Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FNmk-X7ReUJSttbCP2CwLvtZcoE.roa
File: FNmk-X7ReUJSttbCP2CwLvtZcoE.roa (raw, json)
Hash identifier: /sFXOz3XHmCNRrU7dU0T3SDWAxiU3fJItiYPMoAjbqI=
Subject key identifier: 14:D9:A4:F9:7E:D1:79:42:52:B6:D6:C2:3F:60:B0:2E:FB:59:72:81
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9F55164A74119CD390D013FB80764E05
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FNmk-X7ReUJSttbCP2CwLvtZcoE.roa
Signing time: Wed 22 May 2024 08:05:04 +0000
ROA not before: Wed 22 May 2024 08:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
2001:67c:64:ffff:0:18f:9f54:b144/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:55:16:4a:74:11:9c:d3:90:d0:13:fb:80:76:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 08:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d9a4f97ed1794252b6d6c23f60b02efb597281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:d8:7a:13:59:25:5e:79:c0:aa:ed:fb:01:
49:d5:74:9a:a8:df:4b:3a:94:d8:c2:a0:bc:97:9f:
89:76:1a:57:ce:ec:0a:1a:2c:11:f7:7f:47:65:33:
97:82:7f:09:8d:2e:df:1d:d0:03:ab:0d:00:c5:68:
5c:d7:00:00:6b:0d:b4:a6:8e:6f:ea:0f:f6:27:38:
f9:ff:6a:44:80:b7:9a:f7:f5:80:77:a5:8e:f5:f8:
94:59:5a:4a:c4:33:03:c7:39:09:ac:91:da:ee:7a:
0f:84:e5:41:65:0f:94:9d:33:1d:dd:32:5a:78:c2:
d6:f7:e3:c8:f1:8c:af:95:c9:10:1b:64:0a:a4:59:
63:ae:0d:b8:45:b0:de:27:fc:26:0d:f2:a9:50:07:
72:8b:08:b1:d6:9a:80:cb:57:17:bc:ce:7a:8a:c0:
20:82:ec:d2:9c:1f:42:4d:66:23:59:62:df:ba:86:
e4:56:f0:74:62:8e:d0:e9:01:32:67:63:16:15:61:
24:ee:70:5c:ea:fe:da:1f:e7:3a:c5:9e:b5:18:40:
ba:c3:da:ba:9f:f2:b0:86:7a:28:51:40:8e:f1:72:
c3:a2:4b:8a:b3:2c:8c:97:eb:2a:11:e1:42:c0:7c:
9e:46:96:29:66:4f:34:e2:b4:f7:68:66:b6:7f:24:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:A4:F9:7E:D1:79:42:52:B6:D6:C2:3F:60:B0:2E:FB:59:72:81
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/FNmk-X7ReUJSttbCP2CwLvtZcoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:ad:c8:89:4a:aa:44:62:48:cf:e7:7a:0b:d9:2f:5e:c5:90:
48:20:6f:52:17:c5:96:79:b5:67:41:0d:08:75:b0:4b:9c:d9:
a6:57:cd:8c:fc:67:1d:e4:c8:47:a6:f9:14:e9:40:e5:e6:b0:
6e:9d:4e:36:69:f2:28:f8:78:ba:b5:d6:70:70:b6:53:96:8d:
7d:48:81:10:58:ab:88:b7:62:63:a6:5a:51:b8:e7:49:a8:69:
eb:25:33:47:b6:62:7a:2e:ab:7f:7f:4c:85:e9:97:c6:03:c2:
68:a1:32:d6:b7:e6:4c:62:18:ca:c6:d4:6c:0c:87:cc:ce:c2:
2a:85:6b:0c:d2:3c:29:8d:c3:14:b1:df:a9:27:04:2d:9a:92:
78:21:31:8d:3e:5f:59:6a:30:b4:a0:a6:44:b3:96:f1:27:3e:
42:09:4f:64:1c:1e:56:1e:21:95:0f:cc:28:00:4b:26:6b:19:
dc:1e:74:69:09:02:c0:c9:c8:cb:0f:31:13:91:3e:47:8a:63:
c8:7b:37:75:16:58:3a:9d:51:cd:44:d9:57:d5:16:0b:77:87:
cf:71:a2:52:b5:a5:12:fb:f7:27:5b:32:0b:32:84:07:52:da:
f2:45:eb:39:2c:50:46:d0:74:f8:0f:b8:d7:a3:b9:15:dc:96:
4a:c1:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:15:53 2025 by rpki-client