Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa
File: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (raw, json)
Hash identifier: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=
Subject key identifier: 15:C9:7F:68:9B:09:B7:82:A2:22:38:4B:B4:5C:69:40:06:7E:F9:32
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0194228DA167AB50A7F4CE4F0E66578B0E74
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa
Signing time: Wed 01 Jan 2025 15:48:14 +0000
ROA not before: Wed 01 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51178
IP address blocks: 5.61.13.0/24 maxlen: 24
5.61.14.0/23 maxlen: 24
91.219.64.0/22 maxlen: 24
92.249.4.0/24 maxlen: 24
185.218.68.0/23 maxlen: 24
185.218.70.0/24 maxlen: 24
188.68.184.0/22 maxlen: 23
188.68.187.0/24 maxlen: 24
2a00:9801::/32 maxlen: 32
2a0b:d0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a1:67:ab:50:a7:f4:ce:4f:0e:66:57:8b:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 1 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c97f689b09b782a222384bb45c6940067ef932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:fb:a9:ee:42:0c:38:7c:51:19:eb:6d:ee:
24:7b:a6:cd:8e:d4:b1:1b:c0:f5:84:9a:21:34:9f:
8c:fd:b7:e3:60:85:fb:eb:95:dd:14:94:e6:87:64:
03:02:f0:79:a1:67:53:41:37:23:0b:22:36:47:7e:
18:bd:26:c9:01:34:4e:b0:ff:36:b3:19:51:27:d3:
c0:b5:3f:db:2d:b2:04:30:36:29:5f:6c:f7:68:e5:
73:5a:2f:5c:df:70:1f:8d:41:54:70:ac:39:1c:76:
d8:67:1e:a0:c0:a4:04:a2:0e:fd:ff:48:82:44:7a:
6b:1b:11:43:3d:fd:86:f1:5d:5e:be:78:de:e6:c7:
81:30:64:e7:35:f2:90:a6:6b:b9:0c:c7:3f:13:f2:
15:3b:ec:62:60:96:ef:06:08:f9:c2:99:c0:bb:59:
5a:e5:44:f7:0b:e4:f2:17:55:4f:5a:be:e7:dd:fa:
c6:06:71:5b:5e:08:de:f5:b2:f9:cc:38:fe:7d:79:
23:4c:fe:37:c2:30:da:28:98:06:9f:c3:cb:ed:bd:
6f:a1:bb:a8:b0:0d:70:e7:7c:78:75:bf:43:6f:31:
d4:30:54:36:67:e1:e0:2b:dd:fd:3a:76:38:43:4d:
39:43:c5:76:12:52:35:45:a2:ef:31:d2:34:23:ed:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:7F:68:9B:09:B7:82:A2:22:38:4B:B4:5C:69:40:06:7E:F9:32
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.13.0-5.61.15.255
91.219.64.0/22
92.249.4.0/24
185.218.68.0-185.218.70.255
188.68.184.0/22
IPv6:
2a00:9801::/32
2a0b:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:9c:19:9e:14:01:38:a1:3f:4d:e0:b1:bb:a6:c0:aa:94:5a:
e4:74:d8:4f:bd:b1:86:e5:7f:b3:f4:9f:bc:0c:4b:54:4d:0f:
cc:c0:ff:80:ac:12:e7:d6:bb:e5:70:76:67:59:45:db:07:3b:
0e:a2:a5:76:c8:2c:43:96:f3:8b:b4:62:21:ce:ae:a8:75:73:
b3:61:e9:ae:63:10:31:63:13:d2:b9:01:6d:1a:8e:14:7c:b3:
49:68:28:e8:96:07:56:e9:36:4f:30:d8:b8:eb:c3:ec:27:e5:
c4:a5:29:54:a1:b1:1f:8f:4f:2a:ee:3c:c3:a8:78:47:2d:81:
53:96:fb:e6:8e:20:0b:03:2a:d2:7a:55:05:8c:56:93:6a:c4:
85:6a:1b:ab:5d:14:e3:cf:07:84:f7:52:fa:8a:3a:e7:ae:1c:
a3:62:b0:d9:81:d5:cb:24:e6:b6:36:1b:94:2f:66:c1:0e:ed:
c1:9e:ce:8b:86:ab:7e:9e:2f:67:6e:fb:ad:e3:d3:8f:65:a2:
34:c4:e3:9c:f6:47:7b:2c:6c:f1:84:93:31:a8:9d:89:10:63:
bd:a4:3c:19:96:70:e0:cb:9f:f8:a5:a5:49:fa:d2:76:ff:2d:
f1:df:77:2c:db:f9:8a:42:89:be:3d:0a:cf:e4:3a:b4:09:77:
56:95:8e:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:31 2025 by rpki-client