9:
ca:e8:8a:67:e4:95:bc:37:71:70:7d:db:f8:66:c3:6b:9b:34:
b8:c6:ba:e2:a1:fc:08:32:25:cd:e8:46:76:de:e6:db:82:33:
81:24:3c:24:8a:b0:fb:48:7f:17:84:f1:a5:d4:c0:de:0d:d9:
0c:1f:b7:ae:ca:b8:fd:bf:51:d7:4e:31:f1:c6:4a:9e:ec:51:
ce:37:c9:02:8a:b9:b4:ec:d0:3f:db:d6:01:22:e2:44:0b:00:
61:7b:21:0f:66:c2:84:ae:18:96:f8:b2:db:e7:32:49:6f:f0:
8b:09:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:54 2025 by rpki-client