Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/f0fm_m6mqyncGFPg2zPkibsoBcI.roa
File: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (raw, json)
Hash identifier: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=
Subject key identifier: 7F:47:E6:FE:6E:A6:AB:29:DC:18:53:E0:DB:33:E4:89:BB:28:05:C2
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 0194266BEAA121531BE93F3139C44A0C9827
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/f0fm_m6mqyncGFPg2zPkibsoBcI.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210412
IP address blocks: 45.150.57.0/24 maxlen: 24
89.106.203.0/24 maxlen: 24
2a12:b380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ea:a1:21:53:1b:e9:3f:31:39:c4:4a:0c:98:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f47e6fe6ea6ab29dc1853e0db33e489bb2805c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:65:3a:ed:80:71:50:5b:41:1c:e0:4f:d1:
bc:90:df:fa:30:1b:9e:58:ee:ab:3a:dc:38:3b:42:
d5:0b:c4:fe:73:3b:d0:7f:de:ca:6c:20:5e:14:bd:
31:08:ae:9e:af:c6:2a:f0:6f:c6:56:03:35:3a:09:
07:f7:0c:a6:88:54:4a:c0:d3:6f:2e:57:99:d7:6b:
9d:90:6d:17:dc:4d:82:6f:62:99:25:13:fb:d8:56:
55:f4:ba:7b:75:5d:5c:ae:0d:29:87:f3:84:c9:76:
39:86:6c:21:92:6e:78:5f:37:75:dd:ea:35:71:cb:
0c:0e:47:99:55:7b:cf:50:09:b0:fe:c2:d8:69:d7:
f0:19:3f:c8:e8:ac:d6:d1:6b:bd:d2:dc:1e:4e:d2:
1c:50:dd:0f:8d:23:0d:ab:d3:89:4f:61:1e:af:08:
c2:85:15:ae:60:fd:76:8b:5b:05:4a:d5:f1:e9:33:
c4:a0:57:06:9b:7f:a9:fb:1e:13:8c:5d:38:d0:99:
eb:84:4b:66:98:19:44:2e:f2:f9:ac:00:82:c8:f2:
71:a7:f2:f3:68:eb:0d:a5:58:92:b9:4c:f9:66:5a:
1b:79:1a:11:47:1d:ba:58:f0:3f:63:5a:3f:59:62:
78:d9:9b:5c:80:1c:e6:b2:2c:a3:98:16:e1:a2:52:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:E6:FE:6E:A6:AB:29:DC:18:53:E0:DB:33:E4:89:BB:28:05:C2
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/f0fm_m6mqyncGFPg2zPkibsoBcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.57.0/24
89.106.203.0/24
IPv6:
2a12:b380::/29
Signature Algorithm: sha256WithRSAEncryption
0b:29:b9:6f:95:fc:80:cb:bf:cb:7d:a3:35:ed:c9:d0:94:8f:
3b:b1:51:86:7b:27:12:03:1e:de:48:c9:df:90:f4:eb:15:79:
57:0a:17:77:a7:cb:1a:35:fb:d5:ab:b8:0b:80:41:1f:c2:38:
52:69:96:75:39:b2:b1:b2:3a:a8:fd:7c:6a:07:dd:c8:ad:11:
58:ef:4a:82:90:68:3e:d9:08:42:9e:37:17:3f:19:87:ef:5c:
11:76:dd:db:5e:fa:9c:66:63:5b:3e:a9:1b:70:eb:54:12:22:
13:98:68:bd:98:35:cd:bd:9b:2d:5f:13:fd:ab:ba:50:03:dc:
5f:c5:ac:6a:42:da:52:1a:2c:9d:a0:ef:4a:b4:27:16:15:1e:
ec:ab:28:76:1d:17:ec:f1:88:a4:d7:36:88:08:3f:5b:1b:0f:
5e:be:fd:db:bf:93:68:bf:6e:e1:1d:5b:7d:43:41:45:10:6f:
bf:ca:82:75:c8:10:95:54:93:e7:7f:0e:57:3d:82:5c:80:2b:
40:42:70:d1:ef:50:6a:8f:32:c7:27:0e:64:9c:8d:c0:7d:61:
65:8f:b7:4a:1a:53:43:31:1d:3b:c6:39:e8:45:36:73:a2:f6:
ab:57:2d:1c:d6:cf:26:9c:5f:27:d4:96:86:f6:65:80:d1:8b:
85:6f:c0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net