Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Fn45TpW1nllwbpJD6OV7oWwSzA8.roa
File: Fn45TpW1nllwbpJD6OV7oWwSzA8.roa (raw, json)
Hash identifier: xg/TTDjWMXGzawL9NfcMIpoU54tFEBQogD7gmrohTKc=
Subject key identifier: 16:7E:39:4E:95:B5:9E:59:70:6E:92:43:E8:E5:7B:A1:6C:12:CC:0F
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019426D9CD25BF0E15A388245D387188277C
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Fn45TpW1nllwbpJD6OV7oWwSzA8.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201558
IP address blocks: 185.69.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:25:bf:0e:15:a3:88:24:5d:38:71:88:27:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=167e394e95b59e59706e9243e8e57ba16c12cc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:96:07:31:b8:56:23:98:6d:49:69:6b:80:
d4:ed:21:f1:94:cc:bd:84:44:98:e1:20:ff:1b:a4:
23:64:a8:5d:74:02:4d:de:6b:49:7b:36:d2:59:39:
6e:81:50:e7:74:de:9d:fc:e7:e2:d0:98:e2:a3:f6:
a4:7e:90:67:8c:c4:df:d5:b0:59:91:89:fd:b8:4e:
aa:45:f2:0c:d0:c5:fe:cb:76:82:df:04:d3:c6:06:
a9:6b:45:15:9a:65:92:e9:97:42:fc:f5:e5:ae:33:
ec:a5:bc:91:f9:07:98:87:47:8c:0a:f2:86:a5:0d:
72:ed:32:4a:d5:87:94:f1:2d:01:c2:fc:37:33:dd:
1b:b1:8f:e8:57:e5:dc:74:03:9f:e8:df:62:67:2f:
66:77:12:ed:5a:b2:2c:f8:b3:60:44:21:4c:23:29:
ca:cf:eb:3f:00:fc:a1:04:51:9f:fa:f6:cf:2c:ce:
04:52:c7:2b:2d:b7:69:b8:ba:28:11:28:64:54:7d:
b5:de:1f:dc:10:32:44:23:65:78:e2:9a:e8:c2:69:
a9:09:0b:76:ba:a3:69:08:ea:d6:08:52:c8:a8:77:
e5:8b:ff:6c:3f:58:fe:58:66:1b:5e:96:82:7e:b5:
3a:07:e9:14:31:e3:fb:ad:3f:94:46:b2:0a:04:73:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:39:4E:95:B5:9E:59:70:6E:92:43:E8:E5:7B:A1:6C:12:CC:0F
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/Fn45TpW1nllwbpJD6OV7oWwSzA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.187.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c4:85:f8:10:b8:44:83:07:cd:f4:91:81:a7:ec:ee:c5:3e:
48:9e:ee:2c:2f:b0:5a:16:00:ad:60:25:d4:c0:f5:5e:72:f6:
8a:7c:08:dc:8b:d2:f4:70:78:cc:a6:b0:77:fe:80:04:82:4e:
40:87:b1:50:e6:ea:80:5d:50:92:a6:9b:d6:ad:a1:65:d9:d6:
3f:17:89:85:41:b8:5f:e9:53:41:ea:8a:61:d4:c1:b8:2d:80:
08:5f:e7:14:f7:12:ea:0a:36:8b:73:9a:49:1b:cd:5a:fd:c9:
84:d5:7a:b6:18:c5:ff:4b:8c:77:2a:6d:45:5b:f5:f8:08:ab:
7c:76:b1:f6:4f:18:b6:50:7c:f9:96:d8:dc:fa:d4:8b:59:f3:
b1:f9:ce:93:1b:fb:03:44:c6:70:72:f0:e9:31:cf:12:22:47:
7b:4c:aa:d9:a2:47:77:34:30:8f:b2:ed:29:9f:80:26:6f:cf:
c2:9c:f3:7d:7b:d9:ec:bf:68:be:b6:2b:c6:59:c4:7d:38:24:
a6:af:d3:cc:3a:85:70:13:a8:63:d3:0f:59:47:06:5f:82:4a:
ce:87:90:e9:6f:da:b4:8e:01:58:49:da:1a:2a:b9:a2:75:92:
92:83:c9:42:3f:8a:e1:22:a9:02:a5:59:30:5f:51:60:d0:1b:
ea:2e:3f:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2c0lvw4Vo4gkXThxiCd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5
NWE0ZWQwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjdlMzk0ZTk1YjU5ZTU5NzA2ZTkyNDNlOGU1N2JhMTZjMTJjYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY2WBzG4ViOYbUlpa4DU7SHxlMy9
hESY4SD/G6QjZKhddAJN3mtJezbSWTlugVDndN6d/Ofi0Jjio/akfpBnjMTf1bBZ
kYn9uE6qRfIM0MX+y3aC3wTTxgapa0UVmmWS6ZdC/PXlrjPspbyR+QeYh0eMCvKG
pQ1y7TJK1YeU8S0Bwvw3M90bsY/oV+XcdAOf6N9iZy9mdxLtWrIs+LNgRCFMIynK
z+s/APyhBFGf+vbPLM4EUscrLbdpuLooEShkVH213h/cEDJEI2V44prowmmpCQt2
uqNpCOrWCFLIqHfli/9sP1j+WGYbXpaCfrU6B+kUMeP7rT+URrIKBHNeuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZ+OU6VtZ5ZcG6SQ+jle6FsEswPMB8GA1UdIwQY
MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvRm40NVRwVzFubGx3YnBKRDZPVjdvV3dTekE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUW7MA0G
CSqGSIb3DQEBCwUAA4IBAQBDxIX4ELhEgwfN9JGBp+zuxT5Inu4sL7BaFgCtYCXU
wPVecvaKfAjci9L0cHjMprB3/oAEgk5Ah7FQ5uqAXVCSppvWraFl2dY/F4mFQbhf
6VNB6oph1MG4LYAIX+cU9xLqCjaLc5pJG81a/cmE1Xq2GMX/S4x3Km1FW/X4CKt8
drH2Txi2UHz5ltjc+tSLWfOx+c6TG/sDRMZwcvDpMc8SIkd7TKrZokd3NDCPsu0p
n4Amb8/CnPN9e9nsv2i+tivGWcR9OCSmr9PMOoVwE6hj0w9ZRwZfgkrOh5Dpb9q0
jgFYSdoaKrmidZKSg8lCP4rhIqkCpVkwX1Fg0BvqLj/s
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net