Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa
File: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (raw, json)
Hash identifier: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=
Subject key identifier: 14:CD:00:39:1E:EA:B3:94:5E:60:E6:1F:BC:3C:CF:BF:27:8E:14:5E
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019425FD5602B5D0E3ED986565DEDDC398D0
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44494
IP address blocks: 80.245.16.0/20 maxlen: 20
185.81.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:56:02:b5:d0:e3:ed:98:65:65:de:dd:c3:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14cd00391eeab3945e60e61fbc3ccfbf278e145e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:2a:01:cd:86:a9:56:54:77:68:d8:27:e9:
fd:1e:c6:5f:76:df:79:02:69:2b:84:39:cd:83:a5:
d7:a4:c8:0e:05:08:15:5b:aa:bd:67:d0:d2:d9:eb:
43:08:0f:ee:70:48:6d:00:e4:a5:3b:44:18:90:c8:
14:23:a3:fb:e7:ca:00:fd:ba:bc:13:97:6e:a2:61:
4e:9a:87:20:24:06:90:1a:f1:e1:44:84:d5:3b:b4:
4c:8b:73:da:b6:53:63:24:14:20:63:8a:48:c1:a9:
2b:f1:d8:97:63:c5:5a:f2:f2:d3:6b:5c:f1:be:50:
c9:48:4c:a5:e3:b4:92:bd:82:0b:35:28:12:81:ab:
2c:dc:76:f9:2f:d4:e5:e9:39:25:aa:38:f1:ce:55:
f0:40:c3:bb:2f:8c:8a:07:48:28:4c:42:34:83:d8:
d6:f6:5b:0f:24:f0:63:e7:47:52:c0:f1:9d:52:d0:
93:57:cf:9a:db:06:5a:c9:5c:28:af:0f:dd:d8:e3:
41:0c:f3:31:24:8c:6b:3d:a8:5b:97:f4:75:ec:c1:
ff:e4:b8:db:fb:7a:07:8e:69:21:4f:f0:d8:a7:d0:
ab:55:00:26:f8:02:b7:34:a5:a8:6d:84:4d:98:31:
af:54:27:52:c0:e6:25:68:c6:bd:31:d6:6d:c6:fa:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:00:39:1E:EA:B3:94:5E:60:E6:1F:BC:3C:CF:BF:27:8E:14:5E
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.16.0/20
185.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
12:a2:15:fd:2a:00:8c:78:0d:7c:bb:e6:96:00:46:aa:3f:99:
b1:6e:f1:2d:6a:1f:cf:6a:8d:27:e5:90:50:42:f2:ec:67:0b:
ae:d4:0b:85:bc:53:79:2c:97:e5:bc:90:0f:f9:4e:80:34:94:
19:22:cd:e6:d5:e7:f3:72:5e:84:83:18:80:52:ee:d1:42:c0:
70:b9:0a:c9:e5:eb:97:f6:c9:6e:80:68:2f:04:34:3b:22:96:
2f:9a:d9:9c:ef:35:26:c0:ea:64:91:f7:a5:94:25:d4:e6:67:
40:26:c9:4a:c3:62:30:fb:6a:bc:6a:c6:30:ae:83:1a:96:83:
b3:ad:9f:22:33:a2:2c:0f:98:c0:14:a7:fa:99:3e:22:58:f8:
91:c8:ea:fe:57:d6:72:80:ea:7e:47:ad:54:93:a0:01:ec:ad:
53:8a:2c:e3:5a:47:22:d5:49:a7:ee:cd:4f:41:b1:07:c5:4d:
58:21:e2:07:f4:11:64:e7:e3:e3:5a:1f:de:39:26:da:97:fb:
40:75:4b:f0:65:90:d4:88:fb:a0:f1:51:a0:54:b0:8f:4b:63:
00:36:cd:d6:53:c4:5c:13:4d:47:99:1e:52:84:77:b5:a9:aa:
27:ce:15:23:cd:54:6f:4e:4b:5c:f5:b6:9a:ae:0c:b2:14:7e:
82:eb:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net