Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/fnn2PBqaEkB-G35nmktclyOEVrM.roa
File: fnn2PBqaEkB-G35nmktclyOEVrM.roa (raw, json)
Hash identifier: z4jXqUIY33n8wsiIhXSfBMidI9YSQa2N+6IYP0IxcVM=
Subject key identifier: 7E:79:F6:3C:1A:9A:12:40:7E:1B:7E:67:9A:4B:5C:97:23:84:56:B3
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 0194228E34B19FBFEE48F1F5F8A5F4B43980
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/fnn2PBqaEkB-G35nmktclyOEVrM.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199998
IP address blocks: 94.158.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:34:b1:9f:bf:ee:48:f1:f5:f8:a5:f4:b4:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e79f63c1a9a12407e1b7e679a4b5c97238456b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:1d:65:0e:69:db:10:1c:8a:a3:2a:d2:f7:
7c:03:fa:3f:a3:6e:70:d4:f4:07:f8:36:8b:d1:29:
18:b9:3d:4c:cf:df:e2:f9:5c:5c:30:85:12:8c:23:
df:3c:d3:84:5f:37:75:d8:22:e8:ba:3a:54:8b:95:
2d:51:99:d1:73:a8:32:fc:60:c9:c1:a3:c8:c0:45:
b5:54:3f:fb:18:62:3f:77:ca:1c:48:d6:59:1b:9d:
a8:13:b8:99:1f:25:29:55:ad:de:aa:dd:3b:4b:c8:
22:13:2e:5b:21:69:b0:8f:07:d8:06:8b:cb:ff:81:
81:2b:55:ac:0b:dd:6e:f6:68:a8:16:63:57:16:df:
19:36:58:dc:73:fb:22:ca:41:d9:4f:ab:82:21:ee:
0e:b5:e0:e3:f5:99:49:8f:6b:ac:9b:f8:5e:00:6c:
07:ef:bd:08:be:6d:50:77:9f:9b:77:e9:dd:8b:b3:
aa:25:4f:d0:8f:00:f6:f3:5e:b4:85:8b:94:0a:a6:
3b:4b:0d:a3:f6:59:d4:62:8b:10:ea:b1:93:d7:f2:
61:9c:e8:4a:72:d5:1b:6e:bd:a8:df:eb:00:35:59:
cf:0c:2b:fc:d2:f1:94:5d:34:34:e8:b5:16:ce:b1:
cf:78:cc:a2:3e:ea:c9:82:04:b0:e8:e5:7a:5a:bc:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:79:F6:3C:1A:9A:12:40:7E:1B:7E:67:9A:4B:5C:97:23:84:56:B3
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/fnn2PBqaEkB-G35nmktclyOEVrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.248.0/24
Signature Algorithm: sha256WithRSAEncryption
31:dc:ab:04:92:b3:f8:95:d3:0f:84:33:60:bf:e0:8e:7b:94:
5e:ae:c4:77:2c:9d:5e:3c:05:76:bd:97:fb:13:8e:db:dd:dd:
a2:f4:98:ba:4b:40:4c:ea:a2:03:84:5d:42:b3:3a:48:79:ae:
22:be:48:5e:65:70:2b:85:23:a5:71:bb:59:a5:db:6a:16:68:
23:a6:3b:0d:4f:ba:e8:56:78:07:4d:c0:ec:65:ae:6c:6f:ef:
41:42:e5:17:ac:37:5d:1b:c0:6b:ef:1c:b3:32:fc:76:2c:95:
8c:71:29:8f:36:c7:1c:05:a3:28:40:10:63:b2:a5:0a:27:a5:
57:fb:44:38:dd:18:71:f4:94:b4:92:ea:77:9e:85:6e:2e:68:
87:89:80:08:d4:0b:5d:b7:47:e2:bf:54:f1:e4:32:f2:96:a0:
8a:88:1d:75:7e:06:3e:5e:b6:47:3b:3a:6c:f7:53:f7:63:9c:
5f:d2:4f:be:21:12:e3:3c:eb:67:26:6a:7f:14:19:3a:7f:2a:
e0:f2:30:05:db:f2:44:9e:3a:d3:64:8e:cb:0d:e2:03:ab:02:
d9:30:79:d1:ea:7e:6a:f9:12:a3:f2:7d:bc:bf:b6:84:4d:f2:
7b:5f:69:58:87:d9:04:8b:80:2a:1c:39:2b:75:b7:6b:52:a4:
95:c6:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net