Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_FNnAfXHIK3mS0z3F15N5D4m-eE.roa
File: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (raw, json)
Hash identifier: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=
Subject key identifier: FC:53:67:01:F5:C7:20:AD:E6:4B:4C:F7:17:5E:4D:E4:3E:26:F9:E1
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0194228DE4627CDA4407B90A6BF40AD74CCD
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_FNnAfXHIK3mS0z3F15N5D4m-eE.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47576
IP address blocks: 89.207.144.0/22 maxlen: 22
185.251.96.0/22 maxlen: 22
2a02:2410::/32 maxlen: 32
2a0c:18c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e4:62:7c:da:44:07:b9:0a:6b:f4:0a:d7:4c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc536701f5c720ade64b4cf7175e4de43e26f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:0f:46:35:7e:97:77:0a:9a:e3:3b:0d:48:
d9:a8:b1:43:30:1d:99:9c:68:20:88:50:da:cd:a4:
a9:1d:4c:87:92:ea:d6:02:63:e7:8b:f3:0e:6f:2c:
95:ba:74:b4:86:5c:c3:41:f1:a6:86:51:25:68:0b:
19:8f:f5:c5:4a:8d:3c:f3:51:84:82:d3:fb:1e:db:
e5:ac:2e:f4:7c:dd:86:91:10:b8:ea:6f:30:49:41:
99:0f:d4:4c:92:e8:ce:b8:de:98:f0:d6:11:c7:a3:
6e:1f:43:63:70:7f:9d:2a:12:60:4d:ee:d9:88:cc:
f6:bf:ff:86:c4:aa:89:ac:c4:03:b3:4b:3b:39:b6:
a0:22:93:48:a6:7b:fb:e4:53:71:97:fb:87:f8:79:
50:38:f7:52:81:d1:5f:e7:7d:8a:ba:9e:6a:10:a6:
44:7e:f1:14:2b:2c:81:08:16:64:ed:b8:52:00:75:
9c:15:e7:ff:ff:a1:66:cf:a6:74:39:31:29:b1:d3:
05:8c:25:3f:e8:a0:3f:ca:f8:07:63:a0:fe:68:ac:
73:47:ef:10:98:4d:e2:01:a2:35:1b:9d:0c:0e:23:
cc:c1:1d:06:5e:b4:aa:21:30:d6:14:54:b2:4b:d1:
78:24:61:9e:5e:1b:32:35:9b:a7:c6:36:cc:76:65:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:53:67:01:F5:C7:20:AD:E6:4B:4C:F7:17:5E:4D:E4:3E:26:F9:E1
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/_FNnAfXHIK3mS0z3F15N5D4m-eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.144.0/22
185.251.96.0/22
IPv6:
2a02:2410::/32
2a0c:18c0::/32
Signature Algorithm: sha256WithRSAEncryption
39:bf:d4:9a:a8:1c:51:dd:04:49:f2:c2:1e:64:46:c0:cf:54:
12:12:84:42:e1:e6:fd:36:e5:f9:f2:e4:dd:b8:95:58:95:58:
b2:a9:3f:54:ac:02:7b:90:7d:cf:bb:85:80:70:80:18:69:f5:
88:ff:bc:dc:e3:80:3a:73:16:d6:29:0b:43:00:e2:f4:48:83:
78:6c:d3:30:b7:e9:1a:02:87:29:6a:cc:52:c6:30:98:40:cb:
4c:99:41:c9:fc:50:e0:d3:7a:ab:e3:8c:07:a3:0f:90:5d:75:
6f:27:84:69:fd:b5:44:32:90:5b:1e:fa:e8:c5:40:16:35:82:
10:96:00:1f:c9:15:48:db:e4:65:23:63:ca:8f:47:a8:2f:24:
ed:c3:20:e3:5b:bf:f5:53:6e:1f:f0:a8:0f:5c:5c:7f:cd:4b:
42:4d:e0:63:33:27:13:70:4c:65:2d:12:84:2e:16:a3:69:16:
98:65:e1:af:c0:6f:83:5b:58:89:27:2f:7a:32:f3:22:da:09:
f3:98:aa:f8:c2:ed:f8:4e:ff:94:c6:3e:04:9e:45:5a:81:9c:
3c:66:66:cf:e6:15:08:4b:32:8c:13:71:e9:dd:89:1b:f4:91:
0a:46:e3:0d:b8:21:44:15:78:70:fa:28:a6:e5:00:d7:46:fa:
94:e1:12:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net