Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_L_G56aRVg6nD-NomNA5jLK-OFc.roa
File: _L_G56aRVg6nD-NomNA5jLK-OFc.roa (raw, json)
Hash identifier: pqPipm6sSmIrz6wz+oGLMWSdr2XRQ9UIYUQfzfKl1sc=
Subject key identifier: FC:BF:C6:E7:A6:91:56:0E:A7:0F:E3:68:98:D0:39:8C:B2:BE:38:57
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0194266AEB83C3F24540E39AA9A67EEC97B5
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_L_G56aRVg6nD-NomNA5jLK-OFc.roa
Signing time: Thu 02 Jan 2025 09:48:48 +0000
ROA not before: Thu 02 Jan 2025 09:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210973
IP address blocks: 212.236.9.0/24 maxlen: 24
212.236.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:eb:83:c3:f2:45:40:e3:9a:a9:a6:7e:ec:97:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 2 09:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcbfc6e7a691560ea70fe36898d0398cb2be3857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:e7:7f:b0:2e:73:2b:99:c9:05:da:32:48:
b8:c1:5d:89:38:08:11:b5:73:b5:18:de:97:89:7f:
3f:00:70:8c:42:97:fe:db:5a:dd:01:81:af:a1:29:
d7:e9:a8:9f:91:e7:38:2e:6e:88:2a:ea:7f:b7:bb:
16:bc:13:e4:77:8b:08:73:0e:51:f5:21:9e:26:9d:
27:6d:a0:7d:bf:56:ac:ae:3a:15:3e:1a:6a:31:62:
40:8f:d4:b9:4c:a3:18:ac:d5:b7:a6:79:cf:8c:cc:
a8:0f:04:de:32:ab:3a:d5:b6:ee:d1:93:37:92:75:
78:4a:69:6b:4a:08:08:ec:4f:d9:e5:19:63:63:11:
7b:db:35:03:b3:94:c8:dc:30:82:d4:b1:ab:3f:57:
ed:60:85:ec:85:cd:95:fb:05:ad:98:07:bc:dd:8f:
df:f2:66:19:a5:54:f0:cf:af:57:2d:1a:91:4b:80:
60:1e:09:42:eb:0b:b6:c9:e2:ae:cf:9d:2d:f2:ff:
4d:ff:f9:f3:ab:be:6c:41:85:e0:76:73:84:05:2f:
e2:60:5f:e0:30:8f:f4:0d:d2:66:85:36:4a:0d:bb:
e4:d7:b7:cb:dd:8e:01:1e:b6:fc:cd:2f:38:82:b7:
a2:dd:62:ea:7d:eb:29:60:54:6d:16:03:f3:c1:3c:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:C6:E7:A6:91:56:0E:A7:0F:E3:68:98:D0:39:8C:B2:BE:38:57
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_L_G56aRVg6nD-NomNA5jLK-OFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.236.9.0-212.236.10.255
Signature Algorithm: sha256WithRSAEncryption
14:40:49:5d:92:68:61:2c:7c:e5:e3:1f:5e:ab:e6:b9:c7:16:
f4:2b:c1:90:d9:cf:d3:6b:05:92:b4:07:eb:09:63:9d:ad:6b:
02:81:70:59:22:47:b4:8b:50:00:54:20:b0:cf:7f:fd:f0:a0:
db:16:0e:4b:53:5b:55:ae:a6:93:77:49:49:41:db:0b:29:d8:
dc:5c:d0:1e:29:bf:4c:29:aa:be:0a:b9:87:13:59:b5:a8:b7:
83:23:48:1b:42:31:a6:98:14:bb:ee:01:9e:72:2d:77:68:7e:
21:37:58:e4:c6:25:0b:6d:b7:48:1f:52:02:47:22:8e:13:65:
8b:b4:55:4c:95:2a:cc:5f:9f:81:98:c9:a8:b5:94:c2:f3:75:
9e:da:2e:56:d2:71:aa:0e:ee:4f:58:f9:e5:56:d6:8b:9d:87:
6d:36:1e:8b:0b:a6:15:a2:2c:59:7d:89:70:28:d6:71:71:9b:
3e:c3:b1:a9:f7:cb:84:4c:6e:fb:01:29:e5:08:60:08:b5:c2:
21:be:05:bc:57:e8:33:4f:4e:cf:30:f4:cd:d3:a5:1a:40:95:
4b:4c:c7:83:7c:76:32:43:ce:8e:22:3f:3c:98:80:7b:ef:1e:
06:66:c9:94:c3:74:25:02:1a:fb:a0:2a:36:ad:48:5a:27:c2:
11:04:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net