Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/FJ052FCXxgY8148DvYkO__En3kw.roa
File: FJ052FCXxgY8148DvYkO__En3kw.roa (raw, json)
Hash identifier: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=
Subject key identifier: 14:9D:39:D8:50:97:C6:06:3C:D7:8F:03:BD:89:0E:FF:F1:27:DE:4C
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 01942068677CD0E6C61F079980CB2CD44432
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/FJ052FCXxgY8148DvYkO__En3kw.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214162
IP address blocks: 45.131.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:67:7c:d0:e6:c6:1f:07:99:80:cb:2c:d4:44:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=149d39d85097c6063cd78f03bd890efff127de4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:b0:f5:3a:48:9d:5a:67:a6:13:36:63:25:
78:04:64:09:55:83:76:0e:4e:99:ba:f2:7c:92:86:
96:d7:c2:94:c8:c6:01:35:ae:61:70:0e:7d:3f:04:
c4:ba:be:ec:3b:26:6b:ff:b6:ba:df:5c:37:07:eb:
b2:a2:3e:b2:da:59:ad:fc:86:f2:4c:cf:c6:30:3d:
dc:dd:55:94:91:8c:f2:57:30:55:00:68:f9:9f:e0:
c2:59:8e:29:09:2a:85:34:0e:57:7e:0e:2d:fc:a5:
12:a7:74:a4:f5:10:60:e4:36:89:8f:c4:9a:ee:23:
ce:5e:ff:b0:88:4e:2a:f9:e2:bc:3e:2e:2a:d7:4a:
5d:55:2e:c5:4e:62:69:38:6d:f7:38:34:6f:2e:22:
ea:19:96:92:71:ca:28:f2:40:72:4e:22:cc:8a:02:
f2:51:cf:fb:93:c1:94:f5:72:86:a4:6b:d0:20:91:
9b:79:98:d9:05:00:d9:05:7a:de:5f:0a:02:2a:7e:
9a:01:f2:6f:f0:94:0d:19:3e:4e:88:2b:ed:20:8f:
9c:26:c1:ac:e3:b4:d2:bf:ec:9f:2c:7b:e9:cd:ee:
17:e5:a8:72:1a:aa:78:aa:58:69:a7:b4:8a:74:2d:
0b:74:72:f5:4e:42:41:59:e2:fb:eb:95:87:b4:2e:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:39:D8:50:97:C6:06:3C:D7:8F:03:BD:89:0E:FF:F1:27:DE:4C
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/FJ052FCXxgY8148DvYkO__En3kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.91.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:96:c1:f1:f8:fd:e4:9a:80:ab:0b:bd:9d:6b:fe:90:fc:07:
13:b5:9e:8f:30:f1:dd:11:f0:eb:58:42:eb:61:4b:64:96:a8:
51:21:d9:66:6f:6c:8c:4e:65:35:ef:6f:e3:de:5e:6e:ba:d7:
ea:54:8d:f0:bc:95:7e:57:92:77:2a:39:ce:29:87:2d:52:5c:
ec:8b:7c:79:87:e2:6c:d4:0a:8f:4b:4f:34:26:2e:72:c2:b1:
51:cb:42:a2:ca:ad:9f:e0:64:ea:11:0b:1b:c1:0d:6c:e3:2e:
87:3d:d9:18:d9:3d:31:d9:d9:1b:11:bb:e6:0c:a4:9f:7c:a5:
d1:8d:92:68:33:6c:90:f2:a0:4d:6e:d5:b5:62:f9:32:f4:85:
d7:c7:b1:6b:1a:8b:73:6a:c5:d7:97:0a:27:74:78:73:40:f2:
0f:22:24:c3:6e:6b:e2:26:53:84:69:5e:53:fe:89:7c:5d:64:
ea:7a:c4:de:b9:83:4f:13:de:20:86:ca:aa:92:14:79:16:03:
15:da:e6:9f:af:94:ee:14:ea:6e:0c:83:0e:1b:d1:27:c2:16:
1f:0b:e3:f6:43:17:12:c3:01:71:76:08:67:d5:b1:c8:cf:f9:
a6:6b:3e:dd:f7:ac:51:d0:d8:41:d1:fc:68:9d:97:1b:c0:f5:
5e:fc:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:42 2025 by rpki-client