Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FCh0pju_b1XDjIA8N5RktFi16SI.roa
File: FCh0pju_b1XDjIA8N5RktFi16SI.roa (raw, json)
Hash identifier: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=
Subject key identifier: 14:28:74:A6:3B:BF:6F:55:C3:8C:80:3C:37:94:64:B4:58:B5:E9:22
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F6452642D0A78A643996BCB1CC1F2
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FCh0pju_b1XDjIA8N5RktFi16SI.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210411
IP address blocks: 45.94.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:64:52:64:2d:0a:78:a6:43:99:6b:cb:1c:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142874a63bbf6f55c38c803c379464b458b5e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:6c:5a:17:08:90:09:2d:56:1e:79:b0:c1:
95:5f:89:79:09:af:5f:2f:04:39:83:54:df:b2:0e:
52:a9:72:96:41:e9:61:8e:c3:e9:d8:77:be:bb:80:
32:6c:8c:42:06:e8:4d:3c:a2:87:00:e7:8f:38:b6:
a3:29:05:c6:ee:12:d0:ca:07:7c:a2:6a:bb:28:8e:
7d:7d:b8:92:6c:8c:8e:39:e2:6f:0b:8f:5e:6a:22:
56:2c:75:30:cc:a2:a2:a5:02:d8:52:45:8f:8f:06:
27:84:6d:c3:22:60:6c:d5:64:b6:7b:44:9a:0f:47:
e4:a1:39:06:61:05:6b:0d:e6:b0:e0:7c:1a:cc:9b:
1f:aa:4f:9e:ce:c7:16:8d:c7:be:92:65:9d:8d:de:
f5:32:66:3c:77:4b:75:ba:3a:aa:93:81:22:e7:c5:
d4:49:8a:79:11:32:dc:ec:60:7e:48:f9:dd:3e:97:
c4:ef:40:d0:db:ff:ff:c4:8d:36:c0:a8:b2:1f:94:
8c:8f:c8:a1:d2:10:45:79:b7:b7:fc:af:3d:bf:02:
d8:ca:9a:b2:ce:bb:97:f7:7a:cf:70:ad:0c:f2:a3:
39:82:cc:37:ac:91:b0:55:98:5a:30:09:93:24:91:
fb:44:2d:3f:d8:bb:26:5d:48:7c:52:aa:92:6a:c7:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:74:A6:3B:BF:6F:55:C3:8C:80:3C:37:94:64:B4:58:B5:E9:22
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/FCh0pju_b1XDjIA8N5RktFi16SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:39:0b:15:55:3d:9a:f0:75:c7:22:90:0e:3e:79:4a:fd:0d:
7f:21:29:f0:b9:e7:d3:fb:a9:56:7f:38:6f:11:cc:2a:c4:16:
32:64:f6:4b:ce:93:ce:f5:3f:28:5a:28:6f:64:ab:cb:71:d1:
a2:9e:5b:fd:da:ca:3b:69:92:18:fd:53:55:7a:9b:73:29:f3:
8c:54:ba:cf:e2:5f:2b:5a:6f:29:4a:c0:f4:dd:d0:62:cf:bd:
ff:e1:29:aa:06:61:b7:cc:be:7e:f4:72:60:21:4b:8d:ef:87:
0a:b3:63:fb:8a:e8:7a:26:e4:b3:51:7a:d1:71:69:ac:b6:9b:
3f:b9:4d:38:ef:7e:2c:95:d4:46:de:65:8d:51:fa:9a:f5:4a:
9c:58:fa:02:41:68:01:a8:ad:d0:27:a0:35:35:71:b3:30:d4:
ee:2b:53:0a:bd:bd:c7:63:e3:aa:d6:2c:b4:94:d8:93:04:e4:
5d:2d:33:aa:af:bc:44:ce:72:08:1a:25:6e:f2:08:a0:04:cf:
4e:b9:b4:4c:d4:d8:67:fb:ab:05:25:ba:0a:f4:b0:bb:79:dd:
25:23:c6:49:a2:5a:b4:b4:58:ac:e2:06:a5:5b:c8:27:93:e8:
0a:8d:47:5c:70:ba:e5:2e:55:f0:79:d6:09:b2:02:6d:71:bf:
c4:92:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net