Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/FAJKZDo6nLNipexAJT8L9FAGXrE.roa
File: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (raw, json)
Hash identifier: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=
Subject key identifier: 14:02:4A:64:3A:3A:9C:B3:62:A5:EC:40:25:3F:0B:F4:50:06:5E:B1
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 019424B3F7A834EB6A2795C9EE0F913D8EAF
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/FAJKZDo6nLNipexAJT8L9FAGXrE.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205269
IP address blocks: 185.247.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f7:a8:34:eb:6a:27:95:c9:ee:0f:91:3d:8e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14024a643a3a9cb362a5ec40253f0bf450065eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:87:45:73:2a:9e:e6:50:ae:8f:0f:07:d3:
78:9a:12:8b:ad:42:0f:4a:ad:24:88:3c:54:34:5e:
3c:08:bd:cf:cd:9a:45:2c:1e:14:97:07:71:04:da:
21:6c:10:60:72:6d:9b:79:bb:11:02:da:ac:fb:52:
2a:8b:51:a3:8e:11:26:aa:2c:82:a1:24:f1:6c:41:
ba:8b:6a:68:22:d1:66:5d:fb:49:2f:49:03:84:ae:
7c:b6:b9:a3:d5:4f:bb:b7:25:45:91:bb:72:08:1c:
1f:ef:43:2e:7d:8d:11:f3:68:d5:c8:99:df:09:65:
60:fd:e7:26:29:b3:c5:c1:ee:67:8c:50:67:da:5d:
77:ac:01:0f:43:a3:eb:9c:4c:0a:40:ea:69:f7:81:
de:a6:19:cc:a9:cf:52:f2:80:7d:b5:a6:11:05:7a:
a3:de:85:b9:a7:32:d1:5d:8e:5b:7a:9d:f2:94:92:
ad:0a:af:8e:2d:90:d3:f8:b7:f0:ca:48:c0:3e:be:
a0:2d:89:a1:92:6a:b7:4f:ba:b8:34:c4:52:72:65:
87:9e:31:e0:b8:84:c5:08:61:df:cd:73:51:e9:1b:
8b:ea:7e:ca:1f:a7:da:5f:b7:e9:fc:83:93:0e:27:
be:3f:19:8d:55:49:21:ed:62:e2:1b:02:29:3c:ce:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:02:4A:64:3A:3A:9C:B3:62:A5:EC:40:25:3F:0B:F4:50:06:5E:B1
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/FAJKZDo6nLNipexAJT8L9FAGXrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
Signature Algorithm: sha256WithRSAEncryption
44:50:df:09:81:d6:9c:17:57:c8:06:2e:1c:54:3c:81:24:50:
56:ec:a4:12:c3:f4:a1:4a:64:82:23:8b:31:85:43:54:ba:45:
69:32:df:60:db:f3:47:80:f0:bc:35:c2:e0:e8:c4:f6:99:7c:
60:f7:34:b2:f7:a4:a0:32:2f:b7:e3:e9:3d:1e:7b:71:0b:24:
a5:ee:12:dd:0b:d8:74:f9:e4:1c:2d:3d:00:d6:65:8a:72:e3:
22:0b:4d:18:3b:3b:2e:38:3f:76:ca:08:b9:3a:ff:bc:8e:1a:
de:97:9e:7d:75:d9:be:48:09:82:09:71:84:bf:44:e1:d9:18:
6e:62:d9:1d:f6:a3:1d:1c:54:5c:8b:3f:de:17:a6:6b:97:52:
c3:9b:10:f1:2c:2a:f7:7c:96:f4:ee:b0:f4:a5:9a:29:f6:72:
33:06:23:bb:40:ae:05:29:96:84:a2:55:37:73:db:50:02:29:
0e:48:c5:56:74:6f:aa:40:bd:2b:31:da:29:8b:b5:0c:c6:40:
22:e0:22:70:05:7f:2d:8c:3c:e0:56:7d:15:2d:58:56:c9:58:
55:15:cd:2d:73:c1:12:5e:f3:e2:d6:c3:5b:3b:ad:03:2d:cb:
c6:bf:46:28:b0:2a:ad:25:cd:65:1e:cb:26:63:0a:f0:c8:95:
ec:91:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:14 2025 by rpki-client