Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/fuJdLqdlLbSFzR5wICuESp5-Mhc.roa
File: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (raw, json)
Hash identifier: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=
Subject key identifier: 7E:E2:5D:2E:A7:65:2D:B4:85:CD:1E:70:20:2B:84:4A:9E:7E:32:17
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 01961FFE4BC76943958F871CE187EF03B030
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/fuJdLqdlLbSFzR5wICuESp5-Mhc.roa
Signing time: Thu 10 Apr 2025 13:58:01 +0000
ROA not before: Thu 10 Apr 2025 13:58:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 2.56.169.0/24 maxlen: 24
91.236.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:fe:4b:c7:69:43:95:8f:87:1c:e1:87:ef:03:b0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 10 13:58:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee25d2ea7652db485cd1e70202b844a9e7e3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:ce:7e:c8:3c:dd:17:33:89:ac:5d:04:b6:
06:ef:48:2b:53:d8:60:86:1f:6d:34:5d:f2:77:77:
a5:27:05:18:7c:75:fe:08:8f:5d:ba:ab:aa:03:82:
c8:d3:bc:de:5a:c5:97:d5:50:4c:4f:97:75:62:9d:
cf:c3:4b:23:84:94:4a:c3:15:8d:77:8d:c1:e0:4b:
40:31:16:7f:fb:ad:cb:1d:2f:44:b8:3f:29:fd:5b:
ea:90:f3:ba:e9:77:2d:74:3d:18:57:ff:5f:af:8a:
da:b9:16:80:38:9e:ff:14:8e:35:59:b5:69:da:09:
3b:94:18:ab:14:4d:18:74:48:e9:58:b4:0e:4a:dc:
8b:9c:1e:05:32:c2:d6:86:18:1b:c9:01:f7:b8:63:
45:23:23:7e:a8:9a:1e:38:56:90:1c:42:5e:dc:4d:
c4:d9:e2:e5:bb:2d:53:c5:80:31:80:a1:9c:5f:6d:
3a:26:f9:90:a9:a4:60:dc:ae:b1:5e:70:fe:4f:96:
b9:6d:47:4f:c4:2b:83:70:d9:12:99:0f:25:13:10:
0c:21:5c:9f:a2:eb:6c:de:ba:95:7b:1b:b5:a5:e0:
82:06:01:0c:69:06:b5:0c:64:31:d7:bd:d3:90:9a:
01:5e:2a:ca:cb:39:f1:6a:d0:95:23:0d:d6:3c:1a:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:5D:2E:A7:65:2D:B4:85:CD:1E:70:20:2B:84:4A:9E:7E:32:17
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/fuJdLqdlLbSFzR5wICuESp5-Mhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.169.0/24
91.236.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fc:5b:55:d1:5c:96:87:e2:2b:15:47:20:83:f4:e8:81:c0:
f8:6e:ca:8a:59:63:ea:c5:30:06:7d:34:cb:e8:21:2c:d6:4d:
12:13:2e:85:b3:85:7f:0e:26:2b:17:eb:4d:5f:ae:5e:3a:5f:
9a:7f:92:7c:9b:0d:2a:d2:1c:3a:4e:12:a1:40:82:7f:fb:d8:
d1:4e:af:72:92:8c:18:38:5a:68:cb:95:da:84:79:cf:79:f6:
95:7c:70:a1:e4:6c:8d:0b:1d:61:03:a2:bd:ed:12:70:56:48:
8e:18:27:58:f6:64:29:9e:d5:2c:bc:af:49:9e:94:6f:68:44:
9b:e1:f0:ae:10:69:f0:d2:b2:ea:21:01:5f:7e:1a:e9:da:22:
d8:10:00:b5:d9:ae:4f:4c:ed:5d:24:55:20:c1:ab:43:e9:ef:
e9:66:78:e1:d5:0b:f8:da:ba:8b:14:9e:c5:d0:23:6b:fd:1d:
b0:30:82:59:81:41:20:3e:da:83:65:8d:61:60:b2:d8:67:af:
bc:08:44:5f:69:92:93:25:fe:ec:9e:c5:33:71:2a:f2:50:65:
35:0d:20:99:70:32:c5:ac:1b:6a:73:ea:cc:04:7a:eb:13:85:
ed:9c:ea:59:12:02:45:7a:22:22:cc:cd:db:10:d5:87:ec:dd:
61:9e:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net