Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/FrztCKqYCSU41yHs-FigFa0H85w.roa
File: FrztCKqYCSU41yHs-FigFa0H85w.roa (raw, json)
Hash identifier: RjFVv75TF9wTHazX6BAAlQsVm5jIrUhlaCZKZtAdOks=
Subject key identifier: 16:BC:ED:08:AA:98:09:25:38:D7:21:EC:F8:58:A0:15:AD:07:F3:9C
Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial: 0194266A49C8753B0F131F6B66C876B321ED
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/FrztCKqYCSU41yHs-FigFa0H85w.roa
Signing time: Thu 02 Jan 2025 09:48:07 +0000
ROA not before: Thu 02 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47688
IP address blocks: 185.77.12.0/24 maxlen: 24
185.77.13.0/24 maxlen: 24
185.77.14.0/24 maxlen: 24
185.142.226.0/23 maxlen: 24
2a07:3146::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:49:c8:75:3b:0f:13:1f:6b:66:c8:76:b3:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Validity
Not Before: Jan 2 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16bced08aa98092538d721ecf858a015ad07f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:29:d1:e5:99:a3:20:2e:67:c3:b6:d7:fb:db:
c7:93:e2:1d:c0:8d:c2:21:6f:92:73:5f:b0:81:f9:
5c:e0:b5:90:8c:3c:a3:cb:91:60:7d:fc:2f:0a:e7:
c4:a2:86:22:b0:55:d2:b7:bf:83:67:0b:fa:b3:58:
c2:41:90:ed:b1:7e:58:a0:27:d6:1e:71:44:30:32:
b7:09:b7:32:77:1f:ce:d9:a2:1d:45:95:3a:2e:3c:
0a:45:58:7f:95:4e:93:01:c4:3a:0f:0c:24:e7:be:
63:76:13:b4:17:c1:39:8c:08:b5:a5:8d:10:ef:b5:
3e:58:40:e8:69:aa:60:4d:04:22:1e:22:1f:2e:82:
e7:e1:55:86:04:25:a6:f2:dd:fe:53:47:76:7d:d8:
d4:57:03:b6:bb:6e:f1:c4:3a:a1:e9:48:26:dd:75:
7f:4b:38:1b:f4:a0:63:d3:bc:f8:dd:73:5b:bd:84:
8e:ab:f8:62:4f:11:10:1f:76:31:a1:8b:d5:7b:a7:
e2:68:76:33:91:8c:0e:1a:ce:21:dc:b4:0a:f2:04:
b3:85:19:c0:49:10:b0:0f:db:65:67:44:7f:c0:b9:
ba:46:e1:34:e1:67:36:67:1c:52:29:0a:7c:7d:8a:
75:13:5d:71:04:b3:c8:52:d0:52:ac:ba:88:71:59:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:ED:08:AA:98:09:25:38:D7:21:EC:F8:58:A0:15:AD:07:F3:9C
X509v3 Authority Key Identifier:
keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/FrztCKqYCSU41yHs-FigFa0H85w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.12.0-185.77.14.255
185.142.226.0/23
IPv6:
2a07:3146::/32
Signature Algorithm: sha256WithRSAEncryption
70:e2:17:db:40:5f:c3:21:57:e6:93:01:fc:30:3e:db:a5:61:
bb:ca:d2:fd:77:99:07:7d:f8:91:40:36:8f:5c:a4:62:61:ac:
87:5b:fb:bf:80:e9:92:d8:ca:f9:cf:44:2e:fd:d0:ad:12:69:
c9:17:a3:79:a1:0f:c7:47:15:58:79:9f:66:ae:d7:72:9b:c4:
9c:68:8a:a7:e0:e0:17:e2:11:8f:bc:71:2a:41:9b:5b:35:f7:
c9:13:ef:76:aa:d5:a2:0a:ed:06:17:02:39:0f:1e:21:11:e1:
8b:6a:b3:ac:1b:cc:b6:f5:66:8d:96:aa:37:f0:b2:38:08:e3:
3d:aa:d2:b4:f1:c8:10:a4:7d:ff:2e:d7:cd:a0:47:28:82:8c:
00:81:81:44:e7:9d:63:1a:03:96:7e:80:69:1e:9c:59:46:75:
70:b6:46:08:f2:b3:92:9b:55:82:39:33:1c:c9:d2:fb:1f:66:
84:7d:54:27:1f:dc:e4:86:ec:4a:31:03:5a:9e:55:fc:c7:b2:
8c:cf:cb:ad:e6:9e:49:6f:8c:8c:58:ed:3d:cf:10:1c:c1:35:
c6:f2:46:52:9b:82:c7:29:c2:77:4c:ca:a2:f0:b1:98:60:8a:
f0:c2:55:65:36:b2:58:c9:93:91:1a:85:5c:11:80:ec:cd:92:
cd:f9:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:59 2025 by rpki-client