Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/FpXlOOnsbwOYeT36IscKSuN8OMU.roa
File: FpXlOOnsbwOYeT36IscKSuN8OMU.roa (raw, json)
Hash identifier: A+XYmuaYnslHDaJLV17tPt7jw//813JyNtz/WmswEK4=
Subject key identifier: 16:95:E5:38:E9:EC:6F:03:98:79:3D:FA:22:C7:0A:4A:E3:7C:38:C5
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019424B4010D155F87B9E390DF0323E2DAE7
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/FpXlOOnsbwOYeT36IscKSuN8OMU.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48213
IP address blocks: 45.13.172.0/22 maxlen: 22
185.135.236.0/22 maxlen: 22
213.232.226.0/24 maxlen: 24
2a07:980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:01:0d:15:5f:87:b9:e3:90:df:03:23:e2:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1695e538e9ec6f0398793dfa22c70a4ae37c38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:2d:f2:1b:a5:a7:c5:e6:3e:28:8d:bd:39:
58:91:78:da:c8:aa:b4:2f:4a:f8:87:7a:28:f5:2c:
b2:5f:ec:4d:fe:43:3b:14:fd:d7:24:73:04:6c:59:
de:79:cc:35:ac:5b:1e:59:7d:03:b5:f4:55:2f:0b:
22:8a:87:a1:dc:e0:da:ed:32:da:df:7f:c7:f1:f3:
19:ca:72:07:e4:f8:20:54:98:84:e7:84:63:0e:08:
d1:ff:41:71:04:92:48:01:d8:75:e9:22:5b:03:dc:
7c:07:b4:00:16:e6:4f:09:0e:94:7e:24:47:79:43:
54:bb:21:11:46:e8:df:4c:2d:d4:23:61:66:2d:fa:
43:dc:3d:95:5c:6f:e0:63:ca:fd:25:ad:72:ca:b1:
c0:85:08:d1:0a:61:17:f5:8d:ab:72:fc:54:8e:85:
04:5c:79:95:58:a6:f4:d4:39:cd:22:b4:fc:55:61:
59:f5:aa:33:ec:69:f7:f8:82:6e:a5:80:c0:ad:c3:
73:10:b2:39:76:05:2e:e4:e1:29:35:93:ce:91:91:
13:3b:d0:34:45:c7:fc:ff:4e:f1:60:43:4b:ea:ea:
6e:e1:a7:e5:6e:b4:31:e4:3a:cb:77:2b:69:dc:b0:
08:86:82:60:a2:0b:af:df:ab:45:27:fd:3e:66:55:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:E5:38:E9:EC:6F:03:98:79:3D:FA:22:C7:0A:4A:E3:7C:38:C5
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/FpXlOOnsbwOYeT36IscKSuN8OMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.172.0/22
185.135.236.0/22
213.232.226.0/24
IPv6:
2a07:980::/29
Signature Algorithm: sha256WithRSAEncryption
31:5b:76:e5:6a:69:03:58:82:4a:08:89:c5:14:4e:0f:57:2f:
3b:f8:1b:a9:35:d0:98:b1:a1:c8:d6:93:be:d1:c9:b8:6c:5a:
3b:5a:fb:5d:fb:d5:9f:5f:4a:5b:d2:5a:02:29:a0:48:45:48:
59:35:95:74:c5:60:3b:9c:ee:92:65:a0:2f:cb:38:26:78:39:
b7:20:39:31:7c:3d:e3:f5:f3:7b:a9:d5:1c:8b:f8:40:0a:a5:
6d:a3:76:3b:5d:df:8d:07:d4:e1:1f:30:d6:8d:89:19:71:e4:
61:72:96:b0:a4:45:20:ab:da:61:1e:c2:bd:af:fa:fc:14:11:
9f:64:85:77:19:56:2a:2a:dc:06:12:74:2a:88:7d:0e:3d:ba:
ed:1d:9c:89:40:ee:95:28:ef:89:07:a6:3b:79:00:0e:81:d3:
3f:34:b2:93:11:15:0b:f4:5c:71:5b:1a:2a:89:0b:9e:7b:ab:
70:1a:50:af:d6:13:5e:f4:4d:62:a8:e2:40:7f:26:9d:1a:76:
83:02:b0:59:d7:25:25:13:e3:44:9e:bf:47:3a:77:e3:c5:1f:
70:a1:ef:30:18:c5:4b:15:07:00:2e:39:e9:2b:8b:e1:cf:dc:
a8:0b:10:39:1d:84:43:f3:f3:1c:6f:26:36:9d:61:65:9e:8b:
95:54:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net