Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/8F6oIJ5IHZd8MF23epO421FbaZ4.roa
File: 8F6oIJ5IHZd8MF23epO421FbaZ4.roa (raw, json)
Hash identifier: 2zFETc0k3dyxW/grkCrox+Mdhj0zexUQxGzwlX0TRnQ=
Subject key identifier: F0:5E:A8:20:9E:48:1D:97:7C:30:5D:B7:7A:93:B8:DB:51:5B:69:9E
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 0194221FA99C66B5356E1C57040CB22E5D6F
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/8F6oIJ5IHZd8MF23epO421FbaZ4.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57507
IP address blocks: 158.255.192.0/20 maxlen: 24
185.152.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a9:9c:66:b5:35:6e:1c:57:04:0c:b2:2e:5d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05ea8209e481d977c305db77a93b8db515b699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:91:97:d7:95:47:ef:be:98:3a:72:6e:ba:
92:8d:64:cc:1f:af:06:7d:5e:f2:60:bf:97:7a:93:
a6:cd:1e:e8:98:ad:11:bb:d5:7f:17:41:b1:e3:2d:
c9:8d:79:72:de:13:d6:af:0f:cd:e5:d9:ef:7d:05:
b1:d6:8c:e6:61:bc:6c:5b:84:93:3b:37:86:33:59:
75:a0:6b:be:94:ff:2e:15:f1:6f:2d:9e:8e:b1:ff:
dd:87:c5:00:61:51:35:bd:7b:44:82:d8:82:d7:f3:
05:06:7f:d3:cd:a5:e7:10:5a:81:d3:7f:9b:8e:d6:
49:ea:51:fc:a0:7b:53:41:91:f5:eb:16:f2:08:84:
32:fa:93:8d:bc:13:d4:fe:ab:a8:62:f9:cb:49:59:
c7:1d:8b:94:31:53:1c:60:2a:7b:08:a9:63:5a:bb:
e8:ee:62:c6:ee:80:c5:d2:f3:2e:ba:dc:de:31:8c:
21:59:ba:ac:b9:b3:87:62:21:f9:5b:a8:8c:c5:d1:
f2:d9:b0:77:ab:38:2c:62:e3:48:05:c4:3b:b4:3e:
73:ac:f5:15:7e:10:74:59:41:5d:68:2f:72:86:fb:
69:2a:47:31:af:ae:0d:d6:cf:af:08:60:c2:f8:1f:
f7:ee:98:9c:46:5c:4e:fa:bd:11:e2:c9:59:52:b8:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5E:A8:20:9E:48:1D:97:7C:30:5D:B7:7A:93:B8:DB:51:5B:69:9E
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/8F6oIJ5IHZd8MF23epO421FbaZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.192.0/20
185.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:eb:59:ed:55:b3:7d:a1:4b:cc:b4:8a:88:ec:14:01:ec:3c:
50:58:ee:43:af:7e:81:8a:7c:98:de:17:c9:25:8c:b7:56:2d:
bc:88:08:11:5f:e7:de:d7:b9:3e:0c:3d:38:4c:66:5a:d0:7e:
54:e7:96:ad:d0:85:7f:2e:26:22:ce:5f:e8:b6:dd:44:7b:e0:
f3:48:00:22:81:24:8a:3f:14:5b:96:30:4f:39:db:dd:18:0e:
1d:fa:ec:4b:5a:cb:b9:32:dc:59:56:65:91:4c:13:df:96:0f:
94:67:08:34:c6:be:76:ef:94:fb:65:02:ed:ae:c1:a2:af:28:
f1:b2:28:70:d1:3e:82:72:e5:6a:d8:04:66:57:5e:0e:35:9f:
95:84:74:6c:dd:ba:94:13:45:97:75:26:f5:8f:19:1d:c8:de:
07:35:8c:9c:b0:97:de:24:96:58:53:9c:67:60:83:53:c2:6c:
78:03:13:51:e7:2e:51:f0:18:cc:87:fc:81:d3:ee:58:8c:7e:
5a:6f:fc:1e:ba:7c:4f:90:6f:91:a4:0a:18:d0:73:68:84:c1:
e4:bf:45:f4:e1:61:20:dc:0d:0d:7e:79:95:84:ba:ab:70:df:
6e:f7:76:dd:84:5d:ae:e9:6a:c7:0c:8a:61:10:6a:4a:b1:94:
8c:e4:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:03 2025 by rpki-client on console.sobornost.net