Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/fbHkL-NwzOez_gqY2PAh-dqPCjE.roa
File: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (raw, json)
Hash identifier: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=
Subject key identifier: 7D:B1:E4:2F:E3:70:CC:E7:B3:FE:0A:98:D8:F0:21:F9:DA:8F:0A:31
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 01941FFA7B85F4EDB9AB1E19A70C337D5D26
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/fbHkL-NwzOez_gqY2PAh-dqPCjE.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205222
IP address blocks: 185.225.56.0/22 maxlen: 22
185.225.56.0/24 maxlen: 24
185.225.57.0/24 maxlen: 24
185.225.58.0/24 maxlen: 24
185.225.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:85:f4:ed:b9:ab:1e:19:a7:0c:33:7d:5d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db1e42fe370cce7b3fe0a98d8f021f9da8f0a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:45:5c:14:59:f4:e3:60:25:0b:25:15:38:
df:e6:51:2d:2f:27:c8:fa:f9:e6:b6:a0:6c:f1:f4:
86:c2:44:bb:05:81:86:2c:b8:6f:97:0b:c1:34:cf:
dd:90:f3:81:08:71:a0:37:32:44:09:30:df:5f:ab:
1a:f3:52:fa:af:60:de:f1:ed:1c:a8:72:3e:1f:0c:
09:d5:dc:ba:f5:75:06:49:e2:6f:9e:bd:f1:78:0b:
03:7f:63:77:87:da:86:cd:d3:22:f6:26:7f:84:0c:
0d:97:6c:11:15:4c:40:d2:18:85:10:63:2a:a2:11:
a3:81:c7:fb:1e:23:1f:70:6b:d8:fd:89:d3:10:a0:
bc:64:ca:6b:6f:b4:d1:cf:5a:46:e5:37:19:99:b0:
f8:69:8f:1a:ec:d8:3c:fb:78:fe:da:e0:c1:db:34:
af:3c:62:66:b4:c4:b8:8e:0a:81:d2:68:52:69:f2:
3d:9a:22:a5:b7:05:03:ab:d7:23:b2:25:f0:39:a7:
b2:04:97:8b:f4:43:46:f4:95:0e:98:6a:8b:16:e9:
e8:19:64:a5:75:b2:01:9d:13:f2:11:3e:ee:a4:72:
bd:de:8e:b8:08:4e:68:f8:e5:d7:23:a0:89:4d:f1:
2b:e7:ce:78:d4:f8:8e:08:24:3f:60:20:9d:2c:c7:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B1:E4:2F:E3:70:CC:E7:B3:FE:0A:98:D8:F0:21:F9:DA:8F:0A:31
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/fbHkL-NwzOez_gqY2PAh-dqPCjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c2:11:0e:80:91:d4:b4:25:16:8c:f4:3c:c6:e3:0c:0c:f3:
92:96:cb:4d:8c:74:e7:04:77:09:2b:29:0b:75:19:f8:7b:85:
8d:f4:7f:57:6d:23:1c:7c:61:4d:ea:2f:f8:cd:43:99:a3:ec:
f4:59:38:e5:7a:c3:e9:b6:64:22:0f:82:d1:7f:41:11:84:da:
ed:11:fb:69:1a:f6:ed:ae:05:af:cc:c6:bc:13:2d:af:72:f5:
62:9b:46:ed:82:cf:0d:08:e6:ef:f0:4c:27:1d:39:fc:ca:8b:
25:db:ec:18:d5:47:5c:3b:bf:e7:bf:ad:23:c4:a8:7d:4b:49:
71:76:c9:5b:9f:f3:cd:04:9b:81:ed:45:74:5a:34:18:f7:f9:
27:06:f8:b7:44:53:19:32:9c:a0:e4:82:98:07:f3:6c:a7:b9:
83:55:fd:1a:48:44:4a:f5:e3:ab:56:fa:fa:3d:77:46:b2:0d:
f8:b7:a1:3f:d8:1d:9a:56:39:03:ee:a9:4d:ab:05:0b:86:71:
e7:75:45:db:ae:2e:3e:71:ac:53:e5:c8:c8:68:fc:80:f4:bf:
0a:30:a3:a4:93:84:83:57:a4:f2:77:c4:a6:2f:47:86:c2:10:
d7:d4:49:0a:ba:38:df:62:05:4c:54:21:b1:37:78:30:c8:9d:
d8:89:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net