Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/oAsyO0CJws2AMTge7-6JSychHyY.roa
File: oAsyO0CJws2AMTge7-6JSychHyY.roa (raw, json)
Hash identifier: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=
Subject key identifier: A0:0B:32:3B:40:89:C2:CD:80:31:38:1E:EF:EE:89:4B:27:21:1F:26
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 0194228D9D20CB344DBA95CF72E5A2CC0EBF
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/oAsyO0CJws2AMTge7-6JSychHyY.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44709
IP address blocks: 185.229.226.0/24 maxlen: 24
212.115.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9d:20:cb:34:4d:ba:95:cf:72:e5:a2:cc:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00b323b4089c2cd8031381eefee894b27211f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:5c:97:68:ec:e6:9b:cd:d8:fc:6f:2f:72:
e3:da:50:38:d6:a9:57:9f:ab:ba:60:8f:e6:b0:8b:
94:49:e3:2d:a1:aa:2c:73:ae:83:b9:14:08:41:43:
23:1a:fb:b1:03:3a:30:b9:bc:91:0e:e0:8e:3e:25:
40:94:7b:62:c3:8e:28:ab:a9:0b:34:fc:9e:06:a2:
6d:ce:3b:f3:5a:12:fb:22:eb:9a:6f:4c:7c:6c:65:
da:af:87:a6:c3:16:54:ba:59:a8:2d:9e:99:a5:6a:
a8:35:40:91:8c:2f:25:84:62:a6:b7:49:cb:31:27:
e0:70:8c:74:0b:5a:34:3f:39:cb:dd:53:5e:24:0c:
6f:33:ef:52:78:72:0a:35:06:5a:eb:66:fc:aa:c0:
4c:e7:c9:6a:77:ff:fa:d7:92:b9:75:1d:39:b5:f2:
20:66:5b:3d:ae:60:2b:75:bf:fd:83:3e:c2:c3:72:
99:ba:6f:f0:fc:44:2e:29:c9:6f:a2:65:09:6f:cd:
30:e7:58:71:28:13:a7:ef:35:d7:b1:aa:ba:7e:37:
c6:4b:55:7f:24:5d:77:e8:ab:49:f6:ff:36:ed:f6:
1c:bf:40:d2:2e:90:73:0f:5a:56:0f:cd:17:78:69:
b7:68:da:a9:82:2e:fd:c5:52:96:b5:9d:2a:42:9f:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:32:3B:40:89:C2:CD:80:31:38:1E:EF:EE:89:4B:27:21:1F:26
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/oAsyO0CJws2AMTge7-6JSychHyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.226.0/24
212.115.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ff:10:63:6b:b4:8f:fa:4b:6d:b0:2a:cc:e8:70:9b:54:70:
b2:6b:8f:97:d3:a2:83:45:02:7e:69:ec:3a:58:c8:8e:e2:d1:
57:31:4e:88:55:84:f1:28:53:1a:10:a5:25:6b:85:c3:10:45:
d1:a6:87:d0:4f:e8:e1:99:9a:01:14:4b:f3:a1:06:1d:94:00:
49:47:1b:70:bd:70:95:8c:75:14:d5:bf:b5:75:a4:6e:9f:f7:
bb:b3:73:71:71:10:b9:e6:5c:5b:c1:23:2b:ba:3e:38:07:e6:
80:de:b5:71:6d:de:85:4c:de:df:64:bf:f1:8d:fa:dc:b9:12:
07:24:86:e5:25:7f:dd:1e:d7:3e:07:be:23:e1:e5:73:ca:19:
06:b8:35:e2:e0:16:12:78:0b:6a:50:45:b4:6b:15:49:01:07:
9e:08:33:b6:23:fe:4c:ce:f7:fa:79:0e:c5:0c:6b:95:3a:c9:
1a:ad:53:8b:56:5c:35:b3:93:a6:ca:aa:ca:ae:32:83:75:82:
90:c7:96:6c:55:0e:d7:65:ef:f1:8d:3f:50:a2:04:30:ab:89:
35:cc:1a:e5:ed:01:b1:61:7c:e0:0b:08:20:35:a8:2f:38:d9:
e5:48:4e:db:62:e1:b7:74:75:dd:03:ee:6d:40:e8:09:95:8c:
9f:20:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net