Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/FpKpXAvwQ5eTmnpDjAybF20U0r8.roa
File: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (raw, json)
Hash identifier: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=
Subject key identifier: 16:92:A9:5C:0B:F0:43:97:93:9A:7A:43:8C:0C:9B:17:6D:14:D2:BF
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01941FFA858EE271D0BB92869ABA97BC8F7E
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/FpKpXAvwQ5eTmnpDjAybF20U0r8.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29549
IP address blocks: 195.177.206.0/24 maxlen: 24
195.177.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:8e:e2:71:d0:bb:92:86:9a:ba:97:bc:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1692a95c0bf04397939a7a438c0c9b176d14d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:bd:23:5f:62:ad:64:3e:c7:c4:fe:bf:7e:
ca:5e:69:a1:ec:43:08:95:06:a4:6d:1c:c7:47:1c:
0a:ca:d0:9a:87:4f:35:71:4e:a7:16:11:9b:c6:54:
b4:65:c1:8e:7e:43:63:81:1d:14:1f:49:aa:fb:7b:
6c:8f:c4:53:29:cb:2b:94:e9:be:b6:b1:b3:99:75:
d5:80:10:59:28:1b:79:63:99:04:b5:8f:cc:01:20:
6b:7a:36:f5:f1:fe:c2:61:d9:29:03:5b:a7:02:72:
df:8e:64:9b:34:20:f7:7b:c9:76:6e:f0:35:a9:96:
1a:51:f1:cf:44:5d:aa:43:1b:7e:d3:2b:83:09:9e:
c1:0d:a0:23:00:90:3f:8c:8b:96:6d:5b:41:89:cc:
52:b4:3c:fa:ee:d3:3d:35:99:93:a3:94:14:f0:f0:
e0:0c:42:b0:14:e8:34:97:fa:2f:e9:a6:ba:22:54:
1e:2f:7f:a2:db:40:6f:c8:cd:47:86:5c:17:a3:e2:
58:c6:60:b1:45:cc:0f:95:fe:1e:0a:ad:23:b7:57:
39:59:05:88:74:e8:ac:bf:d8:69:12:50:d6:88:7f:
39:14:46:86:53:1d:a8:ab:7f:8a:1e:f1:f4:e2:da:
3d:a8:4d:99:ba:b2:8b:f4:11:eb:cd:7b:ef:91:19:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:A9:5C:0B:F0:43:97:93:9A:7A:43:8C:0C:9B:17:6D:14:D2:BF
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/FpKpXAvwQ5eTmnpDjAybF20U0r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.206.0/23
Signature Algorithm: sha256WithRSAEncryption
e6:38:86:cf:d7:6c:6a:e2:0b:31:99:92:b8:81:34:5d:89:cc:
18:af:b4:2e:2e:4b:4a:2a:68:10:27:0b:70:4c:b3:23:11:a9:
0d:49:ec:51:a3:97:a8:0b:ba:ca:e6:f3:ac:eb:3e:37:0c:f3:
d7:da:d5:ce:67:c3:9e:1c:b2:dc:73:34:1b:50:e3:45:14:40:
80:08:77:c7:5c:65:7f:44:06:5b:fb:eb:83:e7:d4:b9:0f:af:
4c:33:a0:f2:80:07:d0:b4:fb:9d:c1:9f:99:f4:5c:b2:6e:8a:
5c:f0:12:d2:2e:b5:3f:d3:1f:12:5e:2c:96:71:a2:34:c0:80:
90:ef:f2:e3:6c:55:2f:89:9e:92:e3:b3:60:dc:e0:a6:a6:21:
03:4c:dc:f9:72:e7:87:46:a6:6f:62:ae:92:e7:87:9b:ac:fa:
2e:3f:11:66:c9:67:6f:ae:67:43:fc:15:1e:82:84:76:25:52:
8d:4b:b2:91:4c:6d:c1:b6:62:b1:99:81:c0:14:e9:49:63:91:
10:15:d5:c1:35:e3:a5:2e:f6:2b:fd:66:f8:d1:35:4c:47:fd:
36:03:08:28:1c:dd:64:87:cb:85:b2:c5:fc:3a:ee:d4:f5:61:
f8:b3:89:28:5a:af:8e:22:2d:a0:b5:65:37:b5:0a:e2:f4:8c:
96:f0:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net