Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa
File: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (raw, json)
Hash identifier: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=
Subject key identifier: 0B:0F:25:38:DF:5C:42:9C:8B:C5:62:EC:07:B0:C1:BD:89:DD:D8:1A
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019422FB27563A7E8B3C7B4A9654DF512C09
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa
Signing time: Wed 01 Jan 2025 17:47:52 +0000
ROA not before: Wed 01 Jan 2025 17:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39319
IP address blocks: 94.199.224.0/21 maxlen: 21
185.47.72.0/22 maxlen: 22
2a00:ed8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:27:56:3a:7e:8b:3c:7b:4a:96:54:df:51:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0f2538df5c429c8bc562ec07b0c1bd89ddd81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:49:41:76:e4:5d:10:6e:b3:1a:19:f5:d0:
d5:16:a1:46:32:2e:de:7f:d7:d2:aa:20:b3:0c:b0:
6a:0a:0e:32:4b:7c:5a:6e:49:46:81:4f:66:3c:45:
9b:1d:7f:75:08:cb:23:32:34:09:60:60:36:01:c0:
fb:06:fc:1b:45:6e:d1:eb:17:ea:74:b8:57:1f:15:
57:66:0f:f3:a9:98:6b:9e:ec:91:21:ad:35:c6:8f:
7d:e5:6a:ad:04:f4:64:8e:27:db:bb:a4:6c:5a:e1:
90:e8:4a:43:52:4b:ee:fd:80:5b:eb:91:76:b7:48:
4d:0b:c3:05:3a:ef:d7:f5:3c:13:2c:46:f3:83:3f:
41:de:62:ee:7b:3f:6c:da:34:1e:fa:85:d8:f2:09:
2a:8e:2e:7b:8c:51:4b:d8:74:06:c9:5f:1e:b7:46:
be:f2:58:b9:df:e2:6c:44:c1:ed:f5:2d:e6:75:40:
b5:6f:3c:77:86:d5:d4:df:92:6d:b6:b0:27:6e:ad:
eb:94:c8:9e:ff:7c:35:4b:12:ec:80:55:42:f9:c9:
8c:20:cf:00:b9:fc:3a:18:2f:0b:fc:bc:7a:73:b5:
e4:2a:3e:c7:c0:2f:ce:80:a7:49:cb:c0:31:6e:8c:
8d:6f:0e:e4:11:72:95:6e:97:8e:a3:da:e1:31:e6:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:25:38:DF:5C:42:9C:8B:C5:62:EC:07:B0:C1:BD:89:DD:D8:1A
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.224.0/21
185.47.72.0/22
IPv6:
2a00:ed8::/32
Signature Algorithm: sha256WithRSAEncryption
6d:1c:4a:1c:54:b9:59:e9:8b:cd:cd:dc:79:5d:b4:14:ff:0f:
bd:f0:2a:27:b1:b6:70:74:f5:72:9e:cf:41:e2:d2:f9:00:38:
4f:57:16:7f:fd:f6:27:25:df:43:38:75:83:71:73:3d:4c:51:
83:db:74:e9:b5:30:32:4d:c9:26:bf:b1:e0:d7:22:48:34:2e:
48:60:46:20:11:25:3c:a6:be:b1:91:03:4e:e1:7b:1f:c6:c0:
c8:ca:a5:69:b3:ab:7e:89:0a:40:fd:97:26:c2:1c:a9:07:47:
4c:9f:7e:66:ae:ef:17:47:eb:1f:c5:95:fe:34:bf:63:a0:a4:
12:a3:e5:49:a7:0c:ce:0e:80:7e:aa:c5:09:f8:13:89:21:21:
95:1a:51:ec:25:2d:38:6a:e6:df:65:57:50:51:e5:00:79:f7:
5e:26:3f:45:98:a9:a8:d6:ed:d8:74:c9:15:b7:5e:29:a8:a8:
74:a5:5f:61:21:16:70:cd:eb:ad:e5:54:2b:c8:0f:64:9c:6c:
95:b4:c8:68:17:32:27:32:e6:86:b7:3f:9b:f8:98:6f:dc:e6:
b6:a1:b0:78:3e:bf:8e:71:fa:bf:d2:96:3b:d2:2c:d3:31:1b:
0d:4b:7d:f8:22:27:85:fd:48:52:03:9a:bf:3a:e2:d2:a3:c9:
dc:be:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net