Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/FmibemZmWadwoWku7dPnAevhIBU.roa
File: FmibemZmWadwoWku7dPnAevhIBU.roa (raw, json)
Hash identifier: 5oS8GEg+BXugAWDXJk4s8Ui/LU+uxR3L7CP9jg4MRY4=
Subject key identifier: 16:68:9B:7A:66:66:59:A7:70:A1:69:2E:ED:D3:E7:01:EB:E1:20:15
Certificate issuer: /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial: 0194221FCC12DD4AEB6B83DDD1C683AE102F
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/FmibemZmWadwoWku7dPnAevhIBU.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209828
IP address blocks: 178.255.218.0/24 maxlen: 24
185.203.67.0/24 maxlen: 24
193.163.88.0/24 maxlen: 24
194.69.162.0/24 maxlen: 24
2a0c:ae80::/29 maxlen: 29
2a10:7cc0::/29 maxlen: 29
2a11:940::/29 maxlen: 29
2a11:1ec0::/29 maxlen: 29
2a12:e440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cc:12:dd:4a:eb:6b:83:dd:d1:c6:83:ae:10:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16689b7a666659a770a1692eedd3e701ebe12015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:ee:93:bd:5d:ee:3d:ea:06:92:29:01:40:
99:50:5b:a5:61:eb:81:9c:a6:85:c2:69:4a:43:c9:
3e:2f:e4:fe:4d:a3:21:31:36:ad:44:0c:12:40:a9:
49:88:c9:30:83:c7:a3:cb:d2:f8:92:5b:75:e1:0e:
92:66:66:89:3e:41:1c:66:a2:e7:c9:96:2a:34:90:
86:59:88:3a:75:6b:da:7a:70:19:d1:bf:c2:b0:88:
ef:70:68:a9:75:61:c2:c7:9f:d2:33:a6:59:ab:ad:
c8:28:7a:23:b2:55:29:3c:e1:07:b6:d4:51:8d:1a:
7b:d4:26:3a:ed:1b:51:d6:dd:ec:33:60:53:52:74:
57:ce:3e:2e:1a:6a:87:45:bc:0c:10:4d:a3:dc:f6:
df:81:41:fb:2b:cf:01:65:9d:51:48:a6:d4:ba:c6:
10:90:93:28:55:5f:59:12:e4:11:92:c8:46:85:da:
18:bd:67:c6:04:49:56:02:00:b7:06:d4:f7:3c:37:
9d:1f:ce:13:2a:52:5b:a0:5f:32:b6:97:a8:c3:a9:
fe:cb:f7:d8:85:47:69:60:db:11:27:1a:eb:e2:79:
7f:9a:57:ca:64:45:94:3f:0d:40:31:46:b0:43:8f:
cb:33:c0:6c:8c:83:b4:4f:f5:41:a0:a1:11:53:1e:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:9B:7A:66:66:59:A7:70:A1:69:2E:ED:D3:E7:01:EB:E1:20:15
X509v3 Authority Key Identifier:
keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/FmibemZmWadwoWku7dPnAevhIBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.218.0/24
185.203.67.0/24
193.163.88.0/24
194.69.162.0/24
IPv6:
2a0c:ae80::/29
2a10:7cc0::/29
2a11:940::/29
2a11:1ec0::/29
2a12:e440::/29
Signature Algorithm: sha256WithRSAEncryption
57:34:7f:80:80:ce:99:69:52:15:29:db:bd:d6:33:75:bb:28:
29:de:0c:64:4b:21:43:e2:d5:ac:3b:d2:1b:6e:e7:3e:d3:99:
a9:db:13:23:9b:65:3f:c8:a0:13:e0:99:7e:e0:8c:3b:20:96:
ef:b4:41:9b:4e:2b:97:89:eb:92:56:26:ca:76:fe:b9:f5:bf:
d6:c1:3a:1e:a6:5d:d0:db:e5:0c:8a:92:37:62:16:b5:bd:42:
ae:5e:36:cb:f8:e6:e7:d2:b4:e2:3d:09:c9:be:71:a7:c8:5b:
23:4a:70:d4:57:e2:63:09:b3:79:a0:cb:81:4a:ce:12:cd:7c:
03:b1:d2:16:af:b3:80:51:a6:d8:45:61:15:a6:56:34:f3:43:
47:1c:0f:46:4c:bc:3b:30:37:f8:d0:c4:e3:53:3f:b0:65:8c:
96:6f:0d:0f:7e:09:db:b2:7c:0e:c4:4c:0a:ef:6a:67:17:09:
f9:aa:55:07:b3:3b:fa:ab:02:ba:f1:19:e7:2e:1c:38:ee:05:
c2:c0:4a:c7:a1:f7:c1:3a:4a:4c:56:b0:ee:7f:99:1e:bd:46:
ed:bb:9f:e1:d0:17:a3:29:69:c2:d3:e0:e0:3f:63:f5:90:66:
20:60:28:ff:c5:f7:23:07:d9:68:0f:42:19:8b:c9:81:49:1e:
7c:f9:0b:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:32:57 2025 by rpki-client on console.sobornost.net