Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/FpAB9cGzamoAhWywpgXZOn6yYZU.roa
File: FpAB9cGzamoAhWywpgXZOn6yYZU.roa (raw, json)
Hash identifier: JeApP83qb+O/+snqG+vdGyDdB6Lk9H1Qm5g02fPiOKo=
Subject key identifier: 16:90:01:F5:C1:B3:6A:6A:00:85:6C:B0:A6:05:D9:3A:7E:B2:61:95
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA0E9BFD04F7333B8FF7AD9FD56DD
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/FpAB9cGzamoAhWywpgXZOn6yYZU.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209835
IP address blocks: 109.167.12.0/24 maxlen: 24
176.56.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a0:e9:bf:d0:4f:73:33:b8:ff:7a:d9:fd:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=169001f5c1b36a6a00856cb0a605d93a7eb26195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:4f:f8:a7:70:63:e5:06:e6:44:33:75:4c:
e5:20:5c:57:fd:f4:9b:4e:bd:74:41:5d:22:0a:c0:
00:66:77:7f:63:cb:5c:4a:5f:f0:cc:56:5e:79:b5:
2f:6d:73:35:e4:1e:ca:75:2e:70:45:7a:b3:88:fa:
c0:d5:9c:d5:fa:03:7a:5a:23:a1:70:06:b5:51:26:
97:d1:26:61:7f:d2:98:eb:83:ff:f1:29:18:49:8a:
52:89:7f:84:9a:de:1d:57:fc:88:51:24:94:a7:d5:
cd:78:d1:9a:7e:11:60:f1:0c:e0:b4:1e:3c:43:64:
8f:27:68:11:d8:e4:6b:a2:cf:0f:52:74:bd:e6:62:
11:e7:c4:e9:c9:6b:41:aa:68:4b:00:26:b1:7b:0a:
6d:cc:fc:7e:ab:18:dc:52:c8:36:59:d8:6a:29:06:
b9:bb:ad:a0:13:d6:a8:8f:12:f8:6a:ae:81:2d:4f:
50:5f:93:fe:fb:96:45:8e:67:d0:a4:22:b0:7f:08:
53:a2:5e:e7:38:7a:b0:6e:8f:55:03:77:64:e7:bc:
aa:12:a8:93:fb:12:f7:19:38:f8:5d:25:7f:8f:84:
c8:b2:8c:ca:38:03:67:39:e7:af:f8:ac:e1:59:4b:
a6:8b:d3:a7:de:b9:82:4f:65:73:cb:2e:20:d2:17:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:01:F5:C1:B3:6A:6A:00:85:6C:B0:A6:05:D9:3A:7E:B2:61:95
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/FpAB9cGzamoAhWywpgXZOn6yYZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.12.0/24
176.56.119.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1e:ac:86:28:35:12:11:21:95:20:65:eb:e3:31:b5:83:17:
b9:b3:29:2d:d0:2a:97:01:27:c8:f9:f9:7c:8a:ba:95:1d:e1:
0c:19:69:18:48:d3:0f:e4:d9:03:57:e9:64:e5:c3:94:57:e0:
27:fe:df:78:a0:03:95:ba:32:40:1d:1e:a0:0d:cf:71:4d:06:
1f:22:15:36:e5:40:66:29:f7:cd:64:35:86:0e:ec:94:b6:7b:
50:c0:94:4a:cc:48:3c:57:29:89:b1:d8:c2:87:57:c7:63:35:
60:88:59:2f:0a:70:67:e7:67:e4:83:3d:13:6e:0c:27:be:c8:
1d:5e:94:8f:9c:a7:7e:4b:f2:02:d7:8a:28:84:16:77:14:59:
75:8c:02:6e:27:3e:0e:86:31:5a:42:99:67:ee:ec:4f:3d:b8:
00:a1:1b:50:7b:64:a7:e8:59:0a:1b:32:f7:0c:9b:ba:3e:11:
04:e6:32:c9:95:a6:b9:b3:7d:f9:ca:f1:78:b9:f7:e0:54:61:
e4:78:c2:1f:b5:38:b9:48:f7:26:a6:7d:59:69:ed:89:bc:04:
7a:66:21:23:8b:13:15:05:53:cc:6c:89:2a:f1:8c:11:1e:5c:
61:a6:7d:e1:73:f8:27:a6:62:b1:4b:48:20:d4:a7:ca:ad:c6:
88:b6:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net