Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/FE0N8Kmo4OQXkTM86cmuHztqlpc.roa
File: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (raw, json)
Hash identifier: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=
Subject key identifier: 14:4D:0D:F0:A9:A8:E0:E4:17:91:33:3C:E9:C9:AE:1F:3B:6A:96:97
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 01942444D9DA22344EFB6908824437661AC6
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/FE0N8Kmo4OQXkTM86cmuHztqlpc.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41061
IP address blocks: 185.222.180.0/22 maxlen: 22
185.222.180.0/23 maxlen: 23
185.222.180.0/24 maxlen: 24
185.222.181.0/24 maxlen: 24
185.222.182.0/23 maxlen: 23
185.222.182.0/24 maxlen: 24
185.222.183.0/24 maxlen: 24
2a0c:9800::/29 maxlen: 29
2a0c:9800:9800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d9:da:22:34:4e:fb:69:08:82:44:37:66:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144d0df0a9a8e0e41791333ce9c9ae1f3b6a9697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:4f:e3:63:54:b5:b7:92:d5:5a:ce:69:fe:
df:49:b0:b1:67:91:ac:b7:27:f6:a5:1f:03:84:6a:
59:9a:e8:25:6e:61:67:07:80:c6:ed:71:03:65:05:
d5:d6:99:29:1f:e3:eb:74:ac:00:cd:52:a1:b7:68:
96:c9:f1:a1:3d:a7:5e:92:1c:a6:2d:60:ea:96:a6:
e9:26:9d:7b:97:a2:54:e4:dc:40:9d:ec:a2:14:66:
fd:84:26:19:56:9b:8d:d4:fa:8b:de:b2:52:80:50:
cc:f8:05:a8:4e:55:c3:6b:f6:e2:80:69:4f:0c:09:
86:55:03:24:ea:a5:4b:5a:5c:c5:a9:f1:89:89:41:
b9:40:6c:6c:fe:ff:03:12:7c:69:63:02:9e:ba:09:
51:e9:68:5c:4b:42:c2:14:50:b6:6a:90:e1:40:b2:
b7:ef:e2:be:a7:a1:c5:21:5f:17:00:04:cc:b3:3c:
de:ad:17:53:65:e8:82:cc:3b:2b:75:9f:81:87:8f:
40:59:1f:17:94:50:c7:74:f9:31:12:17:bc:45:10:
f7:59:12:0a:5c:95:12:a0:00:19:fa:d1:52:d6:6b:
36:17:e1:c8:a6:aa:0f:53:94:b5:b2:9d:5a:c2:f7:
bd:8d:b7:24:b2:19:b1:d9:22:f7:e3:ac:90:1b:2c:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:0D:F0:A9:A8:E0:E4:17:91:33:3C:E9:C9:AE:1F:3B:6A:96:97
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/FE0N8Kmo4OQXkTM86cmuHztqlpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.180.0/22
IPv6:
2a0c:9800::/29
Signature Algorithm: sha256WithRSAEncryption
21:e4:a7:ec:37:08:38:ba:57:75:25:13:3a:57:f9:53:4f:c7:
38:0e:7b:e7:79:dc:5f:25:cf:b8:00:07:35:0b:80:08:53:52:
25:42:06:b4:ac:9f:66:5b:03:b1:53:7c:6a:76:ff:b5:7c:37:
2b:4b:72:a4:86:b8:c3:82:17:1e:de:62:36:83:3b:33:73:3c:
16:3a:28:b2:c9:6d:59:c7:85:ed:3a:07:c6:64:84:a9:a4:0d:
51:ea:4a:d7:4d:84:63:9a:82:e1:c7:d0:b1:6f:4d:c0:8f:42:
69:aa:c3:8b:af:1b:a4:7e:6d:e9:f5:6a:24:d1:8a:2e:59:83:
c5:fe:58:dc:93:68:2f:d0:28:ea:12:97:1b:51:95:bb:5d:dd:
4e:9c:4d:88:6f:aa:d0:cd:2d:50:0b:80:77:8b:79:e7:31:91:
94:e7:09:6c:bd:a7:a7:15:5b:fd:e5:17:0c:98:3f:33:2a:26:
f7:a6:fb:1f:5c:53:91:f8:ca:7d:02:8c:a9:67:ef:98:4a:1f:
3b:43:e9:40:97:48:98:73:74:48:8b:29:80:db:12:35:40:9e:
6d:f0:67:64:83:04:60:4b:18:8a:cd:ab:4f:3b:f6:4a:9c:04:
ba:41:70:fd:64:e2:a1:bd:58:80:49:9f:98:8a:cb:b1:fa:42:
16:5f:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net