Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/FuntCXoBht24QvgtEtbVZEuCdp0.roa
File: FuntCXoBht24QvgtEtbVZEuCdp0.roa (raw, json)
Hash identifier: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=
Subject key identifier: 16:E9:ED:09:7A:01:86:DD:B8:42:F8:2D:12:D6:D5:64:4B:82:76:9D
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0194266BF43F5852AA0C9D940FFD109625D2
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/FuntCXoBht24QvgtEtbVZEuCdp0.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204692
IP address blocks: 185.243.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f4:3f:58:52:aa:0c:9d:94:0f:fd:10:96:25:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e9ed097a0186ddb842f82d12d6d5644b82769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:68:0d:af:9f:7d:a8:bf:b7:8e:13:ba:3f:
99:66:4b:0d:f6:8e:56:52:a3:e2:1e:95:13:e3:f5:
cb:b8:65:7f:f0:49:b8:ec:1f:0c:33:61:df:fd:c8:
f2:b0:c9:92:21:b3:14:42:8b:a5:f5:29:a9:b0:01:
c6:5a:f5:80:2c:73:b2:e8:92:38:cf:6e:cc:fd:fa:
25:97:39:91:44:9a:a9:c2:76:f3:9c:6a:91:82:40:
c4:0e:a8:6d:cf:fa:ab:a1:42:d6:d1:dc:06:bd:bf:
02:f2:9c:76:a6:a7:e0:89:42:4b:a2:a0:e7:ff:07:
21:7b:3e:3d:72:64:8c:50:24:76:62:88:cd:70:b9:
0a:8c:d8:fd:93:7b:d3:99:5d:46:76:7f:16:0d:83:
33:f2:42:26:7b:ce:73:7a:34:dc:33:9f:de:4c:44:
24:1e:12:89:04:b4:65:ab:8b:1e:f3:1e:ab:c8:cc:
9b:7c:82:cc:24:32:6a:ab:3f:7b:f3:96:6d:18:d9:
c8:25:8b:9d:64:60:d7:f8:d5:96:65:02:3e:5f:9c:
dc:1d:79:ae:24:ca:f3:1d:5e:d9:fd:8e:65:83:ab:
d5:41:7d:9e:a0:e5:33:5a:70:c7:82:28:91:c0:5d:
6e:59:60:83:89:ee:0b:6e:61:d9:b2:bf:30:90:bc:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E9:ED:09:7A:01:86:DD:B8:42:F8:2D:12:D6:D5:64:4B:82:76:9D
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/FuntCXoBht24QvgtEtbVZEuCdp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6e:6c:80:7a:d7:23:da:6f:43:c8:4c:0a:20:a1:b5:61:35:
78:a2:09:84:3d:02:e9:fb:7e:2b:7e:e3:ea:c6:5a:c2:3b:1c:
b7:92:80:32:3c:66:86:90:b3:4d:60:96:be:0c:41:51:b2:ed:
10:0d:73:36:42:97:93:9b:bc:01:10:30:d1:da:3f:01:65:47:
c3:65:50:4f:23:5a:52:2e:4f:ab:db:76:85:04:1e:64:e8:da:
f7:c3:a7:07:05:b1:b5:5e:93:c2:95:58:25:13:c6:d2:b9:07:
b7:73:ec:a9:10:85:1c:72:03:01:29:1b:c4:3b:e1:84:e5:08:
a8:d2:31:b7:67:91:26:d9:27:c7:77:53:e9:60:93:70:52:5c:
ce:03:da:86:c5:13:a3:f8:55:0f:33:9c:f8:eb:a9:1a:e4:c5:
a3:de:44:cd:b0:34:f1:59:37:43:f7:71:64:13:57:c4:82:46:
37:11:67:03:2e:4c:59:0f:f0:04:c1:90:ec:45:a6:44:0e:e5:
b8:0a:f9:94:d5:da:8b:44:fc:11:b1:ad:5f:0c:6f:d1:e0:ba:
c4:40:13:52:db:6a:45:8f:29:57:28:2c:38:bc:ba:47:01:52:
50:e7:74:ab:69:69:c4:35:fe:db:bf:39:47:5c:54:b0:6d:46:
5d:94:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net