Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/FCxYBsvWXDM15GSlGFr8QNu4RYE.roa
File: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (raw, json)
Hash identifier: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=
Subject key identifier: 14:2C:58:06:CB:D6:5C:33:35:E4:64:A5:18:5A:FC:40:DB:B8:45:81
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 0194236982C59E6264D8D32CFF27AEF72DB8
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/FCxYBsvWXDM15GSlGFr8QNu4RYE.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13008
IP address blocks: 185.86.24.0/24 maxlen: 24
185.86.25.0/24 maxlen: 24
185.86.26.0/24 maxlen: 24
185.86.27.0/24 maxlen: 24
217.175.204.0/24 maxlen: 24
217.175.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:82:c5:9e:62:64:d8:d3:2c:ff:27:ae:f7:2d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142c5806cbd65c3335e464a5185afc40dbb84581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:2d:4a:cb:e3:92:47:d2:cc:f5:b5:f6:e5:
da:03:e7:6e:25:0c:08:bf:75:24:c4:6c:bd:be:a0:
96:69:22:d6:93:48:7d:de:0c:67:ae:21:52:b0:ff:
9f:36:38:9f:1b:ee:7b:37:5a:6b:f1:f2:75:5c:e6:
8a:d4:bf:d9:c1:1f:9e:da:68:cd:01:63:ca:36:42:
67:b7:8f:d6:d9:64:1b:98:ac:4a:0c:27:11:42:28:
67:e5:b8:f0:a6:e1:58:e0:0a:fb:69:df:01:b1:93:
e1:ca:fd:9e:71:cf:ae:1e:e6:5d:27:71:51:a0:c1:
75:39:a9:02:fd:d9:d1:14:30:b9:50:6e:9b:3a:bb:
ba:ec:5b:f2:89:93:95:0b:83:94:44:49:2a:1e:8b:
33:34:ba:6d:bd:00:4f:b2:c9:23:64:9e:54:eb:bf:
fc:13:d1:71:7b:a6:f7:ff:3f:22:b7:49:7e:e5:f4:
86:c1:85:0c:f1:c5:0b:ff:e0:d8:55:0a:89:4c:7c:
96:80:46:9b:d6:0b:1c:be:01:f3:31:e1:25:d5:85:
64:05:27:cc:6d:68:2f:2d:fd:34:0c:2c:2c:3d:8c:
58:85:ed:64:93:13:0b:0e:97:46:5a:38:12:e6:1d:
3f:8b:77:11:18:2e:9c:da:6b:89:9e:e4:88:84:1d:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:58:06:CB:D6:5C:33:35:E4:64:A5:18:5A:FC:40:DB:B8:45:81
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/FCxYBsvWXDM15GSlGFr8QNu4RYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.24.0/22
217.175.204.0/23
Signature Algorithm: sha256WithRSAEncryption
78:74:af:85:d6:f1:8b:be:b8:a1:eb:cf:71:8f:00:41:a0:cf:
55:e8:3d:20:f1:36:14:6b:dc:18:b9:fb:7d:d9:57:46:0d:d0:
6d:32:61:7f:a6:7c:0f:69:dd:48:d9:9f:57:63:52:10:da:33:
2c:dc:73:d4:ca:86:d3:01:7a:e3:65:43:68:68:e1:f4:98:f9:
d7:9b:3c:16:89:b2:46:eb:e1:80:f2:c9:6f:c3:70:b3:a1:09:
8e:16:19:c2:34:90:f8:e7:a4:9b:c1:6b:04:9e:80:48:9e:5c:
8b:ac:25:8d:1a:52:0c:89:da:91:5c:a7:e4:68:4a:88:da:ad:
50:c0:2d:23:8b:d2:2e:d9:53:d3:3e:b3:3c:52:75:48:ff:c7:
cc:ea:f7:6a:c9:38:f3:84:0c:7c:77:3b:9e:63:a6:9b:41:66:
35:4a:2b:a9:c8:c0:55:f3:2a:b9:32:99:9d:62:37:4d:0c:03:
0f:7b:e5:3a:d9:11:08:0e:38:4d:e4:a5:f1:ba:93:4c:ab:e9:
98:29:7c:37:68:b2:d2:fc:b6:4b:a5:94:10:d7:f9:bb:b7:c1:
2f:03:2a:09:f2:d7:35:e0:e8:87:89:5d:98:72:ba:12:e5:12:
9b:fa:4e:8e:18:05:da:4b:9d:e7:50:9d:78:10:25:69:29:30:
41:23:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net