Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/a5UnemfayVAdbbDqB5jidjgbSJ8.roa
File: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (raw, json)
Hash identifier: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=
Subject key identifier: 6B:95:27:7A:67:DA:C9:50:1D:6D:B0:EA:07:98:E2:76:38:1B:48:9F
Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Certificate serial: 019425FCBD34F634BBB97886F12E3E311E35
Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/a5UnemfayVAdbbDqB5jidjgbSJ8.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212613
IP address blocks: 193.176.120.0/22 maxlen: 22
193.176.120.0/24 maxlen: 24
193.176.121.0/24 maxlen: 24
193.176.122.0/24 maxlen: 24
193.176.123.0/24 maxlen: 24
2a05:5a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:bd:34:f6:34:bb:b9:78:86:f1:2e:3e:31:1e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b95277a67dac9501d6db0ea0798e276381b489f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:6c:03:c6:16:b6:e5:18:2c:a6:65:10:10:
a8:a0:7a:a8:0a:03:45:43:10:60:ae:07:9f:bd:8a:
29:05:35:0f:6f:0a:c0:d1:38:96:9b:b4:93:c4:f9:
8f:56:f7:b4:15:2e:9c:b0:b1:6e:7c:df:6d:5f:c1:
9c:63:ff:5b:05:ac:e9:18:c7:d7:05:a4:8c:0f:f7:
7f:e8:87:31:98:18:c1:d8:74:16:38:aa:0b:57:43:
6d:11:ee:39:df:65:ac:51:08:43:a9:cc:51:ea:68:
06:9f:89:fc:c5:85:44:00:fe:2e:7d:70:53:7f:33:
6e:d7:83:c6:4d:51:4b:36:a2:f3:ba:3d:ec:7a:24:
f0:9e:f1:da:5f:7a:73:10:fe:8a:4e:b4:d8:0c:5e:
5e:71:62:38:36:02:e5:0c:3d:cc:73:56:37:dc:a2:
c6:19:56:f1:ed:61:b5:66:5c:d4:1c:84:be:00:b1:
aa:ff:0a:d1:b7:db:c3:2c:88:d7:01:ec:e2:47:b2:
36:77:4d:d7:3d:39:dd:5c:db:18:4f:4d:8c:d5:db:
b0:4c:2b:52:2d:8c:c7:e5:4c:aa:9e:05:30:8f:f0:
ad:f7:1b:c9:3e:23:e9:de:d3:c8:5f:9e:bc:2c:a0:
cd:ae:7a:66:73:31:b7:b2:c7:c9:6b:ed:73:1d:71:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:27:7A:67:DA:C9:50:1D:6D:B0:EA:07:98:E2:76:38:1B:48:9F
X509v3 Authority Key Identifier:
keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/a5UnemfayVAdbbDqB5jidjgbSJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.120.0/22
IPv6:
2a05:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
77:45:a7:80:6c:6d:a3:7a:42:b4:32:da:93:09:d2:3d:ac:d5:
5b:b9:a7:40:f9:24:c3:5e:0b:c7:3a:94:95:2f:71:8f:d0:6c:
14:f3:e5:fc:5e:8b:09:17:2c:d2:e0:07:18:61:2b:b7:d0:11:
07:ed:bb:3c:dd:56:42:6d:6b:44:ab:88:0c:1f:ee:89:8a:4b:
4e:81:ea:5f:c8:db:81:0e:72:d8:93:71:24:05:66:94:17:01:
af:14:1c:d6:1f:ae:98:26:de:a4:60:26:ed:40:2b:de:48:48:
84:bf:12:3f:62:a8:27:a7:dd:5a:9a:48:b3:aa:08:c4:ab:d6:
10:87:1c:e7:eb:03:b9:34:fd:da:60:6f:30:22:ec:24:a6:07:
c9:90:72:01:94:70:34:9a:c9:9a:4e:df:4b:2f:82:49:61:e4:
c2:76:f7:de:08:25:2f:8d:cc:9a:6d:ac:0c:79:87:5d:2b:33:
92:cb:8e:54:a0:c3:bf:8d:77:cd:0c:b6:31:85:52:15:13:3b:
d8:33:43:02:52:e2:4d:a2:d1:02:d5:fb:c1:0a:1c:c4:b6:16:
7c:f4:54:82:ae:06:c5:ac:56:4a:2b:3e:80:f7:44:13:3e:9b:
aa:7f:8a:fc:15:3c:72:fa:da:87:50:09:77:0a:18:64:bf:8d:
f5:51:54:1e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/L009jS7uXiG8S4+MR41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5
ZDY2YTIwHhcNMjUwMTAyMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjk1Mjc3YTY3ZGFjOTUwMWQ2ZGIwZWEwNzk4ZTI3NjM4MWI0ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN1sA8YWtuUYLKZlEBCooHqoCgNF
QxBgrgefvYopBTUPbwrA0TiWm7STxPmPVve0FS6csLFufN9tX8GcY/9bBazpGMfX
BaSMD/d/6IcxmBjB2HQWOKoLV0NtEe4532WsUQhDqcxR6mgGn4n8xYVEAP4ufXBT
fzNu14PGTVFLNqLzuj3seiTwnvHaX3pzEP6KTrTYDF5ecWI4NgLlDD3Mc1Y33KLG
GVbx7WG1ZlzUHIS+ALGq/wrRt9vDLIjXAeziR7I2d03XPTndXNsYT02M1duwTCtS
LYzH5UyqngUwj/Ct9xvJPiPp3tPIX568LKDNrnpmczG3ssfJa+1zHXFZgQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGuVJ3pn2slQHW2w6geY4nY4G0ifMB8GA1UdIwQY
MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct
ZWEyMTZiYTI1OTRkLzEvYTVVbmVtZmF5VkFkYmJEcUI1amlkamdiU0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk
LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwbB4MA0E
AgACMAcDBQMqBVoAMA0GCSqGSIb3DQEBCwUAA4IBAQB3RaeAbG2jekK0MtqTCdI9
rNVbuadA+STDXgvHOpSVL3GP0GwU8+X8XosJFyzS4AcYYSu30BEH7bs83VZCbWtE
q4gMH+6JiktOgepfyNuBDnLYk3EkBWaUFwGvFBzWH66YJt6kYCbtQCveSEiEvxI/
Yqgnp91amkizqgjEq9YQhxzn6wO5NP3aYG8wIuwkpgfJkHIBlHA0msmaTt9LL4JJ
YeTCdvfeCCUvjcyabawMeYddKzOSy45UoMO/jXfNDLYxhVIVEzvYM0MCUuJNotEC
1fvBChzEthZ89FSCrgbFrFZKKz6A90QTPpuqf4r8FTxy+tqHUAl3Chhkv431UVQe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net