Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa
File: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (raw, json)
Hash identifier: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=
Subject key identifier: 16:1B:F0:66:66:5B:15:0E:7F:5D:2B:B8:5D:D6:64:15:E8:F7:8E:F1
Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial: 0194266BA2273315ED228F1685C0DE5358FE
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202672
IP address blocks: 185.157.180.0/24 maxlen: 24
185.157.181.0/24 maxlen: 24
185.157.182.0/24 maxlen: 24
185.157.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a2:27:33:15:ed:22:8f:16:85:c0:de:53:58:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=161bf066665b150e7f5d2bb85dd66415e8f78ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:d3:56:a3:1e:9e:f7:04:37:21:99:dd:3c:
e1:16:02:96:f6:58:ea:c6:dc:e0:23:be:a7:da:12:
4c:75:d2:10:02:a8:6a:c4:8e:bd:e4:23:34:e7:23:
eb:44:0a:cb:fc:1e:2a:c6:a8:bd:25:6e:61:43:df:
5b:ab:30:58:31:f7:b4:f0:71:c1:b5:20:80:e7:a5:
88:29:a9:8f:1c:d5:0d:b7:a4:49:f5:61:4b:e3:36:
bf:ef:e0:64:9d:ac:ed:3f:88:f2:4b:36:63:e2:0d:
dc:51:ca:78:03:f6:3c:e9:bd:b1:1f:74:fd:bd:a5:
b1:35:47:d3:9e:ff:70:4a:11:04:16:b9:40:d5:91:
c3:78:e1:f8:af:9d:6b:8f:45:f2:0e:50:26:cc:9e:
10:19:53:61:40:7d:3f:ec:db:29:aa:ce:05:ac:8c:
b3:41:96:88:67:b4:ce:4a:7e:bb:59:ed:37:bb:80:
8d:09:dd:c5:f5:4a:fe:ba:8a:82:6f:d5:e2:05:5d:
1a:0c:3e:6e:91:43:e7:92:15:ba:cf:3a:1e:bf:57:
1a:db:e7:15:74:65:9f:17:21:a4:38:1b:2f:61:40:
ad:51:b5:e8:34:3e:af:2f:f6:05:05:12:1b:1a:5c:
a6:37:89:e5:5c:f7:a2:d7:30:38:30:95:08:a4:8e:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:F0:66:66:5B:15:0E:7F:5D:2B:B8:5D:D6:64:15:E8:F7:8E:F1
X509v3 Authority Key Identifier:
keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.180.0/22
Signature Algorithm: sha256WithRSAEncryption
97:9a:97:1f:d4:ec:c3:34:7a:ab:8c:08:f7:bc:d2:59:36:db:
17:61:39:4a:89:c2:09:3d:c6:09:d9:19:a1:6a:0f:b3:be:3d:
4e:cc:a4:f0:f8:04:5e:ab:4f:98:cd:42:93:1a:ec:33:ee:c5:
0a:bc:aa:75:97:0e:7c:b8:3b:90:93:e0:84:b0:fe:03:d2:ec:
3f:e1:8f:84:eb:f5:9c:69:a8:f9:60:d9:19:07:6e:18:7a:09:
97:f0:ac:3f:05:e1:22:9a:a5:7d:d7:83:4b:a6:da:f5:cc:e9:
22:6a:28:ff:81:8e:65:76:67:1c:9e:b6:fb:89:50:94:99:44:
58:09:3b:6c:58:2b:8f:bf:a3:d3:4b:bc:3e:a9:d8:9e:1b:9e:
36:1d:37:eb:08:05:0a:f8:05:20:6a:27:14:e7:a3:5a:fd:60:
97:94:6d:a9:15:fd:75:0a:2c:c5:4b:42:04:7b:8e:97:2c:0f:
4f:e6:86:6f:00:cc:92:f7:a3:91:f5:b1:e6:5e:57:70:28:f2:
47:78:e1:1e:40:7f:9e:70:01:c0:e7:98:80:11:9f:bc:d3:98:
76:e5:a5:b2:ed:75:43:5c:68:ff:87:85:3a:b8:b2:65:95:d6:
18:96:35:6b:44:93:89:1a:e7:92:1a:58:6d:4b:6a:22:fd:df:
70:e7:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net