Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/fN8SYZ83oc_gHjiIm2H8fBBsylM.roa
File: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (raw, json)
Hash identifier: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=
Subject key identifier: 7C:DF:12:61:9F:37:A1:CF:E0:1E:38:88:9B:61:FC:7C:10:6C:CA:53
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019420D5CDEEEF00F1DD88FB7C7E5EA596A4
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/fN8SYZ83oc_gHjiIm2H8fBBsylM.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29122
IP address blocks: 82.101.64.0/18 maxlen: 18
217.30.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cd:ee:ef:00:f1:dd:88:fb:7c:7e:5e:a5:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cdf12619f37a1cfe01e38889b61fc7c106cca53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:a5:d3:8b:7f:f0:5f:29:f6:fd:a3:73:c9:
2c:18:55:70:98:3a:df:64:6a:e5:e0:f6:66:f3:3f:
19:7d:6e:4b:cc:2f:8a:8a:39:2f:1b:d9:bf:33:0a:
01:0f:44:05:48:0c:49:f3:04:26:1e:5f:89:72:32:
63:30:c0:3c:fc:26:ea:07:25:61:a1:5a:9d:34:0c:
65:c0:c0:02:6f:2b:79:ce:66:e5:d7:cb:dc:7e:fb:
90:7d:63:73:d0:0c:d9:5d:11:0a:cd:6c:9a:32:8f:
cf:70:d4:24:3b:e4:ed:11:0f:df:5d:7e:ce:f6:c1:
84:c7:9b:98:de:91:c2:04:5c:53:8a:a9:f9:f9:98:
91:1a:8b:cd:60:63:9d:3d:0e:97:a5:db:5c:f9:a4:
72:b6:5b:a9:14:96:b2:3c:2e:97:55:47:7e:ca:b1:
5c:9d:f5:c7:4c:90:6a:e4:e5:01:63:25:7f:3b:2f:
1d:e4:6c:f1:e7:44:08:79:e1:76:b0:64:2a:13:22:
87:e6:9f:45:eb:3e:35:a3:a7:55:b9:42:3f:30:c6:
65:be:bc:f3:d2:76:3e:d5:47:0b:7e:1b:39:c0:91:
96:75:d1:0b:c8:2d:d8:74:8e:4c:89:e0:50:26:c0:
38:57:84:3b:40:b2:5e:cb:42:49:32:02:55:eb:cc:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:12:61:9F:37:A1:CF:E0:1E:38:88:9B:61:FC:7C:10:6C:CA:53
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/fN8SYZ83oc_gHjiIm2H8fBBsylM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.101.64.0/18
217.30.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:07:18:53:eb:ee:eb:53:19:b2:9d:af:3c:68:49:09:34:68:
e9:8a:ea:fd:23:4c:5b:c1:86:65:46:9c:0c:30:a4:39:c5:29:
1c:3d:4e:f0:e6:df:33:ea:ab:eb:c5:f1:0d:0f:75:24:3c:14:
93:9d:c4:7f:bf:f1:53:e5:ea:2d:88:65:21:41:61:5a:f9:5f:
f5:a2:5e:1e:c7:90:d7:9c:ca:bc:32:d8:f7:d3:05:ee:6d:42:
d6:e9:bc:32:40:bc:b4:ef:8f:6a:fe:f8:06:d9:ab:14:4e:03:
f0:b3:68:1b:93:d1:ea:b6:36:c2:0a:fd:ce:e2:ec:08:59:7b:
d6:84:4b:e0:1b:13:aa:96:f0:6b:fe:d7:f1:42:4e:4b:70:ed:
43:db:31:12:63:53:9b:c3:e6:53:a0:0b:30:e3:8f:03:3c:62:
83:8d:7c:23:76:ef:4d:f2:24:06:b7:b9:cd:8d:8c:08:5d:92:
20:0f:2b:fc:d1:9f:36:ae:93:a4:b3:10:cb:87:d5:7e:31:25:
8e:7a:42:85:88:14:e8:15:c9:92:1c:55:76:b5:af:dd:52:4b:
b2:79:62:53:a7:ab:6b:a0:6d:36:c0:17:7e:4e:3b:c7:39:e2:
8d:8d:50:53:a3:fc:06:f1:82:fa:9c:bf:97:66:18:d1:6e:3b:
f0:82:6b:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1c3u7wDx3Yj7fH5epZakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RmMTI2MTlmMzdhMWNmZTAxZTM4ODg5YjYxZmM3YzEwNmNjYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiOl04t/8F8p9v2jc8ksGFVwmDrf
ZGrl4PZm8z8ZfW5LzC+KijkvG9m/MwoBD0QFSAxJ8wQmHl+JcjJjMMA8/CbqByVh
oVqdNAxlwMACbyt5zmbl18vcfvuQfWNz0AzZXREKzWyaMo/PcNQkO+TtEQ/fXX7O
9sGEx5uY3pHCBFxTiqn5+ZiRGovNYGOdPQ6Xpdtc+aRytlupFJayPC6XVUd+yrFc
nfXHTJBq5OUBYyV/Oy8d5Gzx50QIeeF2sGQqEyKH5p9F6z41o6dVuUI/MMZlvrzz
0nY+1UcLfhs5wJGWddELyC3YdI5MieBQJsA4V4Q7QLJey0JJMgJV68zfQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHzfEmGfN6HP4B44iJth/HwQbMpTMB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvZk44U1laODNvY19nSGppSW0ySDhmQkJzeWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGUmVAAwQE
2R7QMA0GCSqGSIb3DQEBCwUAA4IBAQAKBxhT6+7rUxmyna88aEkJNGjpiur9I0xb
wYZlRpwMMKQ5xSkcPU7w5t8z6qvrxfEND3UkPBSTncR/v/FT5eotiGUhQWFa+V/1
ol4ex5DXnMq8Mtj30wXubULW6bwyQLy0749q/vgG2asUTgPws2gbk9HqtjbCCv3O
4uwIWXvWhEvgGxOqlvBr/tfxQk5LcO1D2zESY1Obw+ZToAsw448DPGKDjXwjdu9N
8iQGt7nNjYwIXZIgDyv80Z82rpOksxDLh9V+MSWOekKFiBToFcmSHFV2ta/dUkuy
eWJTp6troG02wBd+TjvHOeKNjVBTo/wG8YL6nL+XZhjRbjvwgmuQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net