Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/FybckS4mS3PAuxN_d3EgWJtMQK4.roa
File: FybckS4mS3PAuxN_d3EgWJtMQK4.roa (raw, json)
Hash identifier: MImS/nx2LOpK0AGTytgC4EXihDeCbzPO2eNXYJc+NdA=
Subject key identifier: 17:26:DC:91:2E:26:4B:73:C0:BB:13:7F:77:71:20:58:9B:4C:40:AE
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019421B21C72F2F43B4D14D2184488BECD65
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/FybckS4mS3PAuxN_d3EgWJtMQK4.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8376
IP address blocks: 185.98.224.0/22 maxlen: 24
212.34.0.0/19 maxlen: 24
213.139.32.0/19 maxlen: 24
2a00:18d8::/29 maxlen: 64
2a00:18d8::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1c:72:f2:f4:3b:4d:14:d2:18:44:88:be:cd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1726dc912e264b73c0bb137f777120589b4c40ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:9a:c9:3a:c3:21:31:a7:85:9e:9c:77:9e:
33:8f:45:e5:3d:d8:48:0c:c4:5b:0d:7f:db:f6:0b:
a0:db:d7:44:78:8f:b0:ea:66:51:86:80:d5:cd:f7:
6e:48:d8:e1:08:21:4d:3f:f3:40:ce:f4:03:fc:3e:
3a:69:05:5f:b7:ae:fa:ae:d8:02:b8:cf:cb:c7:8a:
d7:57:da:47:9b:91:1b:1a:4b:6e:d7:dc:ff:fc:e5:
9b:2f:66:95:83:68:08:7d:d4:37:d6:1a:91:5d:62:
8f:f8:1f:e5:b3:92:31:1d:44:64:28:17:6f:97:f7:
f9:d7:75:07:1d:3a:af:c6:6a:a0:4a:5a:7b:75:a2:
a8:4f:2d:e6:b8:2c:17:7e:04:13:c4:09:9f:e4:18:
7a:8a:bf:f0:b0:3c:15:b7:72:ef:02:40:e2:d1:2a:
1f:a8:40:e8:62:c0:17:55:e1:ad:1c:49:3e:09:0f:
21:f9:88:7c:87:51:fa:c4:a0:5b:15:0f:c2:d8:ef:
fc:15:1c:92:a5:0c:75:7b:4a:9d:14:86:3f:ef:0c:
57:e2:71:b0:a5:45:b0:d8:38:09:a7:a2:2a:27:e0:
7d:2a:cb:8d:5e:13:a5:7c:8e:e5:42:73:a9:63:c1:
71:03:4f:18:42:dd:4b:20:22:bb:70:78:b5:7f:79:
40:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:26:DC:91:2E:26:4B:73:C0:BB:13:7F:77:71:20:58:9B:4C:40:AE
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/FybckS4mS3PAuxN_d3EgWJtMQK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.224.0/22
212.34.0.0/19
213.139.32.0/19
IPv6:
2a00:18d8::/29
Signature Algorithm: sha256WithRSAEncryption
61:02:50:a3:fd:61:1a:18:75:4a:62:87:ad:73:5e:d5:ee:a3:
8d:23:69:46:72:c3:75:cd:f5:3a:2d:ed:d5:cb:d8:02:71:2d:
ed:36:77:d8:09:a3:de:67:4f:85:09:86:5d:d8:d0:37:62:f7:
0f:45:2b:a2:9b:1f:e6:4e:23:91:2b:1a:34:4b:9b:f1:ac:7f:
08:0b:61:6e:77:38:d1:48:4b:1e:0b:11:b2:24:74:9b:fe:6e:
af:09:d7:e3:fc:94:21:ed:64:e5:30:d9:78:a4:2f:9d:ac:eb:
3b:2d:d9:e1:34:dc:58:ac:c5:a7:fe:62:b7:72:70:ba:5f:45:
4d:35:9f:13:5b:63:42:14:c2:3f:eb:3e:7b:92:54:5f:11:c0:
b0:72:e9:ed:ea:83:67:ba:94:e3:7e:29:0e:e8:c6:07:69:0d:
8b:07:82:86:c2:51:14:10:46:16:75:a4:30:e1:1e:e7:43:e6:
9d:1a:c2:84:25:1d:34:89:2b:7d:aa:f5:5b:af:0c:3a:c3:65:
51:c6:23:ac:c0:95:8e:70:42:04:37:d1:d4:80:a9:3a:ab:5e:
20:1b:4c:2d:9e:19:3c:4f:af:41:7c:9a:15:12:81:a7:d7:5e:
a0:6b:e1:62:18:75:15:5e:6b:3f:a3:2d:9a:e8:aa:60:0f:cd:
9b:04:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net