Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/mFCab-YMnaPwjq0SGjjSKVSwCvs.roa
File: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (raw, json)
Hash identifier: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=
Subject key identifier: 98:50:9A:6F:E6:0C:9D:A3:F0:8E:AD:12:1A:38:D2:29:54:B0:0A:FB
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 0196291BF2CAE442FC445B91B5EFBE1B60DA
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/mFCab-YMnaPwjq0SGjjSKVSwCvs.roa
Signing time: Sat 12 Apr 2025 08:26:59 +0000
ROA not before: Sat 12 Apr 2025 08:26:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60144
IP address blocks: 86.105.182.0/24 maxlen: 32
185.197.160.0/22 maxlen: 24
193.42.108.0/22 maxlen: 24
2a0f:ea80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:1b:f2:ca:e4:42:fc:44:5b:91:b5:ef:be:1b:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Apr 12 08:26:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98509a6fe60c9da3f08ead121a38d22954b00afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:4c:80:2b:69:46:62:99:ff:86:44:31:dc:
9b:d6:51:6e:d4:e8:e4:2e:ef:9a:8b:2a:b8:fb:6e:
d8:c1:19:cc:63:bc:b2:ac:f2:34:a7:14:c9:ca:e7:
00:cc:b0:05:a9:15:d0:03:34:48:8f:1d:cc:b1:41:
96:78:e3:56:a5:79:1c:64:0c:77:e0:d9:13:2c:3f:
11:57:23:a0:41:29:ed:da:df:86:91:ed:4b:09:e0:
8c:32:24:5a:3a:7c:cf:a1:b7:d0:47:29:fb:9e:7a:
31:1a:8f:83:54:4b:40:a6:ff:bf:43:df:fb:6f:d7:
b9:ad:0a:b6:3a:ac:ed:c1:ba:12:b0:19:44:d6:51:
0d:45:e6:a3:68:98:e0:65:31:8b:2d:b1:4e:9e:fb:
0e:e5:02:92:30:b0:0c:16:4d:be:03:b9:7e:ee:bf:
2f:af:9e:5b:71:5e:dc:bf:9c:a4:5a:04:a8:a9:c5:
01:00:ab:38:cf:7e:87:45:47:94:65:af:47:b7:30:
35:91:df:d4:86:e7:9d:69:8c:8c:ee:43:9d:f9:f8:
fb:f6:19:80:f3:20:6c:c9:e9:0c:e7:79:21:5b:7c:
e9:9a:f8:bb:d6:47:cc:eb:c3:0e:76:cd:1b:e8:d2:
b8:a5:ce:48:d0:0f:93:cb:cb:1d:00:c1:08:2f:f0:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:9A:6F:E6:0C:9D:A3:F0:8E:AD:12:1A:38:D2:29:54:B0:0A:FB
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/mFCab-YMnaPwjq0SGjjSKVSwCvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.182.0/24
185.197.160.0/22
193.42.108.0/22
IPv6:
2a0f:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
81:5b:16:bb:af:61:50:38:1b:25:ec:48:59:1e:1a:43:58:68:
e3:e8:98:c5:94:49:3b:6a:43:fc:62:13:4f:fd:01:ba:ac:d4:
3d:94:ef:93:20:74:2a:61:09:88:e5:bc:5d:c2:47:ba:ba:61:
0d:10:37:c2:b6:a3:3e:69:03:00:fc:40:48:9c:da:40:6d:c3:
7c:8c:08:30:19:7f:bf:33:6f:a1:29:93:94:27:e8:3c:25:91:
ec:0e:99:65:f9:b1:e5:5c:62:6a:0d:5d:4e:a0:54:8e:f4:bb:
35:c6:74:bf:8e:0c:2c:7a:d7:0d:25:55:8a:b9:49:61:74:3b:
3d:79:2b:14:07:be:e6:cc:af:92:f6:42:4b:bc:4a:14:09:ed:
0e:8a:51:a9:88:1c:af:1a:1c:7f:e2:c9:24:53:f3:67:b0:d5:
91:6b:dd:cf:55:56:b1:18:11:54:15:8c:d9:2e:98:22:6c:01:
c5:7d:f6:99:a1:59:83:f2:6c:f0:1d:98:ef:01:e5:cf:2b:75:
5d:dd:3f:b5:5b:e5:85:91:11:ef:03:76:d7:5c:41:d3:b5:b5:
f4:e9:1e:26:c6:23:3a:d1:74:d1:19:42:40:35:ea:c1:1e:47:
a1:bc:7f:b4:1c:1b:a6:e0:e9:ad:38:ad:b4:12:1f:8e:4d:52:
a9:81:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net