Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/FgoOopFtAS9Pmn60yIdehdjAPMg.roa
File: FgoOopFtAS9Pmn60yIdehdjAPMg.roa (raw, json)
Hash identifier: 6ZdgypTQOaEHxR7XtMMHDmgMJ0kv5/uo1OqLWbbUnVQ=
Subject key identifier: 16:0A:0E:A2:91:6D:01:2F:4F:9A:7E:B4:C8:87:5E:85:D8:C0:3C:C8
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 019425223BC0C499C3FADC526FD613F3C3F4
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/FgoOopFtAS9Pmn60yIdehdjAPMg.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22562
IP address blocks: 159.101.128.0/21 maxlen: 21
159.101.236.0/22 maxlen: 22
159.101.240.0/22 maxlen: 22
159.101.252.0/23 maxlen: 23
159.101.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:c0:c4:99:c3:fa:dc:52:6f:d6:13:f3:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=160a0ea2916d012f4f9a7eb4c8875e85d8c03cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:fa:fd:f2:ea:da:cd:83:c7:75:6a:0a:7f:
99:3d:29:ea:56:75:e8:c2:34:f7:8c:00:d5:68:a1:
76:67:e4:82:34:c5:70:eb:c4:b3:74:de:08:ea:10:
15:b5:94:61:98:36:e1:be:73:6a:15:1f:85:c9:1a:
d8:c5:45:ab:ec:34:7f:3c:ea:7e:42:7a:d8:44:5c:
8d:f8:4d:65:82:3b:66:98:28:22:e4:b0:26:1c:94:
8d:8d:83:78:b4:a2:27:e1:bc:30:39:8d:ba:85:70:
d5:c7:a0:e3:c8:42:ef:09:f9:08:f7:15:1c:59:69:
84:84:8c:0e:38:77:8b:70:6e:b3:a7:e3:4f:9c:9a:
72:f7:4d:5d:83:2c:db:c7:4d:2c:25:50:83:e5:6a:
6b:74:78:d4:15:93:c8:b3:74:d6:2b:35:fc:f1:f7:
54:bd:e0:ed:48:65:34:c8:4b:9f:70:ba:07:cb:d4:
6c:46:3d:61:b2:18:50:8c:8a:89:c5:02:96:99:26:
f0:da:fb:95:a6:89:17:20:5e:95:f2:e8:16:88:a0:
88:d9:65:3f:90:d6:56:c3:20:1e:ce:56:76:bb:97:
93:20:2f:f9:8e:50:5b:71:4f:1c:2b:40:50:39:bb:
a7:5b:eb:34:9b:99:5c:3c:a1:dc:e8:ce:47:a9:f5:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:0E:A2:91:6D:01:2F:4F:9A:7E:B4:C8:87:5E:85:D8:C0:3C:C8
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/FgoOopFtAS9Pmn60yIdehdjAPMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.101.128.0/21
159.101.236.0-159.101.243.255
159.101.252.0/22
Signature Algorithm: sha256WithRSAEncryption
18:2e:48:ad:92:c5:9f:a5:28:0e:39:bf:a4:40:e4:1a:f8:bd:
09:c7:19:4b:95:90:21:c7:a3:b2:2d:eb:75:56:8e:ed:d3:be:
36:13:46:4c:d1:fc:55:64:d1:e0:0c:24:11:5e:b1:58:46:7b:
04:31:a0:1b:f1:06:23:b7:a5:95:00:7b:67:24:97:12:16:37:
6f:49:b1:7a:8d:fa:2b:f2:63:79:9d:f7:d8:9e:e9:97:57:06:
a3:68:77:f1:5b:b9:c4:00:df:27:dc:47:e8:5e:86:49:1a:76:
dc:53:e1:0d:a6:3f:94:5d:e8:05:d7:84:5c:25:8e:02:77:ca:
9c:a6:f5:9c:0c:04:d5:ac:6c:09:8d:12:33:1d:bb:a6:07:40:
6a:6d:33:88:a7:ac:74:47:d6:35:7b:b4:c2:64:a2:db:6c:bc:
13:75:5d:2c:17:55:d7:b7:65:48:00:65:4f:b2:08:ab:28:7b:
dc:7c:e8:fe:dd:59:f8:0e:e1:6b:55:6b:48:4d:9b:5a:c9:7f:
b8:f2:dc:a6:26:2f:23:19:0f:85:b8:22:61:21:4b:e9:e9:79:
7a:1b:40:ff:7b:82:13:17:fe:e4:08:e1:16:3c:41:79:8c:84:
78:99:df:43:f8:fd:f2:43:c9:28:86:61:5e:51:21:ec:c5:48:
24:36:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:19 2025 by rpki-client