Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Rr0zbCWANGdldNBvrAd88RpS1U4.roa
File: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (raw, json)
Hash identifier: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=
Subject key identifier: 46:BD:33:6C:25:80:34:67:65:74:D0:6F:AC:07:7C:F1:1A:52:D5:4E
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 01941F8C7264CAE700AB1DE46A7FD7493C6D
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Rr0zbCWANGdldNBvrAd88RpS1U4.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48076
IP address blocks: 185.62.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:72:64:ca:e7:00:ab:1d:e4:6a:7f:d7:49:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46bd336c258034676574d06fac077cf11a52d54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:4e:4e:c1:ea:af:da:e5:25:6e:b4:69:ef:
92:19:b6:e5:6e:77:ba:7e:0d:78:75:75:45:fa:cb:
16:27:77:c9:63:40:93:d1:9a:c0:02:ba:87:73:71:
76:90:95:e8:74:f9:57:25:75:61:88:03:88:7b:92:
ce:4b:01:c4:70:0a:df:a3:e5:db:f3:d2:b1:ae:af:
0a:f3:f9:31:3d:ed:d8:c4:d8:d4:62:49:c0:92:28:
b6:52:8f:06:ba:2d:89:17:44:70:0a:e4:d1:7e:00:
5a:71:c7:0b:2d:b9:cd:1b:8e:98:e0:f0:8a:2c:86:
13:c0:3e:66:cb:51:ce:49:26:e7:9f:ae:9d:9d:13:
76:69:86:d5:d0:88:52:09:21:3d:45:35:16:b2:d1:
d4:2c:1c:d7:50:77:c2:8e:63:e0:c8:66:f8:83:fa:
7a:1f:9f:23:4e:bb:02:b0:0f:89:e3:ed:18:02:4e:
f6:43:c8:36:4e:5a:c1:cc:95:8a:af:36:a7:79:0c:
75:7f:3f:0e:f8:fb:33:1b:11:29:56:02:d6:b9:7a:
74:95:09:7b:66:f8:fe:9d:fc:76:ee:51:b6:c4:85:
ea:59:89:a5:99:b6:51:3d:5e:3f:35:34:d8:04:5f:
28:25:44:5f:0f:46:40:65:82:50:36:0c:1c:dc:7d:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:33:6C:25:80:34:67:65:74:D0:6F:AC:07:7C:F1:1A:52:D5:4E
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/Rr0zbCWANGdldNBvrAd88RpS1U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f8:28:ea:4c:ac:55:8b:c0:fe:7a:f0:f4:a8:26:9b:54:d0:
e5:b1:fa:14:aa:53:74:9a:06:d2:18:db:74:9e:71:7e:fb:f5:
8e:e0:e3:a4:33:9d:70:72:3b:fb:12:86:f3:7a:98:5e:7a:ff:
26:07:de:c5:ea:7f:36:27:3e:a8:35:0c:bd:52:b6:5a:dd:16:
55:88:d5:4a:5a:06:cd:99:e5:02:39:f4:56:ec:9e:e8:39:9c:
45:bf:36:80:ee:d0:0d:83:19:d0:35:15:d5:62:7a:46:aa:03:
cf:f7:83:d9:fa:c7:7d:dc:d0:5e:e9:00:b4:94:d3:96:c7:8a:
40:5b:a8:86:49:70:24:9b:ca:04:60:fa:b0:02:5c:db:ec:15:
8d:1c:86:a4:62:71:8d:0f:31:db:44:74:20:12:69:ce:87:5f:
1b:82:c0:58:b1:0f:db:fc:8c:a3:0a:99:20:00:4b:38:88:43:
ec:53:85:c0:13:cc:42:39:fa:00:9e:84:e6:5c:4c:20:73:61:
54:e0:43:a9:56:48:05:77:ec:ea:0c:a1:2e:f8:37:a9:a7:16:
72:94:04:c9:d4:95:91:b7:cd:4b:25:7f:a6:c5:e8:a8:1a:07:
db:88:79:11:d5:19:ac:b3:68:f3:46:a9:4f:f9:09:8c:38:0c:
82:21:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net