Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/tFuBusypscfP0op8t0fbvhVLTp0.roa
File: tFuBusypscfP0op8t0fbvhVLTp0.roa (raw, json)
Hash identifier: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=
Subject key identifier: B4:5B:81:BA:CC:A9:B1:C7:CF:D2:8A:7C:B7:47:DB:BE:15:4B:4E:9D
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 0194655E6077BA70FBDD0B435B271DAF51A8
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/tFuBusypscfP0op8t0fbvhVLTp0.roa
Signing time: Tue 14 Jan 2025 15:11:11 +0000
ROA not before: Tue 14 Jan 2025 15:11:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214673
IP address blocks: 92.62.118.0/24 maxlen: 24
193.143.69.0/24 maxlen: 24
2a11:4880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:5e:60:77:ba:70:fb:dd:0b:43:5b:27:1d:af:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jan 14 15:11:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b45b81bacca9b1c7cfd28a7cb747dbbe154b4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:63:39:92:a8:bb:7d:51:72:b6:d6:6e:bb:
29:2f:15:82:f0:7a:44:65:52:0c:e9:bd:54:7b:9c:
e0:b9:f7:14:a8:c2:a8:79:24:6d:61:f9:2a:d6:96:
69:3b:4a:f1:0e:a7:b4:a0:c7:7c:df:0d:98:a9:f5:
02:73:8f:e3:28:b1:db:92:d0:3f:16:88:00:e0:79:
68:17:85:07:d0:02:57:f7:2a:42:df:65:72:85:0d:
c6:94:c5:b3:cc:5f:38:15:fe:e1:90:b4:46:69:c6:
fc:f9:83:64:b4:df:6b:e8:bc:dc:3f:6c:ae:2a:b4:
c3:73:77:3e:e7:50:ad:e8:57:88:54:3d:79:e8:79:
f9:be:79:63:a3:3b:1c:35:51:77:3f:36:97:7d:99:
9c:33:0d:4b:c6:f4:d1:69:1c:f6:ee:b2:66:45:12:
94:e2:4c:39:5e:df:b7:fb:b5:f3:cf:fc:a9:40:c9:
56:23:e9:fe:16:c3:71:13:93:32:3e:95:74:2b:b4:
92:57:f0:e4:e2:61:19:6a:fc:0f:90:c8:8b:42:74:
5d:2f:45:64:21:eb:af:ec:4a:66:7c:c6:f3:42:e9:
72:53:8b:2f:a7:bf:e0:b7:cb:f5:37:fb:d8:a5:15:
d2:a6:ea:c2:2d:58:e9:1c:c8:62:a4:98:ed:33:ec:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:81:BA:CC:A9:B1:C7:CF:D2:8A:7C:B7:47:DB:BE:15:4B:4E:9D
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/tFuBusypscfP0op8t0fbvhVLTp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.118.0/24
193.143.69.0/24
IPv6:
2a11:4880::/32
Signature Algorithm: sha256WithRSAEncryption
a9:ae:31:73:b0:79:7b:95:c2:5f:8e:b5:af:15:f9:74:13:ca:
84:85:9e:e8:6d:a6:9a:6c:90:f5:b4:35:22:a5:48:2e:e3:05:
5f:b5:80:b6:3c:8a:be:b9:0c:9f:9e:c7:eb:f1:53:7d:7a:c2:
78:5d:03:e6:9b:96:17:97:a8:41:db:dc:98:95:49:b3:2e:cc:
ec:0f:cd:71:3d:f4:ec:fb:01:3e:6c:7a:4c:de:f2:93:a5:ec:
5c:2e:ad:a4:ec:c5:c7:c7:3c:7c:5a:0b:6c:b7:f4:21:b1:c5:
c9:d2:67:b0:fa:60:15:44:d1:20:e5:18:d3:33:0f:06:89:bf:
b4:65:e6:ad:0a:6c:39:67:87:3a:67:c9:9e:41:5d:a5:c9:13:
53:a8:ad:c7:e6:34:b8:f2:36:74:1a:61:1f:47:42:e5:d5:94:
d7:8c:a7:bf:33:3b:66:13:a6:33:8e:9d:cd:da:9c:df:8b:b0:
3e:b9:64:88:9d:7f:31:35:6a:f9:38:da:c3:89:87:d8:80:a6:
76:17:0d:d1:4d:70:94:05:fb:1e:23:74:80:a6:51:1a:92:46:
57:79:d6:76:04:61:08:ea:6e:70:90:67:00:75:79:7a:63:90:
48:b8:6c:83:b5:bb:97:63:08:2c:87:e9:ea:e8:4e:a5:7e:31:
29:7a:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net