Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/_TdfyDspFjo8HcBVAH4tKaY1ryc.roa
File: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (raw, json)
Hash identifier: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=
Subject key identifier: FD:37:5F:C8:3B:29:16:3A:3C:1D:C0:55:00:7E:2D:29:A6:35:AF:27
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 019594D9B21CB1A5C6E3ED4FDE75D7C834C7
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/_TdfyDspFjo8HcBVAH4tKaY1ryc.roa
Signing time: Fri 14 Mar 2025 13:30:49 +0000
ROA not before: Fri 14 Mar 2025 13:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204058
IP address blocks: 185.254.248.0/22 maxlen: 23
193.3.242.0/24 maxlen: 24
2a0c:b3c0::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:d9:b2:1c:b1:a5:c6:e3:ed:4f:de:75:d7:c8:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Mar 14 13:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd375fc83b29163a3c1dc055007e2d29a635af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:f2:03:a4:cd:9e:d3:12:8c:a1:1c:44:0f:
e4:54:a3:34:07:e9:45:1a:58:ee:f2:58:eb:59:c8:
ae:aa:bb:51:20:9a:82:65:a2:5b:99:c1:6e:81:c4:
a5:07:d8:46:fe:49:f3:f7:ad:42:59:f8:66:d2:bd:
16:7c:4d:b2:7d:ba:d9:a2:f1:28:1a:d3:c9:d4:13:
4e:fd:95:89:97:21:55:bf:71:a4:f6:a9:24:7c:78:
b8:f9:75:09:41:be:62:8d:04:73:38:53:ae:92:35:
c8:78:65:e3:15:fd:55:97:cb:7c:c0:3f:2b:94:76:
ad:f7:bd:38:61:45:af:25:ca:50:98:5e:80:07:1c:
cb:1e:8a:53:ee:2a:d0:af:4a:53:af:48:74:a2:30:
9d:b7:79:6b:48:22:c0:4b:d5:2d:5d:02:1e:68:a2:
f4:32:be:53:69:19:59:63:55:39:55:02:e6:dc:e0:
82:c3:0e:70:81:10:24:7c:c4:53:5e:8d:47:e3:92:
5c:25:9e:e2:75:bb:78:78:7a:1b:b3:7c:00:d9:66:
bb:5d:12:5f:7c:db:49:1c:db:e6:e0:09:d5:c8:29:
82:97:c2:c4:8f:65:f9:ff:19:38:66:5d:5e:ad:9a:
39:bc:7e:c8:7f:21:34:ad:45:4b:c0:48:f2:a6:cd:
e6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:5F:C8:3B:29:16:3A:3C:1D:C0:55:00:7E:2D:29:A6:35:AF:27
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/_TdfyDspFjo8HcBVAH4tKaY1ryc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.248.0/22
193.3.242.0/24
IPv6:
2a0c:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
76:80:53:c2:af:e4:e9:3d:ee:10:43:5d:5b:ef:dd:88:68:6f:
95:c7:cd:a4:76:97:7c:b5:e5:a2:8c:44:c2:3a:4f:f2:eb:95:
cb:51:cc:db:eb:bf:09:97:79:ba:d1:db:e3:9c:9b:e7:a9:7a:
96:80:ab:55:01:e7:36:71:e0:7c:85:0c:7d:03:be:0d:ca:bc:
89:e4:d6:39:9c:19:97:96:2d:1d:2c:76:a3:71:2e:fb:69:52:
17:c8:93:f3:40:06:76:4d:03:a6:f8:b6:70:26:54:97:3a:09:
5a:28:32:86:b4:f2:90:00:0e:f8:49:25:fa:ea:18:d1:ad:c1:
4c:ce:c0:42:9c:3a:c8:7a:3a:88:51:c4:ab:a0:0d:c3:a9:3d:
35:4e:1a:22:d1:b1:a9:4d:4d:23:d0:da:dc:1b:d0:d9:d2:ce:
50:8c:42:19:af:af:d5:19:e2:94:b7:dc:09:91:88:2b:50:42:
e8:fb:48:d4:b0:19:1e:42:a3:eb:1b:6c:18:72:66:e7:47:96:
be:82:e8:e7:16:2b:f2:2f:13:6c:06:00:f7:d8:f9:a5:ea:f7:
b0:fb:72:8f:84:0a:96:ce:44:f5:7d:b7:4d:34:c7:79:96:8d:
db:17:dd:86:f6:b8:e0:5e:10:2e:47:2c:46:88:ec:2f:b0:a7:
0e:90:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net