Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Fb57lcRpRWa2KXoVSXH4uTnaBQ8.roa
File: Fb57lcRpRWa2KXoVSXH4uTnaBQ8.roa (raw, json)
Hash identifier: vQRP2g456Mh02yikXupxBVWlzuhG+w99VNg8d4lh3rM=
Subject key identifier: 15:BE:7B:95:C4:69:45:66:B6:29:7A:15:49:71:F8:B9:39:DA:05:0F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E493927FB22AF18DDEFBB95074C4D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Fb57lcRpRWa2KXoVSXH4uTnaBQ8.roa
Signing time: Wed 01 Jan 2025 15:48:57 +0000
ROA not before: Wed 01 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 213.145.68.0/24 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:49:39:27:fb:22:af:18:dd:ef:bb:95:07:4c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15be7b95c4694566b6297a154971f8b939da050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:37:21:d6:c1:30:0b:47:72:08:82:43:d9:
d5:3c:1c:3a:b5:af:2c:f3:1f:1f:1d:8c:03:4a:20:
5e:c4:a0:aa:6b:c7:f1:36:ff:0b:be:9f:e1:e6:bf:
69:04:0f:aa:c0:b4:c1:87:fe:11:2d:57:49:b8:b2:
d5:65:43:c8:72:b1:c5:81:98:c1:b6:c3:40:47:77:
de:1c:1b:22:07:2b:a3:00:c5:04:5e:c9:98:92:cc:
1b:d8:36:74:42:b0:28:91:8c:61:89:38:ca:d9:1b:
0a:16:8c:4c:f3:94:69:25:98:92:a7:66:72:e9:5e:
94:d5:58:93:c4:6a:f4:f9:c5:12:45:8f:6f:09:84:
22:40:40:a8:c1:d2:f3:44:f4:2e:ab:9f:d3:43:34:
03:cf:32:a2:9c:18:16:04:2d:15:13:0e:2c:1b:af:
f2:0c:ad:5d:01:c1:11:3e:36:c9:9d:f4:5f:0c:0c:
45:6c:32:4d:5c:0c:4d:a3:ab:12:2d:99:a8:4d:1c:
c6:5d:7e:f9:7a:83:62:9b:56:72:f3:92:3e:4b:97:
06:f5:81:ea:85:4e:4d:6e:b1:15:ac:fc:f5:86:38:
b5:3a:de:81:d0:4b:99:3c:e5:ec:9c:90:47:6a:e5:
02:6a:ff:e5:dd:d5:0c:85:3a:3c:76:31:9b:15:e4:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BE:7B:95:C4:69:45:66:B6:29:7A:15:49:71:F8:B9:39:DA:05:0F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Fb57lcRpRWa2KXoVSXH4uTnaBQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.68.0/24
213.145.71.0/24
213.145.82.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:2e:c7:0e:d2:16:92:b0:41:6b:10:cf:8e:58:20:08:ce:f9:
8b:e0:ab:0b:3b:0a:b5:50:2d:17:da:4e:65:0e:72:42:6e:ee:
07:d9:1d:4c:5b:45:a1:93:6f:a9:5c:ac:da:96:e0:1a:d0:38:
96:0c:24:e3:16:b5:60:aa:38:d4:b0:02:1c:35:04:f6:89:ef:
ca:15:bb:82:c9:70:c4:5e:c6:e1:c0:2d:d7:9c:48:59:5c:33:
2b:b8:c3:67:50:4d:bf:19:d5:4b:49:80:2c:d6:3d:f3:5b:d5:
21:4a:bf:5a:76:73:22:6f:55:58:bf:b5:38:e9:fb:6e:74:5d:
be:0f:be:e2:21:92:d5:91:46:43:18:04:8b:1a:7d:e5:c3:30:
c5:b2:97:1a:bd:25:b5:4a:a6:73:d5:cd:8f:7b:a8:1e:e0:78:
09:8e:94:16:73:ca:d0:dd:a7:76:92:d3:2d:eb:72:ba:bf:85:
62:24:de:c8:de:2f:7e:a6:84:42:79:87:b8:dd:54:fa:dd:a5:
43:08:15:64:60:66:4c:9c:9f:3d:99:32:39:06:0c:7e:f8:d8:
c7:52:58:7f:08:c9:db:f8:e2:f0:4c:0e:18:b2:60:cc:15:c6:
0a:01:58:ec:59:9e:4d:d1:73:62:79:1e:68:94:75:fc:55:c2:
7e:8d:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:27 2025 by rpki-client on console.sobornost.net