Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/FYg_psCFhdR_n5VNhP25gINYx6M.roa
File: FYg_psCFhdR_n5VNhP25gINYx6M.roa (raw, json)
Hash identifier: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=
Subject key identifier: 15:88:3F:A6:C0:85:85:D4:7F:9F:95:4D:84:FD:B9:80:83:58:C7:A3
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 01942444E50F20B22819B0A6361F48F9FA6D
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/FYg_psCFhdR_n5VNhP25gINYx6M.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215424
IP address blocks: 45.14.76.0/22 maxlen: 24
195.95.153.0/24 maxlen: 24
2a03:5e60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e5:0f:20:b2:28:19:b0:a6:36:1f:48:f9:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15883fa6c08585d47f9f954d84fdb9808358c7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:3b:66:14:f2:e0:1e:3d:3f:95:4e:e4:b7:
49:b0:54:6c:ed:61:75:37:12:53:a6:d5:0d:dc:28:
7c:4c:ae:6f:cb:d7:e9:de:10:f3:1c:76:e2:18:3b:
ba:50:c3:ff:88:a6:f1:80:f3:a8:75:1f:8c:22:15:
41:44:d3:df:b5:7e:f3:ca:0c:fb:83:05:12:49:37:
12:27:80:64:2b:c2:c4:04:0c:96:8e:8b:76:cc:fd:
cc:c1:9f:ee:34:29:b2:b1:d3:22:17:3c:eb:c0:d5:
dc:58:30:df:75:0a:dc:89:ca:04:51:c1:da:05:c3:
c4:10:f7:9d:69:58:6e:74:b1:c1:f8:43:fa:54:70:
30:c4:a9:ea:45:94:86:51:79:ae:67:4f:80:fd:b7:
a8:5a:1b:8e:b2:e1:5e:2a:27:aa:31:d4:b4:80:cd:
d3:88:ff:22:cf:5f:a5:80:0d:24:60:83:dd:e9:7a:
3b:91:c5:9a:20:59:4e:ab:c9:a1:24:cc:9b:20:4d:
8a:ff:7c:af:03:f9:0f:be:24:d5:7b:eb:5a:79:ee:
e2:2b:72:de:38:b5:c2:f3:72:b1:ff:e3:34:4c:88:
93:6a:8f:e9:e2:c6:17:51:5e:96:97:07:48:ec:7f:
41:67:c6:59:ef:23:2f:4a:21:92:25:53:99:30:0d:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:3F:A6:C0:85:85:D4:7F:9F:95:4D:84:FD:B9:80:83:58:C7:A3
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/FYg_psCFhdR_n5VNhP25gINYx6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.76.0/22
195.95.153.0/24
IPv6:
2a03:5e60::/32
Signature Algorithm: sha256WithRSAEncryption
2d:8e:06:2a:24:2e:b7:e3:a9:2c:c2:38:f4:4b:11:81:92:3c:
00:6c:77:54:42:82:00:04:04:91:f2:e4:08:32:9d:06:aa:f3:
ef:ed:56:0c:e1:2d:9d:a2:02:c1:1a:8b:6a:50:06:35:1f:9a:
6a:3b:b1:0b:dc:61:1a:8f:8d:b1:0b:4e:a2:b1:13:7f:c8:07:
9d:31:bb:fd:6d:61:db:44:18:92:96:49:88:61:bb:c4:50:2c:
0b:bd:3c:39:70:05:24:14:64:83:a2:33:30:8e:de:84:b5:2d:
95:15:31:a4:e4:a8:9f:45:28:a6:bf:4a:fd:5c:75:98:0f:67:
a9:d0:c0:ea:53:f5:c0:b2:f1:f9:60:b9:b4:18:17:84:fb:2e:
76:5b:dd:af:df:9f:80:9c:db:ec:33:83:04:7d:c1:e6:70:ba:
e0:12:64:47:68:1a:b2:49:6f:93:13:b3:b5:82:1f:82:d6:c5:
16:4f:d4:c5:95:52:f0:b0:b1:31:11:3b:b3:11:87:e3:e9:c4:
3f:d4:05:9c:8c:c9:29:fa:eb:69:76:03:96:12:ab:6b:52:f9:
66:2e:a3:08:86:d0:0d:49:93:87:52:c0:1f:92:c2:91:1e:af:
b8:78:b1:1e:06:69:6d:49:10:05:8a:cb:78:f5:89:2e:3d:97:
ec:c0:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:59 2025 by rpki-client