Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/FpuR0y9APVvFEzZNqfMzupE3ra4.roa
File: FpuR0y9APVvFEzZNqfMzupE3ra4.roa (raw, json)
Hash identifier: GpOZZgRFNoAGIu1wspT0GzMUn0LG62S5x4bgRa8l/A4=
Subject key identifier: 16:9B:91:D3:2F:40:3D:5B:C5:13:36:4D:A9:F3:33:BA:91:37:AD:AE
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 01942369A046F0D53E270EA80502982AAE37
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/FpuR0y9APVvFEzZNqfMzupE3ra4.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48594
IP address blocks: 94.124.80.0/24 maxlen: 24
94.124.81.0/24 maxlen: 24
94.124.82.0/24 maxlen: 24
94.124.83.0/24 maxlen: 24
94.124.84.0/24 maxlen: 24
94.124.85.0/24 maxlen: 24
94.124.86.0/24 maxlen: 24
94.124.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a0:46:f0:d5:3e:27:0e:a8:05:02:98:2a:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169b91d32f403d5bc513364da9f333ba9137adae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:f5:48:52:20:72:76:2b:f8:32:97:ae:dd:
a8:76:62:80:a1:dc:cb:46:a4:dc:75:11:02:0f:75:
7c:6b:b1:02:9e:da:e1:ce:9f:0c:74:4c:cf:f1:4c:
62:da:ce:74:20:f3:92:06:5a:2d:05:14:16:46:a7:
32:e4:4b:7f:02:78:ea:26:50:bb:13:21:3d:b3:57:
f1:f2:32:7d:db:89:df:ff:d5:d7:ae:2e:66:8f:e6:
84:2a:9c:2f:c0:91:1e:77:ee:2d:10:69:21:7e:95:
4c:85:e1:3e:1b:e8:8c:04:a2:df:fc:48:0f:5a:eb:
8f:d6:ae:5a:fd:3e:5e:4a:2e:79:b0:da:b5:4f:50:
7d:80:87:0e:4d:aa:d7:62:46:bf:05:bf:01:64:2c:
a4:6d:a3:f6:bd:7a:22:8a:9c:f9:d4:de:6d:86:40:
a7:77:38:a8:9d:e5:d9:b0:ec:b4:37:18:49:f7:e7:
d7:58:5e:c3:8c:32:24:82:f8:db:2c:59:b8:d0:9e:
e8:53:b6:d6:6e:94:69:71:2e:c1:3c:c1:48:5a:cf:
97:bd:d9:b8:a0:db:b3:f9:5b:ad:1d:1e:62:6c:62:
55:a3:f5:45:6f:f4:16:d9:b2:e0:16:0b:87:88:77:
4e:82:9a:28:ae:a6:54:02:7c:c0:7b:d8:ac:65:8c:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:91:D3:2F:40:3D:5B:C5:13:36:4D:A9:F3:33:BA:91:37:AD:AE
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/FpuR0y9APVvFEzZNqfMzupE3ra4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.80.0/21
Signature Algorithm: sha256WithRSAEncryption
40:85:0d:ad:9b:91:90:46:10:6d:1a:43:4a:09:43:82:83:57:
46:dd:ed:01:2c:0c:f4:a8:1e:b5:72:1e:ea:6a:14:b7:8e:97:
b6:29:ea:66:9c:4a:c6:57:0c:39:d4:49:99:ce:50:dd:97:62:
6b:b8:58:06:6b:12:68:33:f2:31:95:fd:13:41:9c:49:21:92:
fa:d9:6a:a6:60:76:46:e6:f3:5b:c6:f5:0b:2f:24:be:69:1c:
7d:9c:3d:e5:1f:cd:8e:9b:35:da:f7:10:a5:c0:96:85:a9:10:
3a:b1:ff:3d:90:45:76:f6:35:ca:58:a2:c7:7c:e2:2f:e0:9e:
56:1a:18:1c:15:c1:76:97:8c:41:06:c6:a2:3a:be:f9:7d:59:
48:c2:e7:1d:39:94:d6:45:0e:9f:c9:99:e8:da:c9:dd:55:08:
e0:98:45:29:42:95:fb:9c:b8:0c:f4:39:f7:21:58:dd:9e:0f:
41:1b:b9:07:c8:b7:0c:76:1e:14:e4:0a:a5:70:fc:5e:c0:07:
bd:89:d0:a8:f4:4e:51:35:87:8a:3f:2c:33:78:93:0c:d9:a7:
c6:c4:5d:69:fa:2d:49:59:a5:e4:77:93:dc:7a:0d:41:d4:51:
d7:b2:79:b8:da:c0:49:07:98:6e:ef:46:18:eb:01:8e:26:03:
be:d7:a6:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaaBG8NU+Jw6oBQKYKq43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5
YzI2MTIwHhcNMjUwMTAxMTk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjliOTFkMzJmNDAzZDViYzUxMzM2NGRhOWYzMzNiYTkxMzdhZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y/1SFIgcnYr+DKXrt2odmKAodzL
RqTcdRECD3V8a7ECntrhzp8MdEzP8Uxi2s50IPOSBlotBRQWRqcy5Et/AnjqJlC7
EyE9s1fx8jJ924nf/9XXri5mj+aEKpwvwJEed+4tEGkhfpVMheE+G+iMBKLf/EgP
WuuP1q5a/T5eSi55sNq1T1B9gIcOTarXYka/Bb8BZCykbaP2vXoiipz51N5thkCn
dzioneXZsOy0NxhJ9+fXWF7DjDIkgvjbLFm40J7oU7bWbpRpcS7BPMFIWs+Xvdm4
oNuz+VutHR5ibGJVo/VFb/QW2bLgFguHiHdOgpoorqZUAnzAe9isZYycpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBabkdMvQD1bxRM2TanzM7qRN62uMB8GA1UdIwQY
MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt
NjljNGU4NTMzNTIxLzEvRnB1UjB5OUFQVnZGRXpaTnFmTXp1cEUzcmE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx
LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXnxQMA0G
CSqGSIb3DQEBCwUAA4IBAQBAhQ2tm5GQRhBtGkNKCUOCg1dG3e0BLAz0qB61ch7q
ahS3jpe2KepmnErGVww51EmZzlDdl2JruFgGaxJoM/Ixlf0TQZxJIZL62WqmYHZG
5vNbxvULLyS+aRx9nD3lH82OmzXa9xClwJaFqRA6sf89kEV29jXKWKLHfOIv4J5W
GhgcFcF2l4xBBsaiOr75fVlIwucdOZTWRQ6fyZno2sndVQjgmEUpQpX7nLgM9Dn3
IVjdng9BG7kHyLcMdh4U5AqlcPxewAe9idCo9E5RNYeKPywzeJMM2afGxF1p+i1J
WaXkd5Pceg1B1FHXsnm42sBJB5hu70YY6wGOJgO+16Ys
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net