Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa
File: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (raw, json)
Hash identifier: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=
Subject key identifier: 16:FE:50:E0:98:29:87:BE:A3:24:0E:96:15:0B:2A:46:65:C2:C3:CB
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0194228E1B17BFEC4DC55AD32071BC9FC9A2
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41332
IP address blocks: 185.108.236.0/22 maxlen: 22
185.116.176.0/22 maxlen: 24
194.76.10.0/23 maxlen: 24
194.76.12.0/23 maxlen: 24
2a06:8040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:1b:17:bf:ec:4d:c5:5a:d3:20:71:bc:9f:c9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16fe50e0982987bea3240e96150b2a4665c2c3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:0f:bc:a5:d7:ff:9c:28:87:62:1b:4b:69:
b1:3b:72:e3:e1:54:7d:e8:68:e0:d4:cd:fc:f0:54:
b6:6d:62:02:b6:38:8e:72:8b:7d:14:18:aa:ec:f6:
76:cc:ca:a1:2b:17:d9:e1:c0:e8:99:f4:0e:08:74:
7d:47:44:78:62:df:25:37:bb:91:be:ec:64:2c:8f:
f7:2a:5f:71:03:41:c2:05:18:62:fb:e6:84:11:a3:
d6:7b:bc:00:5c:1c:f2:11:cd:7d:6b:19:7a:20:27:
13:c1:85:df:6c:5e:b0:4e:88:5b:f4:98:3a:45:e7:
0a:30:33:f6:e2:6d:01:73:3c:2e:4c:40:b8:b9:53:
3d:46:09:1a:ee:0d:41:03:19:a2:e6:aa:2a:0b:a5:
e9:7f:8e:c5:3a:ef:a6:9b:62:31:57:72:9f:c7:f8:
20:ed:be:f1:78:8b:3e:b5:41:77:3e:12:f0:06:04:
62:2b:89:1f:c1:f9:11:ff:64:e1:b4:0e:ef:a7:66:
33:9c:f5:bf:e7:35:d3:f7:db:fc:24:b5:67:46:53:
18:22:2d:fa:85:6f:ac:4c:30:d2:a9:05:c5:b5:4d:
c7:55:42:36:76:f0:ab:8a:ee:4f:9e:f7:f3:5a:09:
0b:05:99:60:be:7d:ee:8a:6f:17:f7:9f:a1:33:93:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:50:E0:98:29:87:BE:A3:24:0E:96:15:0B:2A:46:65:C2:C3:CB
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.236.0/22
185.116.176.0/22
194.76.10.0-194.76.13.255
IPv6:
2a06:8040::/29
Signature Algorithm: sha256WithRSAEncryption
c4:45:89:33:09:e9:7d:1b:5d:3f:cb:f8:b6:96:a8:2f:71:a6:
ae:a6:1a:d7:4d:5e:1f:54:11:a1:00:cd:49:8c:b7:31:bb:9b:
9f:f3:8d:58:54:2f:8c:c1:d1:3d:ef:10:30:6d:8e:b8:c4:8c:
6e:f0:e5:18:66:e2:41:e1:4f:be:09:20:d4:4a:f8:80:66:e0:
d3:f6:6c:25:bf:dc:21:a3:88:13:e4:dc:a7:83:45:ff:a5:1a:
a6:e6:38:19:01:c8:f5:34:57:fc:8b:b4:f4:d0:10:85:8e:bc:
ee:ee:64:96:cd:84:bd:b6:32:e6:28:9a:d7:20:46:f5:9a:f4:
ae:de:63:af:09:76:37:5d:82:28:99:02:f5:f1:2f:02:df:31:
92:d8:ce:e4:cd:48:fa:27:20:16:aa:25:4c:37:58:db:c8:16:
4a:1d:15:9a:b6:39:c7:18:2a:c4:d9:51:7b:7e:02:fd:2b:49:
d3:59:82:ad:e4:f4:4c:9d:ed:22:7f:81:77:c7:d9:30:d1:20:
e8:d6:48:28:f9:3c:da:d3:5d:ed:62:97:ca:1c:f2:66:20:09:
a1:2b:07:f0:d2:f9:74:ed:4a:9b:59:5e:b1:15:00:00:d4:f4:
db:3f:19:2c:9c:df:9c:4e:8f:4d:f6:81:6b:28:9a:24:97:eb:
fb:9c:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:31:30 2025 by rpki-client