Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa
File: FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa (raw, json)
Hash identifier: u+b9OZLTWgc4ylA+6a19u9K+8czzP5mhCM7NuK4dmF4=
Subject key identifier: 15:C3:58:DA:8B:E5:EF:21:7E:51:13:12:D0:4C:B6:34:C8:F1:FF:0A
Certificate issuer: /CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Certificate serial: 019424449F08F2A3CD2F60973321FFBB9C1D
Authority key identifier: 3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39190
IP address blocks: 194.147.124.0/24 maxlen: 24
194.147.125.0/24 maxlen: 24
194.147.126.0/24 maxlen: 24
194.147.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9f:08:f2:a3:cd:2f:60:97:33:21:ff:bb:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deaededa105d7e9129a9b0ce56b9bfcb9c67394
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15c358da8be5ef217e511312d04cb634c8f1ff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:37:00:a0:25:01:58:1c:5a:c2:b5:5f:84:
e6:f9:26:4e:c3:2a:90:66:7a:6a:ff:ae:b7:8d:72:
bf:4e:02:fd:c0:d4:5d:8f:b5:52:78:14:ec:de:47:
69:5a:3c:d6:4c:56:b9:bd:d0:46:4a:e5:0d:8d:35:
ef:da:64:24:f7:54:9a:20:06:99:2d:3e:82:fa:a6:
12:6b:1d:86:56:16:2b:5a:b5:03:37:bd:41:50:3d:
ef:0c:6a:54:01:ac:72:32:09:2d:94:37:b6:f6:2c:
d0:a7:9c:d2:89:07:ea:da:15:70:6f:7f:5c:11:e1:
4e:b9:31:8d:66:bc:e6:6a:22:43:06:f7:6e:96:8e:
05:08:f2:a9:a6:c7:ea:5a:c9:54:f7:73:9d:08:4e:
24:f9:b3:21:4b:fd:23:d4:bf:1a:56:fd:fd:98:51:
65:6f:8a:32:dd:93:97:e4:e2:6c:4d:18:73:29:38:
f3:c0:a0:20:33:e7:fc:75:90:55:db:45:50:ca:fb:
da:ec:b4:68:a4:a7:6d:92:ce:58:75:42:dc:71:f2:
f5:34:b4:20:d6:ac:97:cb:1f:23:a2:51:0f:53:2b:
d8:f1:75:22:4d:93:0e:24:f6:33:1f:cc:b5:38:18:
19:d5:de:f4:5a:45:a2:75:d5:90:b6:c5:fc:ee:6f:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:58:DA:8B:E5:EF:21:7E:51:13:12:D0:4C:B6:34:C8:F1:FF:0A
X509v3 Authority Key Identifier:
keyid:3D:EA:ED:ED:A1:05:D7:E9:12:9A:9B:0C:E5:6B:9B:FC:B9:C6:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pert7aEF1-kSmpsM5Wub_LnGc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/FcNY2ovl7yF-URMS0Ey2NMjx_wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cc4eb3-768a-4f91-882c-0db10850c794/1/Pert7aEF1-kSmpsM5Wub_LnGc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
90:41:dc:27:24:2e:b8:86:4b:dd:6f:81:cc:34:00:cd:6a:fd:
a0:00:bf:29:30:a1:29:81:31:a4:06:b9:db:0b:0a:fa:03:e0:
ac:46:e5:53:ef:e2:4d:21:6d:30:bd:1b:ac:42:01:bb:17:6c:
47:dc:4c:cd:be:f4:f3:a5:99:ce:7e:f9:4e:48:96:f1:ee:24:
40:d1:b7:c7:ac:e1:11:55:36:ee:53:fa:37:73:2b:ac:44:86:
07:46:11:9b:6d:c5:e6:4e:81:e2:f8:c8:69:1e:b3:78:3d:5e:
56:07:07:43:fd:a7:9b:0e:0d:e2:93:f0:57:60:b0:2e:55:59:
b0:79:76:cc:ac:c7:ea:da:5e:7f:12:d6:33:8e:73:eb:af:f5:
51:9e:f8:79:c7:60:f0:a3:01:8d:6a:5a:b8:31:2d:5f:d8:b8:
25:ae:f1:6e:32:d1:7b:44:b9:a7:72:4c:d8:8c:5e:3a:fd:81:
8c:94:19:95:65:b5:28:07:64:55:2d:67:38:39:ce:ba:8a:eb:
29:e4:a7:96:c6:0c:d9:ae:40:71:ae:36:e1:76:41:0a:01:af:
54:70:d6:20:c6:58:b6:ec:ed:56:11:66:f1:bb:5e:90:92:d0:
2b:d9:9a:0a:0f:55:b2:de:86:92:13:14:5e:bb:47:49:94:ee:
63:c8:6c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:24 2025 by rpki-client