Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/fbnqy98yfE_Lzn_9R-s84dMZn3s.roa
File: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (raw, json)
Hash identifier: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=
Subject key identifier: 7D:B9:EA:CB:DF:32:7C:4F:CB:CE:7F:FD:47:EB:3C:E1:D3:19:9F:7B
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0194258F4153DF5D7F45D629BF1C7F2D483D
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/fbnqy98yfE_Lzn_9R-s84dMZn3s.roa
Signing time: Thu 02 Jan 2025 05:48:52 +0000
ROA not before: Thu 02 Jan 2025 05:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34197
IP address blocks: 185.150.160.0/22 maxlen: 22
185.150.160.0/24 maxlen: 24
185.150.162.0/24 maxlen: 24
194.187.224.0/22 maxlen: 22
195.95.224.0/23 maxlen: 23
2a07:7200::/29 maxlen: 29
2a07:7200:1::/48 maxlen: 48
2a07:7200:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:41:53:df:5d:7f:45:d6:29:bf:1c:7f:2d:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db9eacbdf327c4fcbce7ffd47eb3ce1d3199f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:a3:d4:ce:93:12:93:83:4a:a1:b8:20:16:
8b:2a:0b:e9:db:d9:96:3f:91:b3:e2:e1:3c:5c:7c:
0d:7c:8a:92:69:d2:f3:ad:5f:ed:63:0e:09:d5:09:
33:f7:5d:e9:54:fb:9e:f8:6d:91:e7:62:db:4a:70:
17:ec:dc:f2:01:cf:ef:25:d6:dc:87:a5:bd:cb:5a:
50:02:ea:10:82:7c:dd:c8:16:91:13:ac:1d:04:c1:
13:6c:ff:13:40:51:c2:dd:72:be:47:2f:d6:41:79:
86:bc:a6:5a:89:c2:30:d5:de:87:93:ec:78:6d:16:
ff:19:aa:11:2e:7c:af:9c:88:31:db:66:7b:49:9e:
c6:29:fe:45:7e:86:76:68:79:1b:c6:17:28:7b:bc:
df:8b:28:ac:2b:f8:5c:1f:b2:7d:4f:6b:e6:77:99:
66:dc:95:42:60:f6:21:66:00:58:2f:ea:e1:ae:85:
c4:03:c9:f9:e8:9f:d0:5b:ab:e5:74:d0:f3:d8:65:
d4:d8:a6:d8:3d:c8:36:d8:df:17:87:db:16:b6:19:
94:fa:8a:97:fb:38:b7:cf:be:f5:4c:02:41:cf:4f:
91:c6:60:c8:e3:a4:76:d3:62:ee:0e:f0:a5:9d:a6:
37:f9:34:38:47:01:82:3f:27:c3:15:93:ae:e1:ca:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B9:EA:CB:DF:32:7C:4F:CB:CE:7F:FD:47:EB:3C:E1:D3:19:9F:7B
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/fbnqy98yfE_Lzn_9R-s84dMZn3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.160.0/22
194.187.224.0/22
195.95.224.0/23
IPv6:
2a07:7200::/29
Signature Algorithm: sha256WithRSAEncryption
6a:f3:6d:b4:51:6e:b4:f5:e1:57:7d:9c:a9:65:6f:46:d0:42:
20:5a:f6:24:ed:e1:49:14:86:04:09:72:60:c7:d5:9b:ac:52:
f3:0e:74:cd:82:10:73:25:97:19:48:71:65:ad:5f:0a:35:d6:
84:91:ca:53:ef:e8:70:9e:78:9d:90:4c:0e:e7:24:b6:39:36:
7d:a9:dc:4f:a8:cf:4e:1d:e2:c6:f9:bb:42:00:23:1d:9c:5a:
0a:66:f4:81:a2:10:d1:a4:26:f1:61:32:4b:9b:1e:0c:25:01:
67:23:50:9f:6a:cf:1e:c8:a6:13:8f:02:9b:46:77:0c:0f:48:
98:b2:a5:0b:2c:f2:c9:a3:fa:c9:37:69:2f:d3:a4:55:ca:4f:
ab:54:61:7e:90:34:55:44:b7:70:21:da:f4:36:f1:2f:64:db:
c8:be:ec:37:59:90:48:c8:df:c7:cd:52:84:91:50:ea:8b:03:
71:74:aa:cc:0e:bf:62:46:0f:8c:48:18:0a:92:c6:08:ae:a5:
93:f7:fb:a8:0b:1e:48:de:ee:c6:ac:ae:eb:44:37:90:fb:68:
bc:c8:53:03:78:fa:e5:da:c0:24:20:26:59:ca:90:a0:a9:17:
e5:5d:9e:65:9d:a3:42:e7:4e:39:db:60:82:ae:07:60:27:ea:
6c:d2:9c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net