Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/OmcfFFZzPunpA0JKxY5aSHlIdLs.roa
File: OmcfFFZzPunpA0JKxY5aSHlIdLs.roa (raw, json)
Hash identifier: jiXiSxHvIeL7aXpkY1YBlUxCKFy/UT0TwfOxJINxL44=
Subject key identifier: 3A:67:1F:14:56:73:3E:E9:E9:03:42:4A:C5:8E:5A:48:79:48:74:BB
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 019421B1B2D569437563104399CB89195799
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/OmcfFFZzPunpA0JKxY5aSHlIdLs.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49164
IP address blocks: 89.36.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b2:d5:69:43:75:63:10:43:99:cb:89:19:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a671f1456733ee9e903424ac58e5a48794874bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:37:d2:d6:71:a1:59:1c:ec:4b:6a:90:03:
93:de:6f:cc:fe:0f:70:7d:3d:18:79:b8:88:98:61:
1e:f8:0a:af:e9:33:10:17:28:39:2f:10:7f:41:9b:
1f:29:77:28:25:b7:ec:b5:95:19:27:c4:0a:f1:d5:
23:86:45:e7:14:aa:b5:91:e1:da:45:65:dd:b5:00:
44:b0:e9:f9:59:66:07:83:ef:93:95:29:67:17:7e:
59:b0:21:9b:e2:39:f5:66:ea:8c:a5:30:c2:22:8f:
78:7a:5b:fd:01:0d:9d:97:9c:a6:08:05:17:83:3e:
6d:de:c7:c3:4a:8c:02:61:0a:d8:42:01:b6:e6:9f:
34:cb:c8:25:67:75:81:35:7c:1c:fa:59:03:b9:bb:
14:88:01:9a:f1:52:96:98:a8:c4:f2:64:1f:f9:64:
2f:48:29:b9:8f:32:a4:fd:d0:bf:29:34:a6:f4:7e:
fe:84:fe:ff:57:e4:8d:b8:ea:f1:f4:0d:18:d5:5e:
d5:01:94:da:50:c5:de:82:d8:24:d9:ef:98:1b:25:
6c:ec:b1:a9:c7:26:b9:bb:07:10:21:e1:cd:98:87:
cc:9a:aa:8d:f6:bd:68:17:1b:be:ee:23:b6:c3:ad:
93:2c:80:1c:38:9c:5a:53:87:e7:af:87:25:11:08:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:67:1F:14:56:73:3E:E9:E9:03:42:4A:C5:8E:5A:48:79:48:74:BB
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/OmcfFFZzPunpA0JKxY5aSHlIdLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5b:b4:4f:72:da:44:3f:27:a9:1e:2c:a3:c7:81:c0:01:42:
13:93:8c:e3:9b:9e:ef:2d:2e:fc:a7:53:17:91:1c:ec:16:b9:
75:52:dc:52:55:d5:b5:f2:a7:b6:e4:4b:b0:a5:62:55:7e:8f:
9a:90:21:82:58:a5:4d:9e:f6:19:c2:73:32:50:c0:26:66:39:
0f:40:e5:bb:58:43:a0:20:9f:b7:4f:f1:37:fd:6c:25:bf:9a:
30:ad:f7:45:b8:3e:c5:79:85:3d:6d:ca:80:ce:5e:11:60:51:
31:7a:bb:65:4f:0b:56:9b:79:29:3b:71:cd:8c:ac:36:ca:a5:
95:36:f0:fd:d1:7a:5c:1e:f9:4c:56:55:55:3d:0d:9e:53:10:
6f:7b:c4:be:25:fa:8c:6e:71:b1:a9:af:b9:2c:f3:87:c6:c4:
22:1b:9c:1a:c5:69:2b:1e:15:a8:1f:6e:44:4c:60:b7:37:b0:
b9:d3:21:8e:d0:66:e9:49:53:ac:d6:a2:c5:46:49:d1:8b:0c:
9e:cd:ec:eb:ae:28:59:e4:48:27:4a:e8:2c:aa:92:3e:01:e8:
ef:02:b9:bc:cb:42:23:f6:5a:9f:32:b3:6a:9c:84:c5:bf:ca:
b3:53:45:30:10:fa:2f:1c:49:fd:ab:72:da:c9:3a:08:95:44:
49:03:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net