Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/QFnY02YmfQGJ4URcdKc-UJCZjYo.roa
File: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (raw, json)
Hash identifier: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=
Subject key identifier: 40:59:D8:D3:66:26:7D:01:89:E1:44:5C:74:A7:3E:50:90:99:8D:8A
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019421B1773F15F1B0B2D318C6335E4DED6A
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/QFnY02YmfQGJ4URcdKc-UJCZjYo.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47610
IP address blocks: 134.61.0.0/16 maxlen: 16
134.130.0.0/16 maxlen: 16
137.226.0.0/16 maxlen: 16
192.35.229.0/24 maxlen: 24
194.35.108.0/22 maxlen: 22
2a00:8a60::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:77:3f:15:f1:b0:b2:d3:18:c6:33:5e:4d:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4059d8d366267d0189e1445c74a73e5090998d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:bd:7d:22:f6:b6:8e:67:ba:fb:fd:7d:df:
72:18:9b:79:6a:4f:fb:97:0c:a8:42:7d:c9:f5:e8:
51:0f:19:6b:f3:18:c0:be:fe:b3:83:06:59:ab:b9:
b2:dd:c0:da:71:a4:68:d4:e7:a5:12:2f:b3:78:1c:
e6:85:f6:6d:7d:0a:42:8d:de:63:14:fc:a0:ea:b3:
ba:c3:e5:b8:d0:e3:d4:53:e0:68:3f:6d:0c:8b:25:
56:a2:7f:e6:80:65:11:ae:bb:46:64:26:64:9e:6e:
c4:2f:0f:0b:79:2b:88:df:ec:48:35:70:67:23:14:
e5:6f:ff:3b:38:8b:73:b8:0e:c6:07:44:00:7d:09:
2b:9f:df:2f:a1:af:57:d2:59:70:64:9f:d2:86:a2:
d9:d9:00:ae:65:12:07:70:0d:ee:f7:0b:3e:89:e7:
e7:49:af:8d:56:15:4f:f4:25:90:c7:43:c0:90:f0:
54:73:0f:46:5a:3c:4b:62:d9:ca:95:bd:79:90:62:
e2:7b:64:c7:6d:0d:33:8d:76:b0:6c:d2:4c:4e:e4:
6a:72:cd:ac:91:24:f2:16:87:85:7a:dd:0b:77:f5:
a2:77:a8:ff:db:db:30:fc:42:22:d1:b0:f6:93:96:
03:8c:61:aa:7b:cd:db:b0:2c:ff:59:82:71:b9:11:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:59:D8:D3:66:26:7D:01:89:E1:44:5C:74:A7:3E:50:90:99:8D:8A
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/QFnY02YmfQGJ4URcdKc-UJCZjYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.61.0.0/16
134.130.0.0/16
137.226.0.0/16
192.35.229.0/24
194.35.108.0/22
IPv6:
2a00:8a60::/29
Signature Algorithm: sha256WithRSAEncryption
0d:10:5e:c4:b9:66:33:f8:63:c7:47:8a:0c:7d:4c:1f:93:a2:
80:95:e4:1f:9e:ad:ff:04:6e:1d:a9:d1:a6:5a:58:a5:12:35:
17:72:0f:14:7e:c3:0e:7b:b2:f5:b3:f2:37:75:f3:21:d2:6e:
82:80:70:67:3a:c4:01:f2:58:d1:db:5f:e2:28:eb:02:ca:e8:
c5:90:84:3a:4f:b7:f3:1c:ae:21:94:5c:ae:2e:e5:04:79:ff:
1c:5b:e1:4a:28:d5:31:22:d3:6c:77:85:b2:36:a6:be:e5:a2:
cf:7d:c4:70:16:da:7e:d3:1f:b3:da:5e:c3:5f:64:ed:af:dc:
2b:ba:2f:4a:25:0e:6e:ba:8d:81:5e:27:46:76:eb:8f:7a:d1:
79:7d:ef:b2:32:85:e2:58:92:9e:c8:63:31:e7:21:a5:85:1d:
c7:c2:2f:d9:ce:2f:7c:e1:d7:c2:df:67:9d:0c:d4:4e:df:6c:
e7:9b:56:c1:8b:ce:59:d4:29:a4:08:a7:18:bd:30:a6:85:79:
c8:e4:af:e3:d9:5a:9b:02:3a:d1:e2:17:b2:41:29:69:b7:95:
be:89:14:3b:df:0d:72:80:f2:f1:29:ff:2c:51:c8:a4:67:2d:
ec:5f:fb:7d:85:4a:11:ef:b0:73:fd:1c:d9:4c:b7:4a:ba:64:
76:40:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net