Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/FeP6ktHBNaRwft0H-_e4k3vqEEI.roa
File: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (raw, json)
Hash identifier: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=
Subject key identifier: 15:E3:FA:92:D1:C1:35:A4:70:7E:DD:07:FB:F7:B8:93:7B:EA:10:42
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019423D72045BF634EB9556E1433C4129CC2
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/FeP6ktHBNaRwft0H-_e4k3vqEEI.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209974
IP address blocks: 46.243.185.0/24 maxlen: 24
77.105.148.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.154.0/23 maxlen: 23
93.183.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:20:45:bf:63:4e:b9:55:6e:14:33:c4:12:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e3fa92d1c135a4707edd07fbf7b8937bea1042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:1c:e2:2d:9f:32:bb:f3:d5:36:5c:63:b4:
fa:38:fb:73:e7:b3:4f:5d:ed:d4:d3:00:64:29:3b:
ae:48:d1:b1:6d:38:2a:dd:88:48:21:5d:05:3b:69:
18:87:0f:7d:3d:08:b9:ed:f3:81:2b:32:be:bb:4a:
e6:50:8e:60:26:a6:13:87:12:6e:df:a5:36:74:9e:
b1:63:49:79:de:9e:71:17:5e:6d:e2:38:f0:33:2a:
4a:93:65:81:98:37:10:0f:e3:5a:07:a2:b9:75:7d:
59:4d:f0:68:5d:e6:6c:e4:41:1f:f7:72:11:9f:78:
20:da:6d:87:de:b1:3c:49:95:4d:f1:72:77:70:f6:
9c:31:dc:78:58:37:58:c5:b4:d5:b7:02:1e:6b:04:
43:0c:51:54:50:bc:47:52:2a:ba:73:38:e0:cd:a9:
7a:f0:ca:17:ef:b4:dd:c8:a0:de:af:46:c8:ec:d1:
e7:86:05:93:27:7d:d8:77:f1:65:0b:8f:6f:36:21:
56:78:af:df:c9:12:0b:62:08:15:bf:9c:65:5c:59:
bd:0b:7d:fb:9b:1d:6c:e0:87:9a:fc:d1:63:49:dd:
15:15:71:95:9b:cd:c4:a4:49:6e:b8:85:ad:f9:62:
90:aa:51:75:d0:44:d9:92:e2:f1:13:b8:ca:f2:2e:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:FA:92:D1:C1:35:A4:70:7E:DD:07:FB:F7:B8:93:7B:EA:10:42
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/FeP6ktHBNaRwft0H-_e4k3vqEEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.185.0/24
77.105.148.0/24
77.105.152.0/22
93.183.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:68:e7:4a:66:7c:e1:03:d2:81:56:26:01:77:97:33:ec:0b:
9a:26:df:1f:ec:5f:f9:a8:34:b3:c9:b1:20:12:fc:b5:5c:f4:
8b:6e:d6:c0:95:bb:0f:47:07:a4:58:19:40:40:f2:d7:19:36:
61:8d:9a:75:a5:16:09:43:97:55:3f:ab:2c:af:05:55:5b:0b:
0c:82:1a:19:ef:ee:d9:6a:b5:78:12:d2:d4:74:f9:2f:23:57:
09:8b:99:0a:d5:1b:61:66:75:5a:16:74:97:08:9c:42:b3:21:
b1:7e:65:63:8c:a3:0f:d7:f5:c7:f3:77:d9:68:e7:30:f8:23:
17:16:bf:ff:fd:87:6e:75:75:25:14:95:6e:5f:ac:6d:d6:40:
23:45:de:e9:6e:42:d5:68:b8:d4:9b:d5:34:eb:d0:f7:52:5e:
82:00:07:96:5e:81:06:eb:7f:61:38:01:80:c8:f8:13:5f:89:
b4:b5:6c:bf:ed:47:18:3d:86:01:79:4d:8a:33:47:d0:0c:86:
6b:bb:4b:97:7a:f6:7e:ac:d9:54:e9:c6:8f:9b:a2:38:80:d9:
db:e8:79:f0:90:51:67:5b:28:13:4d:6f:e6:c5:5f:7b:82:d5:
10:40:4f:b7:fe:d2:e7:07:a3:0c:80:80:ad:4d:ca:eb:70:5a:
85:94:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:16 2025 by rpki-client