Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/FmQKM1byPT17aE4vxLhHd5hbPyk.roa
File: FmQKM1byPT17aE4vxLhHd5hbPyk.roa (raw, json)
Hash identifier: xncz/of2OCuqwNzJF5Dlfe4RUORWgYvXswG7rPgqBQQ=
Subject key identifier: 16:64:0A:33:56:F2:3D:3D:7B:68:4E:2F:C4:B8:47:77:98:5B:3F:29
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019424458C29C689274109C95491EEDB66FC
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/FmQKM1byPT17aE4vxLhHd5hbPyk.roa
Signing time: Wed 01 Jan 2025 23:48:45 +0000
ROA not before: Wed 01 Jan 2025 23:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204006
IP address blocks: 185.117.134.0/24 maxlen: 24
185.117.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8c:29:c6:89:27:41:09:c9:54:91:ee:db:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jan 1 23:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16640a3356f23d3d7b684e2fc4b84777985b3f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:f3:99:bc:d4:0a:9b:0e:44:7c:25:18:61:
a2:21:d7:c6:8a:16:22:40:98:4d:3f:e8:03:d1:2d:
e8:da:62:c0:c0:e7:54:d2:3a:98:60:7a:b9:7a:6c:
3d:75:f8:70:e4:a5:52:c4:e9:ec:7e:d9:42:c8:2d:
e7:e4:4c:3a:30:52:8c:d7:ff:1e:c7:6d:5e:19:89:
a1:a8:51:96:ba:c3:33:68:be:d2:98:4c:77:46:b3:
53:81:a2:d3:a1:a5:a6:4d:a7:45:3d:e9:7d:27:07:
a6:28:59:2d:bf:fe:bc:dd:50:b1:5d:60:74:85:da:
32:b6:85:cb:4d:a6:0f:1b:bf:ce:48:9c:5d:3a:85:
3a:d8:cd:96:3e:d6:56:00:98:a0:0b:61:9c:c9:bf:
b8:02:cf:b0:59:06:8c:1b:d1:76:c5:0f:a1:73:63:
47:86:a1:c0:14:5d:66:ca:8b:5c:dc:63:cc:19:84:
de:fc:c2:47:96:06:2e:90:fc:25:26:d6:5d:3b:80:
da:ea:76:e9:2d:e0:3d:37:f0:ba:1b:a5:ac:a2:62:
10:72:af:f5:8b:66:87:1b:58:eb:69:e6:fd:21:d8:
8f:bb:c3:3d:46:dd:9b:7e:f8:0a:37:5f:64:ff:bf:
ce:54:4f:26:48:c3:f7:0e:53:ed:be:70:8a:1b:73:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:0A:33:56:F2:3D:3D:7B:68:4E:2F:C4:B8:47:77:98:5B:3F:29
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/FmQKM1byPT17aE4vxLhHd5hbPyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.134.0/23
Signature Algorithm: sha256WithRSAEncryption
50:27:92:e2:1c:4a:04:fa:e7:63:eb:84:16:0a:5a:56:84:17:
2d:ff:7d:2b:ff:c6:92:d3:bf:3a:d5:13:0e:d9:9f:10:31:4d:
f5:47:af:10:bb:b0:79:cc:c7:f2:38:2b:89:e6:75:61:d0:a0:
d3:3c:cc:9d:12:d3:8f:51:b5:f2:ae:bb:5d:0a:e5:45:9d:e0:
74:4e:7e:c3:08:6c:32:30:aa:a5:2c:06:52:3d:20:9c:cf:82:
b0:ee:5a:f9:9c:d2:f4:ef:ef:c5:9a:c5:7f:70:e5:ec:bc:7a:
bf:fb:16:d6:e7:9a:62:d8:18:89:5c:51:72:df:ad:e4:a7:1a:
6c:ef:16:af:b3:cd:a8:aa:74:67:13:e8:30:ed:0a:27:a4:c9:
54:3c:e5:ca:f0:b4:c6:86:79:37:07:72:d7:23:ee:9a:d7:ea:
4e:b8:51:4d:60:71:0f:e4:fc:64:cc:da:06:54:d3:69:26:5e:
4b:2e:ff:29:79:a0:8d:d9:89:33:4e:4e:d2:15:60:4e:ad:31:
ca:0f:a3:81:37:9f:ad:9a:cc:b5:7d:fc:7f:51:ef:25:3b:33:
9f:b6:8f:55:da:2f:d1:61:8a:a6:35:f2:58:3a:c8:9b:fd:a6:
e8:47:7b:a6:28:2b:36:5e:2b:b0:65:c9:44:52:cc:4a:47:b1:
a3:ec:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 17:59:58 2025 by rpki-client on console.sobornost.net