Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/FTO-WxW7sPayKFxLz7VzC8cq9-I.roa
File: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (raw, json)
Hash identifier: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=
Subject key identifier: 15:33:BE:5B:15:BB:B0:F6:B2:28:5C:4B:CF:B5:73:0B:C7:2A:F7:E2
Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial: 01942067DCF5F1FF74ED33FDC9BB13541B8C
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/FTO-WxW7sPayKFxLz7VzC8cq9-I.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 129.70.0.0/16 maxlen: 16
192.109.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:f5:f1:ff:74:ed:33:fd:c9:bb:13:54:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1533be5b15bbb0f6b2285c4bcfb5730bc72af7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:aa:a9:98:92:de:79:0c:7c:cd:55:2b:fe:
b7:ed:01:08:8d:45:15:3b:61:f5:92:e5:ac:c3:77:
c9:3e:ca:cc:3c:77:0f:51:dc:6a:e0:59:43:ed:1f:
a8:73:e0:6c:6e:17:eb:37:47:16:9b:98:46:b4:5f:
a5:6c:dc:cd:b6:57:23:80:aa:10:53:92:ca:b4:2a:
07:42:f0:0a:2b:eb:28:68:76:92:55:21:b3:4c:9b:
fd:20:2a:8b:29:a8:97:c0:b8:54:e0:93:77:cd:df:
7c:52:82:a3:52:fa:32:c1:49:7d:a8:c2:c1:2d:82:
f1:db:e5:d3:d3:52:6c:1c:d1:c3:6a:d4:4b:2d:71:
94:ea:00:03:4d:15:fe:a8:42:53:d4:36:c0:7b:09:
72:ec:23:93:9c:ce:d3:cb:ea:3f:b3:ea:34:87:d9:
c8:b3:6d:00:db:45:26:66:92:fa:05:6b:14:c0:f3:
6d:03:2a:4c:c1:58:44:ab:b3:8f:5f:6c:13:fb:22:
c5:d5:ea:8a:2a:dd:32:e5:2b:a6:cc:d6:37:41:3b:
85:be:08:b3:06:b1:c6:ab:1c:91:03:cd:c9:a8:fe:
26:f4:f7:4f:90:1b:6e:c0:3c:26:01:88:0f:6d:5a:
d5:f3:ef:4e:88:ab:53:fb:34:79:2e:ce:fd:65:64:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:BE:5B:15:BB:B0:F6:B2:28:5C:4B:CF:B5:73:0B:C7:2A:F7:E2
X509v3 Authority Key Identifier:
keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/FTO-WxW7sPayKFxLz7VzC8cq9-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.70.0.0/16
192.109.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e6:5d:72:a0:49:8e:a0:1e:e4:0c:f8:fd:ef:56:54:88:a5:
c4:41:5e:7b:17:10:d1:02:e5:eb:08:3a:e4:35:00:5a:b1:9a:
41:1e:ee:e5:83:c5:0c:c8:47:6f:9c:c2:41:4d:10:98:b8:af:
9e:f1:92:9f:87:4e:5b:e9:5d:27:7c:b8:d4:c7:7c:fb:97:9b:
c6:98:43:15:77:60:1f:a1:66:9a:89:9a:9f:fe:6e:f0:94:f3:
c1:97:2e:bb:41:b2:1d:e9:e8:28:aa:57:18:5b:13:97:7c:e7:
6d:2b:e0:6c:b3:38:cc:d0:3d:3a:fb:72:a2:32:2d:85:96:09:
46:97:bd:53:87:a4:da:55:14:97:96:f8:af:b0:44:04:87:92:
8a:7b:2e:c9:7e:61:9d:9a:ab:8b:61:d0:8e:b7:a8:9f:38:ec:
e0:b4:b3:cd:e6:a8:b9:24:eb:eb:55:0f:7f:1f:fc:24:6e:d2:
d0:43:0e:80:49:93:ef:a4:f3:66:65:14:f5:11:be:44:81:a0:
38:87:ed:04:62:31:f8:d3:0d:ba:33:c0:51:52:2b:e8:10:fb:
53:f6:c4:2f:67:61:1c:06:f8:ac:4c:a6:1c:c1:e4:7f:9b:0e:
94:e8:ea:f9:f1:fc:d1:fb:17:c4:68:2a:fb:03:26:f2:dc:26:
f6:a8:2a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:19 2025 by rpki-client