Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/FiQ6326ULjytbcRmbnTQT53B6qI.roa
File: FiQ6326ULjytbcRmbnTQT53B6qI.roa (raw, json)
Hash identifier: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=
Subject key identifier: 16:24:3A:DF:6E:94:2E:3C:AD:6D:C4:66:6E:74:D0:4F:9D:C1:EA:A2
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 0194258F7B3C01CCF0292344C98CDA4189B3
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/FiQ6326ULjytbcRmbnTQT53B6qI.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207843
IP address blocks: 2.58.164.0/24 maxlen: 24
2.58.165.0/24 maxlen: 24
2a0f:91c0::/48 maxlen: 48
2a0f:91c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7b:3c:01:cc:f0:29:23:44:c9:8c:da:41:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16243adf6e942e3cad6dc4666e74d04f9dc1eaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:a4:47:e8:d0:c8:09:35:84:f2:9e:e6:35:
52:0f:ff:b4:2a:88:37:8d:37:4e:8c:d8:b0:51:0c:
d4:0d:c5:c3:10:60:a5:f9:f5:6e:cc:cc:4e:59:4a:
46:ef:b7:ac:1f:95:04:01:70:3f:d0:bc:c1:91:c9:
31:a2:b4:f2:6b:ca:e7:5c:88:c2:a0:6c:25:8a:57:
00:ef:95:b9:82:98:b9:36:bb:e6:c8:22:8b:53:c6:
b2:4f:d6:85:40:09:ba:13:7d:43:aa:c6:52:06:08:
6e:ad:ec:68:94:6a:56:d2:29:08:e2:80:40:9e:a1:
81:c6:92:9a:5d:6a:56:19:4e:06:1a:89:4d:88:79:
a9:a7:aa:1c:fe:66:ea:22:b1:b1:84:f6:11:bf:e0:
10:33:8d:c3:2a:f1:6f:97:10:e7:20:27:e2:e9:15:
58:68:f5:79:79:b1:b3:a3:74:e2:c3:e9:34:f4:36:
7e:31:0d:de:9d:de:15:89:ac:c5:cc:02:69:82:c5:
94:57:41:ec:d0:2b:10:00:ef:9d:2a:4c:3e:05:25:
70:1e:cc:69:86:f3:48:f1:12:0c:96:d8:b1:02:e2:
20:60:07:26:ab:2c:78:b2:6b:f7:9a:40:16:e3:aa:
83:e9:5f:12:3b:b9:b6:9b:1f:a1:e7:26:b2:55:27:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:3A:DF:6E:94:2E:3C:AD:6D:C4:66:6E:74:D0:4F:9D:C1:EA:A2
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/FiQ6326ULjytbcRmbnTQT53B6qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.164.0/23
IPv6:
2a0f:91c0::/47
Signature Algorithm: sha256WithRSAEncryption
1a:68:dc:6e:4b:6e:b5:47:9d:40:80:39:ac:3e:ca:4c:19:be:
7d:ff:45:c2:8e:ac:6c:1f:68:7f:96:25:f4:68:18:e2:ae:db:
14:e3:01:10:00:22:33:b3:8c:37:21:71:93:44:39:83:39:43:
c0:40:d8:40:1e:10:ac:aa:50:a0:02:8d:65:50:bb:a3:ca:4c:
a6:14:78:67:1c:88:ee:33:08:97:92:fd:e4:7d:06:d3:86:15:
6c:18:0c:a3:ed:84:b1:42:ed:21:0c:f7:41:f4:8a:a5:22:b9:
6b:1a:2f:36:6f:c4:c5:42:ca:fb:f4:91:3d:96:e6:59:ce:2e:
04:eb:60:23:2d:df:2d:4e:c5:d8:5e:63:c3:6c:ac:2e:3d:3f:
40:ae:6d:fa:ca:cc:fe:24:f0:04:43:3c:c8:cf:da:80:2f:cd:
30:8d:89:58:e2:23:2f:39:84:e4:d2:7a:d5:48:82:58:d5:b9:
79:be:5e:11:ee:ae:87:6c:fd:de:bb:92:ba:49:11:04:c8:a3:
81:44:5e:c6:dd:16:67:ed:1f:f8:66:91:18:4e:10:92:60:a0:
7c:ff:e8:77:63:44:db:ce:56:f5:26:fe:a6:9f:11:70:3c:bc:
77:e3:cd:23:05:d6:12:d0:86:a6:cf:95:20:ff:d7:86:76:22:
59:85:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net