Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/FhBIS1oPkd9pTGuzUmZAfI1zqao.roa
File: FhBIS1oPkd9pTGuzUmZAfI1zqao.roa (raw, json)
Hash identifier: 7QOPsIrD6zeyN12zbcfLMatMMhBciTAhTQcY5qqAE98=
Subject key identifier: 16:10:48:4B:5A:0F:91:DF:69:4C:6B:B3:52:66:40:7C:8D:73:A9:AA
Certificate issuer: /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial: 0194236912C1603E3D0CD22DC22375CEBD74
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/FhBIS1oPkd9pTGuzUmZAfI1zqao.roa
Signing time: Wed 01 Jan 2025 19:47:56 +0000
ROA not before: Wed 01 Jan 2025 19:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44350
IP address blocks: 185.161.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:12:c1:60:3e:3d:0c:d2:2d:c2:23:75:ce:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
Validity
Not Before: Jan 1 19:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1610484b5a0f91df694c6bb35266407c8d73a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:79:73:30:96:66:98:44:23:e6:27:c2:38:
68:07:95:6d:51:ba:24:92:bb:16:0b:79:59:67:b0:
34:45:81:fa:b0:08:bc:83:8d:f5:72:ff:20:89:2f:
6b:88:c9:05:36:7c:48:15:d7:46:01:8a:6e:61:19:
27:d8:05:7b:da:78:63:69:61:c8:29:00:c0:ab:4e:
ef:96:26:06:5e:d8:ee:f5:65:af:11:60:9f:cb:95:
38:37:4f:13:bb:32:2b:2b:0a:1e:7c:87:a8:8f:49:
e5:23:09:5a:bc:44:b9:1b:e5:c6:8f:b0:8e:e4:8e:
bb:18:d7:cc:bb:e6:a0:89:e7:96:c3:4f:c7:17:d2:
94:71:66:8c:a6:f4:ca:ee:35:88:85:42:33:ba:90:
e1:4a:17:ac:aa:40:c1:ee:77:ac:1f:72:35:65:52:
1b:b5:1f:f8:5c:0e:7a:8f:0b:8d:10:a6:43:8c:fe:
f5:9e:6c:df:df:1e:82:9c:6a:65:14:07:92:26:85:
b3:08:62:36:20:80:14:53:03:03:ea:f9:10:ac:ee:
cc:93:c2:36:18:bf:ff:8a:ec:5e:71:a0:c1:0d:58:
4a:61:6e:65:09:ed:ec:c4:37:b6:ed:c7:0f:5e:bb:
9a:ab:a9:3b:79:5c:d9:28:0a:54:12:40:f0:13:07:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:48:4B:5A:0F:91:DF:69:4C:6B:B3:52:66:40:7C:8D:73:A9:AA
X509v3 Authority Key Identifier:
keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/FhBIS1oPkd9pTGuzUmZAfI1zqao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.161.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e5:1b:d3:a5:4b:d3:b6:6d:5c:21:42:c0:c3:da:45:c0:cd:
f6:9c:49:0d:33:b5:58:0d:c0:f3:a8:e8:e8:06:fa:47:b1:c4:
6d:cf:1f:55:bd:bd:26:7d:21:7d:d2:9d:54:41:c0:9f:11:8d:
ce:3b:17:e7:05:10:b6:20:17:90:86:91:2a:87:29:8c:ed:27:
84:47:74:fc:a9:fd:05:24:c6:4d:5a:72:04:be:70:3b:41:d2:
7d:b6:68:5a:0c:2c:7a:73:28:e1:9a:21:84:40:1c:ee:fe:d6:
41:52:12:b5:97:91:54:c7:60:09:d4:e1:a3:f3:f7:77:c4:28:
23:0d:60:8e:f1:a6:d6:39:f9:4f:36:70:bf:10:e2:6b:d8:53:
d8:25:ba:38:6f:28:0e:fc:fc:ca:63:2a:27:89:2c:21:3d:86:
ce:f0:d3:62:d7:11:5d:2d:64:3c:4a:c2:76:f6:11:d2:07:27:
2a:94:44:2b:d6:16:3d:57:f2:8f:75:cc:74:9d:63:62:db:e7:
9b:7e:b7:f3:e7:bc:19:e4:56:17:37:ef:69:26:12:8d:f9:42:
93:03:b8:e4:29:78:86:e8:65:8e:6f:6a:11:41:4b:fa:2e:d7:
6b:60:52:19:8f:b0:83:6f:73:cb:27:7c:88:5f:2e:3b:62:61:
b4:94:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net