Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/FWSXCF4qgT0faY_P6PSKnBV7G2M.roa
File: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (raw, json)
Hash identifier: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=
Subject key identifier: 15:64:97:08:5E:2A:81:3D:1F:69:8F:CF:E8:F4:8A:9C:15:7B:1B:63
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 0194DBD85AD3B4F003FCDEECD381A0915E3C
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/FWSXCF4qgT0faY_P6PSKnBV7G2M.roa
Signing time: Thu 06 Feb 2025 15:19:36 +0000
ROA not before: Thu 06 Feb 2025 15:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25353
IP address blocks: 46.235.56.0/21 maxlen: 21
81.201.192.0/20 maxlen: 20
2a03:2600::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:d8:5a:d3:b4:f0:03:fc:de:ec:d3:81:a0:91:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Feb 6 15:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=156497085e2a813d1f698fcfe8f48a9c157b1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:e1:53:da:a5:e7:73:56:5e:de:de:ab:3d:
ac:e3:de:6c:93:4f:99:47:c5:e2:af:e7:ab:dd:e3:
ac:93:ea:37:e0:02:6d:07:80:fb:d1:35:26:d4:20:
06:92:44:3f:78:cc:e0:75:8e:de:09:54:d7:ea:71:
ec:fc:ac:74:66:19:11:44:c6:ee:97:0a:ac:58:2c:
18:1e:53:2c:86:1a:8e:f8:82:45:ef:76:f4:a8:cb:
15:4c:87:1d:42:cd:ad:6b:6b:b9:c9:63:35:72:d5:
91:97:0b:75:53:02:fb:89:c6:24:13:89:4e:13:d2:
a8:74:b1:66:21:86:aa:2e:42:a9:3d:14:79:48:27:
5a:47:75:20:56:6f:30:76:f3:c1:95:ef:e3:c1:dd:
e0:6f:7d:90:06:8f:a7:35:e2:ca:fa:18:c8:5e:ac:
4f:0f:ef:65:66:18:af:6a:af:bc:7a:8d:7a:2c:cc:
f3:2d:3a:f2:8d:d7:97:f5:31:55:6b:10:78:99:42:
64:02:0c:0e:aa:ee:72:6c:98:3d:6c:20:40:3e:51:
61:91:be:54:34:d6:87:5a:af:92:36:23:f5:7d:ee:
3a:02:e3:98:16:97:b1:a8:92:63:c4:51:18:ac:d1:
c1:06:6b:8c:ed:a3:b5:e1:08:ed:5c:79:16:8e:be:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:97:08:5E:2A:81:3D:1F:69:8F:CF:E8:F4:8A:9C:15:7B:1B:63
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/FWSXCF4qgT0faY_P6PSKnBV7G2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.56.0/21
81.201.192.0/20
IPv6:
2a03:2600::/32
Signature Algorithm: sha256WithRSAEncryption
77:4c:89:0a:4a:28:e1:cd:43:d0:ce:b6:a9:be:e6:31:49:4e:
97:2c:b7:af:ef:45:d3:54:c5:8f:15:c4:89:36:95:c1:62:41:
45:35:ad:cb:49:57:d3:0c:b7:86:0f:f9:e7:e5:88:82:51:b1:
27:1a:35:56:fa:5c:38:34:97:06:73:33:7a:f1:1e:dc:98:11:
55:a6:05:c2:6c:a3:c9:03:d1:38:24:2f:a6:ef:18:86:a3:3d:
42:14:3d:26:e1:19:ae:fe:68:d2:bd:72:7d:ef:3d:54:00:4c:
5d:91:d0:d0:2a:9e:a8:ee:25:37:46:79:6f:ed:ff:4a:2a:66:
ab:f2:f7:b8:b6:2b:f2:1b:f5:f4:4f:17:2e:2c:08:05:ec:dc:
93:71:1e:6d:22:75:e0:ac:79:85:fc:c6:c9:18:cc:bf:38:94:
49:c0:8c:1e:7e:e6:95:00:80:12:f0:92:40:30:17:04:86:35:
ab:d5:4e:20:2f:e4:8a:15:c1:43:7f:84:61:35:40:a4:e5:40:
e6:21:fc:50:98:75:ca:1b:f6:e0:c9:3e:b6:0c:5d:c3:c1:8d:
e5:85:86:33:31:fb:3a:28:f8:a8:90:45:8e:32:a8:f2:ab:86:
5e:d6:74:cc:15:00:f3:ad:26:0f:4f:e5:06:02:6b:8c:36:30:
5e:5c:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net