Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa
File: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (raw, json)
Hash identifier: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=
Subject key identifier: A8:50:41:29:2B:2D:56:E6:25:BE:0D:6D:09:4F:48:45:D1:BC:FC:A4
Certificate issuer: /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial: 01942444AB18AFD2896C6595EAE3898ADBF4
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197997
IP address blocks: 185.143.80.0/24 maxlen: 24
193.68.96.0/24 maxlen: 24
193.68.97.0/24 maxlen: 24
193.68.98.0/24 maxlen: 24
2a02:6a80:5300::/48 maxlen: 48
2a02:6a80:530e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ab:18:af:d2:89:6c:65:95:ea:e3:89:8a:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a85041292b2d56e625be0d6d094f4845d1bcfca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:61:fe:b2:77:c3:f2:ac:d3:26:06:84:51:
3b:6b:68:73:a7:6c:fe:39:a3:f1:df:1c:3c:bc:8b:
ea:79:d5:0c:70:54:5f:7d:54:f2:45:77:6b:a8:94:
f8:ac:99:95:4b:d0:45:92:1c:aa:4a:64:80:67:9d:
01:53:1b:a7:3b:65:24:63:9a:2d:81:94:ca:13:e2:
e1:6b:98:66:c4:c9:48:ee:df:77:8b:57:39:42:ca:
7b:1b:58:fc:ac:71:cd:bc:1c:ca:eb:0f:04:a0:8a:
42:3e:a2:17:96:0d:cd:05:fc:7f:e7:d2:c0:3d:36:
cb:2d:1f:68:7d:2f:de:f1:e2:36:16:a7:ae:c9:e8:
f1:1a:17:d9:ca:9c:13:94:e0:ea:0d:6e:d3:8c:0b:
98:4c:84:da:ad:88:a5:75:02:52:ac:fe:c3:be:06:
a0:af:b6:fd:d2:23:4a:51:2e:19:06:c3:cb:a9:06:
1c:0f:f9:f2:fd:23:37:4a:29:e4:dc:a3:01:ca:4f:
af:d9:90:b0:a5:86:06:8d:16:0d:50:cf:02:9e:c2:
8b:3c:94:07:71:5b:48:91:16:e8:a3:0c:97:a9:44:
a2:fe:76:a9:fe:cc:d8:0c:72:52:e8:c2:06:08:45:
f4:15:2d:45:7a:6c:67:a9:8b:db:c3:15:1a:8f:46:
66:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:41:29:2B:2D:56:E6:25:BE:0D:6D:09:4F:48:45:D1:BC:FC:A4
X509v3 Authority Key Identifier:
keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.80.0/24
193.68.96.0-193.68.98.255
IPv6:
2a02:6a80:5300::/48
2a02:6a80:530e::/48
Signature Algorithm: sha256WithRSAEncryption
76:44:8c:44:fe:84:f9:d2:a3:62:78:c1:9f:e0:63:f2:2b:1c:
77:de:6c:11:7b:7d:7d:08:b7:cc:22:b3:2a:57:97:c3:91:09:
6a:6d:67:83:fa:ca:1f:b5:6c:d1:83:80:ec:41:5c:b8:51:00:
49:1d:02:f1:17:50:f2:a9:d5:c7:0c:be:a8:fa:13:68:cc:31:
77:e7:f5:90:b4:f3:3f:de:81:41:22:6d:86:bd:ad:b8:13:2d:
89:c1:eb:a6:98:75:62:d5:64:45:ef:94:99:95:99:ad:de:3a:
32:a9:9a:79:9c:dc:e5:3c:54:97:e5:ec:35:54:71:75:34:2a:
95:b2:ed:d6:f3:8b:6d:1c:43:14:ed:6c:3d:85:c6:68:74:96:
05:a6:e7:d9:c4:cc:aa:44:aa:21:ba:29:9b:5a:09:2d:f3:48:
c7:b9:f0:da:4f:1d:90:f2:6d:86:3f:4f:ce:2f:39:ac:0e:50:
9c:ed:95:ad:ca:29:2b:c7:20:c8:f4:48:2e:78:da:4e:6c:89:
2d:cc:69:d2:2e:11:3a:c9:90:50:0c:a7:a5:6e:49:b4:db:ad:
5a:8f:77:f9:e5:66:6f:04:83:f1:47:6f:7f:43:ad:11:86:34:
85:58:90:aa:7a:01:72:ee:21:df:0d:f4:1a:f9:bc:ba:46:b4:
ca:c7:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net