Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/Fl9jCud-UU_nsltrgxF4woEzDPA.roa
File: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (raw, json)
Hash identifier: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=
Subject key identifier: 16:5F:63:0A:E7:7E:51:4F:E7:B2:5B:6B:83:11:78:C2:81:33:0C:F0
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 019424450AC925B2C10D04A5BE8569FAF118
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/Fl9jCud-UU_nsltrgxF4woEzDPA.roa
Signing time: Wed 01 Jan 2025 23:48:12 +0000
ROA not before: Wed 01 Jan 2025 23:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8535
IP address blocks: 80.252.0.0/20 maxlen: 20
193.42.228.0/22 maxlen: 22
194.149.228.0/22 maxlen: 22
2a02:bd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0a:c9:25:b2:c1:0d:04:a5:be:85:69:fa:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Jan 1 23:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=165f630ae77e514fe7b25b6b831178c281330cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:35:b0:d0:2b:d6:7c:1b:75:fe:93:82:22:
4b:45:ec:7e:40:44:77:fc:ea:1a:97:b5:bf:f1:c6:
ac:be:55:56:2c:36:19:4d:b4:ac:3b:b4:e1:bc:ae:
41:b8:1c:7d:31:46:9f:f7:9a:fe:01:af:59:6e:5e:
d1:37:32:15:75:77:63:de:ac:d6:ec:c1:20:ee:9d:
2a:d1:91:e6:09:a8:c9:a6:a6:b5:9e:4c:09:81:cf:
2a:84:25:ee:25:b6:fd:7d:e4:91:2a:4e:dd:16:6b:
e1:44:fd:50:40:fb:e4:5a:af:19:31:99:cb:97:cc:
70:84:8b:be:c4:bd:fa:65:18:1f:71:a8:ad:d8:73:
82:a6:2f:b3:f4:22:fa:23:96:fc:51:d4:c9:19:05:
77:26:73:4c:55:2f:ad:ac:a1:97:43:55:82:2c:3f:
6b:4f:34:e3:e2:96:83:6c:72:79:68:62:27:99:1a:
24:e0:08:a3:7d:63:c3:f7:47:02:2c:ff:ab:42:3e:
88:e9:7e:42:df:00:ea:b9:06:30:3d:7b:ba:e1:6b:
b1:67:28:5d:a1:f1:c1:2c:79:4c:c0:85:0e:b3:2e:
6f:d3:56:16:22:8a:52:b4:97:4f:17:cc:8c:bc:cc:
42:bd:8c:cf:54:3d:53:ee:25:48:dc:be:ec:36:fd:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:63:0A:E7:7E:51:4F:E7:B2:5B:6B:83:11:78:C2:81:33:0C:F0
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/Fl9jCud-UU_nsltrgxF4woEzDPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.0.0/20
193.42.228.0/22
194.149.228.0/22
IPv6:
2a02:bd8::/32
Signature Algorithm: sha256WithRSAEncryption
0f:de:a1:ee:a7:a0:43:c3:50:2f:77:1d:5b:a8:b2:bd:ec:71:
6e:0d:87:1d:88:69:b3:bd:5b:73:f8:09:2d:2b:f4:c8:bb:76:
1a:fa:85:cb:5a:6c:3a:73:e3:64:37:81:af:b1:fa:ef:59:70:
fc:5a:cb:9a:bb:bf:50:12:36:09:f1:8b:e3:13:2c:db:53:52:
0c:cd:ec:3a:72:80:d6:75:a8:e7:7a:7f:c3:8a:95:e2:66:f6:
5e:8d:27:7f:1b:fe:56:bb:ca:6e:fb:b7:04:8d:2c:cc:dd:62:
9f:67:d5:e0:fe:3d:ce:a5:ba:4c:14:3b:7b:39:dc:d2:ea:f4:
e1:31:63:6f:b1:9d:a0:a6:b7:5e:50:ae:e4:a6:18:86:50:bb:
f3:a9:ce:2d:49:76:3b:a8:9c:c8:43:de:8f:02:7a:13:90:46:
fe:47:83:7f:87:13:0a:a3:32:4c:1d:03:b1:48:46:4c:a8:a6:
46:b7:76:f1:44:ab:36:02:51:60:2b:02:ee:b0:82:2d:cb:d2:
2b:23:97:f2:ef:93:e0:85:45:9f:a7:2f:e5:94:45:92:e0:2b:
45:95:91:4b:1c:a8:cf:bb:7f:69:f8:30:73:7f:1a:da:c3:71:
e3:3f:25:4f:43:83:0c:24:ad:2d:64:04:d3:a0:21:1b:99:26:
b9:93:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net