Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fm-JM_9xM9GScgaitWjyPyumf6E.roa
File: fm-JM_9xM9GScgaitWjyPyumf6E.roa (raw, json)
Hash identifier: lAnh1v6DiFpznOIvBVM4aIOAijlUetd8DfqEtk4XAro=
Subject key identifier: 7E:6F:89:33:FF:71:33:D1:92:72:06:A2:B5:68:F2:3F:2B:A6:7F:A1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01942220306A4B6102FF530A1DB4D6FA89E2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fm-JM_9xM9GScgaitWjyPyumf6E.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135073
IP address blocks: 185.210.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:30:6a:4b:61:02:ff:53:0a:1d:b4:d6:fa:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e6f8933ff7133d1927206a2b568f23f2ba67fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:21:12:f2:f5:bf:da:8a:70:1f:f6:0e:b9:
d4:40:71:aa:1d:f7:26:8f:fd:bc:99:70:39:4c:62:
42:e6:77:25:17:ea:0f:95:8a:96:db:80:4e:84:4f:
c2:9e:cf:0b:ac:2e:52:12:f4:6d:17:2d:63:06:cd:
0f:cb:db:b1:88:8d:15:13:e0:e4:8b:1e:0f:56:70:
b2:76:63:c6:1e:a9:65:15:c1:3a:03:aa:27:9f:4b:
e9:35:7a:3a:10:8e:d5:dc:6f:69:12:ef:dd:1c:2c:
bd:0c:20:38:da:b3:95:9b:18:9e:95:45:51:52:b3:
6a:41:62:ba:32:03:ec:ee:14:e5:3d:04:40:49:8e:
53:9d:77:2d:73:8d:48:9c:2a:59:55:5f:02:f5:ae:
6f:1c:2f:93:87:64:96:2e:13:f9:76:5d:44:91:90:
68:28:a3:cc:15:dc:e4:bd:e1:27:76:df:4b:05:53:
7e:c9:0a:c2:82:9e:98:7c:f2:22:5f:e4:e0:f0:2e:
41:86:3e:7f:86:55:bf:3b:83:26:03:40:d4:41:f5:
b2:ca:0b:62:88:62:84:57:82:37:34:90:63:5f:50:
fb:43:d6:31:52:45:e6:e4:e9:25:7a:0d:14:fa:2f:
4e:c9:76:2c:56:e4:e2:3c:69:f9:5b:ea:b8:ad:13:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:89:33:FF:71:33:D1:92:72:06:A2:B5:68:F2:3F:2B:A6:7F:A1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fm-JM_9xM9GScgaitWjyPyumf6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.233.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0f:7b:33:49:45:d4:81:a3:c4:4f:bf:38:3a:11:e9:1a:f8:
42:00:47:e3:6e:b5:5f:95:6f:d3:3c:b3:52:06:3f:aa:ea:b8:
f9:c6:e6:09:57:20:27:d5:6e:ff:0a:63:a6:28:72:9e:b8:3b:
99:85:56:03:74:b5:1b:84:b5:a4:ce:be:bd:ac:a3:ab:17:e1:
f2:95:8d:5a:07:01:59:ca:a5:88:7b:f8:e4:75:cd:89:ac:70:
9a:e1:59:2c:17:b1:38:78:57:cc:95:98:cd:46:5d:fc:7d:b2:
77:a4:ba:60:39:e8:70:b0:ea:e8:5c:0f:ad:fb:4a:f1:98:83:
7c:fc:73:fe:fb:89:c6:0c:5f:9c:7a:d3:d9:06:f0:e6:dd:d2:
f4:68:94:39:31:1a:22:28:a8:1c:f5:7c:3c:2e:b2:a4:a5:32:
86:04:5c:11:04:63:2b:fb:7f:a0:50:68:16:21:9d:c6:e5:2e:
f0:f8:72:8b:ea:f0:c3:c0:04:5f:26:b0:6a:88:3a:95:28:05:
fa:f8:1d:e3:f5:f2:21:85:ac:2e:44:da:be:23:5a:13:3c:24:
df:0a:23:2b:20:77:5b:12:07:c6:c7:98:68:2a:88:68:37:ac:
4c:cc:89:d0:78:e0:78:95:42:88:8b:02:17:0b:53:00:07:74:
e5:14:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:53 2025 by rpki-client