Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/fawo1EoqRqBJwHjBpTPTmcGb0cM.roa
File: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (raw, json)
Hash identifier: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=
Subject key identifier: 7D:AC:28:D4:4A:2A:46:A0:49:C0:78:C1:A5:33:D3:99:C1:9B:D1:C3
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019420D64D317BA6B4893C2A983B07C00660
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/fawo1EoqRqBJwHjBpTPTmcGb0cM.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203377
IP address blocks: 185.136.205.0/24 maxlen: 24
185.207.39.0/24 maxlen: 24
194.147.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:31:7b:a6:b4:89:3c:2a:98:3b:07:c0:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dac28d44a2a46a049c078c1a533d399c19bd1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:26:16:cb:fa:96:0e:ad:1a:4b:9e:89:54:
69:f3:52:58:7b:ed:3e:96:a6:3f:a3:7d:7d:ec:e8:
80:f3:80:f8:01:e9:dc:52:a9:54:17:3e:51:f4:df:
31:25:48:e4:15:b5:48:22:db:8d:4d:bb:cd:5a:bc:
aa:7e:19:93:40:e8:61:7e:3b:67:bc:6c:2d:39:5c:
73:e7:32:e7:be:35:ce:7c:d8:c2:ae:7c:2b:4f:b6:
7c:f1:8d:be:98:d0:96:f5:cc:9a:84:d5:31:6c:96:
9d:e3:3c:49:d0:8d:66:0b:d2:54:a0:66:65:c7:c8:
d2:80:2b:a2:29:ce:0d:6f:a4:23:26:c6:4b:5e:aa:
da:12:24:35:32:57:7b:bc:d5:fc:a5:50:2d:a9:55:
68:c2:62:62:5a:80:39:59:66:69:26:64:af:18:cf:
91:dc:3c:ff:a9:ee:1e:5b:fe:7c:78:22:93:a2:7b:
4b:f2:81:54:d6:c4:23:68:25:c2:b9:cb:1e:11:a7:
5e:40:5e:57:b4:dd:26:8a:81:32:b7:53:19:7a:66:
03:ca:9e:8c:60:59:c2:28:9e:b3:55:15:ae:08:f8:
66:ae:bf:71:53:55:b7:49:a3:17:42:f8:8e:1b:1d:
f7:f2:6e:85:39:5b:90:e3:20:0b:9b:7e:a0:8b:ac:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:28:D4:4A:2A:46:A0:49:C0:78:C1:A5:33:D3:99:C1:9B:D1:C3
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/fawo1EoqRqBJwHjBpTPTmcGb0cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.205.0/24
185.207.39.0/24
194.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2b:08:30:6c:27:58:b7:c8:a6:b0:5a:68:77:00:59:5a:09:
21:b6:dd:48:91:33:5c:f6:ae:dc:66:b2:06:24:b8:f4:40:a0:
5e:cf:a2:7e:99:e8:60:83:9a:f1:44:84:5c:47:c9:1d:a5:93:
ed:32:12:63:b2:29:61:7e:b4:fa:9c:88:9b:76:99:8e:67:2b:
b0:bc:98:69:9a:99:9c:4d:b8:66:de:b4:59:b8:db:5a:5e:9a:
27:77:f0:95:ec:0a:01:50:a3:c3:99:0a:09:49:59:64:e5:b1:
9c:dc:3d:42:97:30:b8:eb:8b:26:95:44:61:4e:80:1b:36:43:
71:3e:19:c9:c9:23:c7:28:85:37:7a:92:44:7c:b4:c0:c1:d9:
cb:0d:10:c4:f1:b3:67:b0:5a:5d:60:cc:5a:d6:e2:06:ad:5b:
81:25:34:dd:dc:cc:f5:5c:76:68:a7:d3:9c:69:1f:22:de:38:
48:f2:e1:72:b3:57:a9:56:47:7b:0a:61:eb:d6:7f:e7:5f:69:
1b:0a:c8:40:e2:63:6b:f5:3f:da:ed:5c:3b:6b:d5:75:c4:3a:
72:93:b3:1b:07:f3:a2:2f:81:8c:2b:14:8c:22:64:6d:8a:73:
80:d2:a3:b3:33:23:4b:a0:4b:93:e1:80:e0:e8:3c:48:d6:6d:
54:dc:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:27 2025 by rpki-client