Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/fNjIviZE-rak2nx-LNx6AaZmje8.roa
File: fNjIviZE-rak2nx-LNx6AaZmje8.roa (raw, json)
Hash identifier: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=
Subject key identifier: 7C:D8:C8:BE:26:44:FA:B6:A4:DA:7C:7E:2C:DC:7A:01:A6:66:8D:EF
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019422FBFC0171463550CE00D67F0FB2859E
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/fNjIviZE-rak2nx-LNx6AaZmje8.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209288
IP address blocks: 91.202.210.0/24 maxlen: 24
151.248.16.0/22 maxlen: 22
151.248.16.0/24 maxlen: 24
151.248.17.0/24 maxlen: 24
151.248.18.0/24 maxlen: 24
151.248.19.0/24 maxlen: 24
185.112.73.0/24 maxlen: 24
212.18.105.0/24 maxlen: 24
2a05:ccc0::/29 maxlen: 29
2a10:c080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fc:01:71:46:35:50:ce:00:d6:7f:0f:b2:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cd8c8be2644fab6a4da7c7e2cdc7a01a6668def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:b8:58:ff:98:6e:6c:b8:f2:bf:14:f6:67:
ce:2d:1d:38:f3:9d:93:d7:82:21:11:5a:db:ff:2e:
94:ea:1f:75:ca:3b:54:b8:6c:4f:94:aa:dc:f3:93:
23:d9:5f:17:73:76:50:73:45:45:46:58:1a:23:c9:
04:03:31:e3:3a:ef:7f:58:17:1b:d8:d4:02:4f:9e:
b3:b6:6e:5a:ca:6d:06:45:bd:ca:5c:ca:ca:44:f2:
e6:1f:4a:6f:f7:60:74:70:b8:cd:de:a5:49:1e:f9:
b6:e2:a6:5a:a7:52:3e:ed:35:44:d6:2b:20:9a:53:
ec:02:42:f1:76:7c:f7:7d:00:3e:8e:33:3c:ad:71:
02:13:2a:19:2a:f4:4c:12:f1:f0:e0:18:cb:ac:e3:
4f:94:30:08:c2:30:0e:6d:85:a0:a8:50:2d:68:ab:
77:95:a5:1a:81:fd:52:89:86:9d:05:25:a6:18:bf:
0f:a0:7f:76:30:6a:82:49:41:f5:9a:39:87:30:9a:
0e:7c:00:27:af:14:a4:7d:74:bb:e5:67:d7:1c:a0:
bb:fa:fe:a7:f6:2a:0f:f5:1c:03:92:57:5a:b1:77:
65:15:4c:1a:53:fb:a1:21:7c:ba:dd:07:5b:9f:2b:
b3:bc:38:5c:a5:e9:fc:46:13:0a:ba:fc:30:81:0f:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:C8:BE:26:44:FA:B6:A4:DA:7C:7E:2C:DC:7A:01:A6:66:8D:EF
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/fNjIviZE-rak2nx-LNx6AaZmje8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.210.0/24
151.248.16.0/22
185.112.73.0/24
212.18.105.0/24
IPv6:
2a05:ccc0::/29
2a10:c080::/29
Signature Algorithm: sha256WithRSAEncryption
0f:a0:25:51:e4:47:a7:6c:09:b2:62:59:a4:2a:1b:bd:b4:f1:
72:69:95:32:b0:d6:91:c3:e4:bf:0f:eb:81:fb:f2:9f:46:f4:
c9:af:56:33:25:f8:09:28:29:4c:b5:0d:da:86:47:d0:69:23:
3e:86:f7:29:9e:b2:dd:4d:f1:9e:61:03:6b:88:71:90:da:50:
74:7e:84:f8:67:cc:e4:8d:32:9b:3b:15:8f:cd:8b:35:7b:3e:
c7:0e:43:70:79:a2:e9:8e:18:33:04:13:1c:74:2b:71:d4:6c:
2b:ce:0a:0f:a9:b8:d4:f0:5e:92:0a:e3:a4:38:88:eb:78:d5:
63:51:7c:4c:90:28:3f:e1:20:8b:25:03:34:f4:1e:9a:77:e7:
f0:24:00:67:83:68:55:0c:3f:de:80:d4:4f:98:39:d3:d9:cd:
85:07:f2:71:62:4b:a0:ab:eb:05:29:e9:2e:8b:47:ed:62:cd:
33:d1:21:07:ab:cc:1a:d2:b5:80:80:76:eb:61:b7:48:66:80:
c5:dc:8d:dc:77:e0:09:d7:76:8f:63:33:dd:8d:d7:c8:a9:33:
99:de:24:1f:27:f4:9b:03:ea:26:a3:01:e5:4b:da:2c:78:4f:
da:89:5f:f6:64:cc:8d:70:b3:07:7c:a2:c2:0f:c9:9c:98:68:
44:f3:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net