Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FUZGInTADEEoLc3fSE_CI1PAxdc.roa
File: FUZGInTADEEoLc3fSE_CI1PAxdc.roa (raw, json)
Hash identifier: RjzNLW51jAU8ydboNu5AyfRf3eAkLo4pZzRj8QiHQy0=
Subject key identifier: 15:46:46:22:74:C0:0C:41:28:2D:CD:DF:48:4F:C2:23:53:C0:C5:D7
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BFE17ACF6874808A6C89987E7282
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FUZGInTADEEoLc3fSE_CI1PAxdc.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204679
IP address blocks: 193.59.78.0/23 maxlen: 24
194.181.179.0/24 maxlen: 24
195.164.128.0/17 maxlen: 24
2001:a17::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bf:e1:7a:cf:68:74:80:8a:6c:89:98:7e:72:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1546462274c00c41282dcddf484fc22353c0c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:59:1d:73:55:49:79:bd:3f:4a:3e:f9:d7:
a4:95:48:2e:1f:fd:4c:12:0d:d3:fc:90:ce:e6:88:
3a:01:e7:7c:ec:95:dc:0e:bc:21:4c:64:77:47:19:
70:b4:d2:fe:8a:32:30:2d:3e:63:60:5a:2b:62:8d:
be:80:42:c9:34:6f:0c:d5:fa:5c:a2:35:03:cd:99:
16:1e:92:bc:2c:d8:9e:3c:59:2d:e1:9b:b4:36:94:
54:e8:9f:19:e0:68:61:dc:a8:ff:4b:78:30:52:95:
19:fa:9c:00:a6:c0:a1:ea:d6:1f:72:86:dd:85:34:
9b:d4:09:da:b1:c5:c5:da:ca:6e:c3:6c:7a:e3:fa:
b9:ef:54:b5:5b:b2:0c:59:20:0f:86:72:2b:c1:5c:
8f:8c:dd:10:b5:ef:d3:2a:37:e5:93:8d:e5:92:26:
47:d0:5e:28:d7:b7:08:f2:9a:cc:59:8b:e6:37:e3:
bf:0f:8d:67:de:d1:0d:ba:c3:d1:bc:89:76:de:1e:
17:98:a8:51:c0:59:3a:78:f0:17:ca:0f:7b:cb:82:
bf:42:c7:1e:00:bf:52:6a:c2:10:b6:43:54:b8:67:
b9:5c:05:b3:91:00:8c:ce:bd:4a:f1:08:f1:38:d3:
97:d5:f9:98:69:f0:49:48:7b:15:22:2d:20:36:38:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:46:22:74:C0:0C:41:28:2D:CD:DF:48:4F:C2:23:53:C0:C5:D7
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FUZGInTADEEoLc3fSE_CI1PAxdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.78.0/23
194.181.179.0/24
195.164.128.0/17
IPv6:
2001:a17::/32
Signature Algorithm: sha256WithRSAEncryption
66:46:6f:ed:f4:1e:5f:f0:45:b1:91:94:25:e1:2e:17:6b:83:
fe:cd:71:46:16:35:4f:be:1c:67:59:46:12:49:6c:c2:ad:5c:
28:01:04:d3:19:65:16:cd:55:e8:47:97:57:9d:1c:59:28:6f:
94:d9:0d:7f:ee:70:83:6f:ff:63:84:41:5a:c3:65:55:e0:38:
15:cc:66:ef:09:77:38:60:19:c6:e1:0a:a4:d7:ea:cd:57:19:
01:39:2b:11:ab:d5:05:99:f6:71:b0:0e:1a:19:4a:43:98:0c:
84:ff:a4:48:af:dc:84:dd:43:fc:0d:3a:81:ce:b5:64:cf:b1:
79:a3:fe:22:3b:a3:8a:f9:18:a4:5b:f5:c9:60:c9:b6:1b:f1:
0b:3a:a7:29:0e:08:6b:24:2b:10:37:47:f5:aa:d1:5b:5f:11:
21:9e:17:f5:5d:03:40:28:77:ea:50:20:58:e8:d1:60:b4:f1:
d3:83:64:ff:b2:c1:9c:65:3a:2a:67:e4:36:48:a9:1e:9b:51:
97:e1:ef:6d:40:05:a1:4e:28:f5:69:68:65:e0:b1:05:2b:ef:
3e:fd:0e:d3:ce:56:ef:38:ad:9d:59:d7:e6:02:28:26:88:8f:
d9:4b:9e:6b:b3:8d:6b:08:f1:b4:f5:12:1b:61:e7:bf:c7:f9:
6c:a1:fd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net