Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/FuRu0xLu2HvckUxx6CKawcRdyGM.roa
File: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (raw, json)
Hash identifier: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=
Subject key identifier: 16:E4:6E:D3:12:EE:D8:7B:DC:91:4C:71:E8:22:9A:C1:C4:5D:C8:63
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 01942369E76C788D6020F1BDA71668885605
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/FuRu0xLu2HvckUxx6CKawcRdyGM.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39046
IP address blocks: 80.254.48.0/20 maxlen: 20
80.254.52.0/24 maxlen: 24
80.254.54.0/24 maxlen: 24
80.254.56.0/24 maxlen: 24
80.254.58.0/24 maxlen: 24
80.254.61.0/24 maxlen: 24
80.254.63.0/24 maxlen: 24
185.77.8.0/23 maxlen: 23
185.77.10.0/24 maxlen: 24
2a03:51a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e7:6c:78:8d:60:20:f1:bd:a7:16:68:88:56:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e46ed312eed87bdc914c71e8229ac1c45dc863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:fd:f8:77:74:23:2b:77:fc:64:c3:2e:59:
c8:53:9e:59:3a:19:aa:51:f1:cb:50:56:82:aa:d9:
1c:49:12:83:78:1f:c3:a8:b1:87:a9:1a:68:fc:77:
0b:43:a6:40:50:4c:41:9f:ae:54:f7:85:46:1f:92:
a4:f9:e7:53:7e:d0:78:db:5e:7a:42:49:dc:56:e2:
25:a8:c1:c4:2d:00:6b:db:92:6a:6c:ae:9b:2c:2b:
49:fa:e6:ed:95:72:b4:4d:c2:2f:3c:b8:c0:6b:eb:
40:76:7e:82:2f:4f:e9:af:33:b1:9e:7a:31:24:c4:
3b:ec:d7:0f:19:0d:ce:e8:55:df:56:7f:47:22:48:
d3:09:11:6d:50:9d:ce:95:b7:13:e0:ae:75:9f:e2:
fe:36:c0:9e:13:89:c5:93:7f:cf:15:36:66:f0:de:
0f:da:44:6b:8d:58:e9:99:97:da:69:bb:34:fe:b4:
60:07:b8:8c:49:b3:f3:a5:ad:dd:15:2d:e8:8f:48:
8e:f1:3b:06:db:02:78:df:e6:67:23:21:53:da:75:
db:95:5b:0f:b1:b7:27:c7:74:6a:72:63:7b:1d:fd:
c0:0b:5a:db:ba:74:35:4e:bd:ef:35:5b:27:9b:e8:
ab:6b:81:dc:e7:57:34:3b:3f:4d:a4:42:9a:50:f7:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:6E:D3:12:EE:D8:7B:DC:91:4C:71:E8:22:9A:C1:C4:5D:C8:63
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/FuRu0xLu2HvckUxx6CKawcRdyGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.48.0/20
185.77.8.0-185.77.10.255
IPv6:
2a03:51a0::/32
Signature Algorithm: sha256WithRSAEncryption
dc:e4:0a:7e:ba:37:a0:b2:cb:73:cb:bb:3d:9f:6f:1a:f2:a1:
83:d5:18:8a:df:be:ce:5c:ce:46:01:44:09:02:97:f9:f5:ee:
f1:cb:0d:78:c5:d3:0d:07:0e:b8:38:99:20:c1:a1:ac:0e:c4:
02:5f:7b:01:c1:6c:db:b4:af:4a:d6:c9:f8:6c:63:ed:b0:d6:
75:9a:be:c7:d0:33:0b:58:d3:11:b5:d5:f9:5c:5b:87:0b:94:
72:e5:d9:99:a0:67:21:8e:48:ea:3e:05:b7:28:42:5d:c8:ee:
03:b3:b4:a3:b8:80:3a:33:4f:db:a9:75:b5:5f:59:ab:40:ee:
a1:ca:16:bc:03:6e:4d:b4:da:b5:17:75:9f:84:2b:e8:1f:41:
69:53:eb:f1:7b:08:a1:ca:f6:3f:97:ee:e8:79:42:d6:42:9a:
e0:e6:10:d5:6d:25:3a:54:8d:7f:31:17:37:fe:23:5c:e0:7e:
50:33:a2:bf:d4:01:56:65:dc:d3:c4:89:85:b3:ff:06:93:4f:
13:25:59:0f:98:ef:27:28:f8:29:79:b0:c2:bf:b0:50:13:d3:
26:db:1a:a9:0e:93:46:62:c3:b2:4f:1e:3a:d9:aa:00:16:00:
2c:68:0c:23:c5:e3:a7:cb:60:71:9a:ec:a8:87:51:3a:79:54:
f8:55:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net