Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/FHgmJVzT42MAfIzapVC9e2NA_iY.roa
File: FHgmJVzT42MAfIzapVC9e2NA_iY.roa (raw, json)
Hash identifier: ZFuf9CA7YgoKL9WKUlfIU4bCNAlr9XJKo81l94myN/w=
Subject key identifier: 14:78:26:25:5C:D3:E3:63:00:7C:8C:DA:A5:50:BD:7B:63:40:FE:26
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 019427B5F3EFCC8467A5726AEFFFAE450766
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/FHgmJVzT42MAfIzapVC9e2NA_iY.roa
Signing time: Thu 02 Jan 2025 15:50:23 +0000
ROA not before: Thu 02 Jan 2025 15:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198491
IP address blocks: 195.85.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f3:ef:cc:84:67:a5:72:6a:ef:ff:ae:45:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Jan 2 15:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=147826255cd3e363007c8cdaa550bd7b6340fe26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:31:00:78:aa:b0:e8:00:aa:a9:38:6a:4a:
8f:82:8d:07:0f:c0:6b:fb:a3:04:f8:3f:a8:34:31:
45:39:33:be:9f:4b:2a:12:8f:f3:ad:a4:f3:f1:6e:
92:89:ec:de:8c:35:26:42:3e:a1:81:16:20:d5:17:
01:7a:a9:a0:bf:9e:b9:7a:22:c7:21:63:bf:db:19:
7c:27:b2:44:c3:76:4c:a8:79:d2:c0:cd:91:f9:72:
6d:aa:fa:41:73:57:fe:cb:0c:6b:44:28:5d:3d:c4:
d4:8a:55:2e:95:7b:f0:39:21:b9:61:43:db:f0:b8:
c3:d0:23:60:0c:3d:e3:11:2d:51:55:c0:7b:f6:0a:
fb:37:fb:ea:65:73:6e:89:b1:34:81:95:08:73:c6:
27:cd:57:61:6e:9c:bc:a3:83:8f:b1:4d:c0:e9:20:
65:35:8b:6c:d5:01:76:c3:c5:2b:d2:ce:0e:67:2f:
18:25:59:83:1e:a0:87:19:52:ab:97:31:90:2d:fd:
d7:0c:28:41:b2:f8:6f:27:2e:82:55:ef:28:cf:9e:
34:6a:36:06:40:ae:60:fd:ae:f9:e2:87:59:13:a1:
a0:bc:f3:fc:53:99:ea:19:a6:1e:62:66:45:8f:a8:
ca:10:de:f1:ac:3a:7f:f4:ad:54:14:d8:45:01:11:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:26:25:5C:D3:E3:63:00:7C:8C:DA:A5:50:BD:7B:63:40:FE:26
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/FHgmJVzT42MAfIzapVC9e2NA_iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.208.0/24
Signature Algorithm: sha256WithRSAEncryption
96:52:0d:59:d6:9e:14:e2:4d:20:cf:da:8a:6b:c1:1a:31:7a:
a9:cb:5b:3b:d6:2f:7b:89:2c:c5:5d:81:b1:c9:44:18:90:e7:
71:6f:08:ba:78:b2:2c:f3:0c:38:84:68:c0:7f:c8:95:56:0f:
37:2b:36:96:14:7f:a6:7e:60:ba:fe:15:23:d1:1e:a6:5e:5b:
ed:14:91:47:c6:d7:c6:ce:ea:ef:28:43:6b:50:f4:e6:0f:b5:
d0:9d:08:a3:8b:04:9e:01:08:3b:ab:af:24:0e:b3:79:06:f5:
06:54:d0:64:13:4c:5e:49:f0:40:28:13:ff:09:0f:d1:c7:f8:
0e:c3:83:c7:6f:5f:c9:bb:61:ad:ce:28:65:34:83:6e:c5:98:
7d:67:14:6f:b2:34:b1:d9:7a:50:28:a4:39:64:91:9f:d8:f9:
ee:a8:d7:b5:42:97:68:36:08:20:06:f0:6f:e6:93:14:e5:42:
6f:1c:27:be:3c:c2:db:2c:3d:29:eb:2b:2e:eb:8c:6f:69:35:
1f:9d:e4:61:3f:61:f7:e6:51:97:36:eb:31:8d:07:19:ea:e5:
cb:9f:68:c8:da:24:25:21:f6:6e:0c:c8:d3:62:16:9e:01:63:
82:e8:79:b7:95:0f:8d:64:a8:5a:1c:06:7a:28:a9:3f:95:aa:
51:45:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net