Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FQUs67egorGqDEk7kbjYvrfoO_s.roa
File: FQUs67egorGqDEk7kbjYvrfoO_s.roa (raw, json)
Hash identifier: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=
Subject key identifier: 15:05:2C:EB:B7:A0:A2:B1:AA:0C:49:3B:91:B8:D8:BE:B7:E8:3B:FB
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019422FC34C90FBB0C86E3353B591113CD23
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FQUs67egorGqDEk7kbjYvrfoO_s.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60368
IP address blocks: 94.136.112.0/23 maxlen: 23
94.136.114.0/23 maxlen: 23
94.136.116.0/24 maxlen: 24
185.16.76.0/24 maxlen: 24
185.16.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:c9:0f:bb:0c:86:e3:35:3b:59:11:13:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15052cebb7a0a2b1aa0c493b91b8d8beb7e83bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:11:0e:2f:6d:9a:42:c4:0c:fe:b6:76:3f:
42:32:2c:77:6b:11:62:5f:9c:fe:f0:b2:68:5c:8d:
fd:43:4a:20:ed:f1:aa:90:c1:67:cf:ba:ed:07:e0:
35:0a:10:0b:04:62:13:3c:43:af:42:f8:97:43:60:
3a:84:87:75:db:d0:1a:64:89:9f:94:9d:fa:aa:e7:
c3:8c:4e:b7:29:54:fb:a5:74:88:b3:87:cc:e4:be:
37:48:64:97:35:55:f6:96:09:ed:1d:c4:8d:62:f4:
26:4f:95:42:87:eb:d4:14:c8:76:cb:af:04:08:6a:
17:67:a4:db:7c:7e:ec:97:17:1e:a8:12:06:b7:71:
db:f2:3a:75:36:ef:4d:71:d6:67:cb:e4:8b:88:3a:
7f:e1:a3:2c:f0:30:b8:b1:54:c0:e2:44:b4:df:fe:
a6:b8:dc:f5:8f:c0:29:ad:36:12:ab:13:57:e7:50:
a3:15:81:37:7e:6c:b7:8a:2a:ee:c6:6a:6d:eb:c8:
65:54:78:12:c2:3e:f4:bd:4b:c4:43:a8:45:9e:79:
d5:6a:63:0d:78:4f:d2:66:4d:e5:f2:a3:5f:a6:10:
e7:b1:45:81:4a:49:ef:2e:7a:8e:2f:2f:48:4a:44:
c7:7d:bd:ca:11:92:1f:08:d0:82:f6:ca:3f:7c:87:
c7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:05:2C:EB:B7:A0:A2:B1:AA:0C:49:3B:91:B8:D8:BE:B7:E8:3B:FB
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/FQUs67egorGqDEk7kbjYvrfoO_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.112.0-94.136.116.255
185.16.76.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:3a:ee:c1:20:3d:37:4d:85:f5:aa:c6:7f:ef:12:69:57:6c:
99:ac:86:02:ac:0c:c5:92:6f:8f:bd:86:14:33:2c:a6:4f:44:
a9:9a:c1:95:50:32:82:b3:fb:37:30:a6:93:d8:40:a5:33:d4:
58:95:b6:88:d0:fe:9a:73:e6:be:68:27:33:7b:4d:49:62:7b:
fa:88:15:bf:04:84:f5:96:35:f4:e1:e8:83:8b:39:2e:35:0c:
2c:36:43:e0:ad:29:ea:0e:df:7d:1b:da:da:44:09:7c:f8:ab:
1c:d9:bc:cb:3b:b9:0c:4b:ba:85:97:58:99:86:48:f2:da:bf:
22:87:0d:5d:dd:49:cc:5e:93:84:e2:71:14:d4:a7:17:6e:22:
ff:a9:9f:f5:09:28:fd:35:54:88:f3:da:51:b2:04:71:e5:cb:
a6:61:81:16:4f:d9:c3:56:22:e1:05:96:41:f9:2c:d5:9c:87:
53:c1:ed:0e:fc:2e:56:5a:fc:63:07:2e:0e:c8:73:47:e7:62:
43:f7:64:05:c7:0a:d9:09:75:ce:f0:88:6e:a6:eb:65:ba:5f:
5b:15:ac:e5:97:a4:7c:3c:3d:4f:94:36:a6:33:7e:5d:13:b4:
a3:fb:c7:d2:f9:22:b5:8f:ef:c2:82:7e:e3:a3:ac:a8:0e:99:
6f:29:63:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net