Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/3wb1_tKdAp9U3t54r_yuAt_t74c.roa
File: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (raw, json)
Hash identifier: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=
Subject key identifier: DF:06:F5:FE:D2:9D:02:9F:54:DE:DE:78:AF:FC:AE:02:DF:ED:EF:87
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 019422FC43A28628C82F0159F56B6F17E1D1
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/3wb1_tKdAp9U3t54r_yuAt_t74c.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 224
IP address blocks: 109.105.125.64/26 maxlen: 26
109.105.127.128/26 maxlen: 26
2001:948:61:1::/64 maxlen: 64
2001:948:62:3::/64 maxlen: 64
2001:948:62:4::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:a2:86:28:c8:2f:01:59:f5:6b:6f:17:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df06f5fed29d029f54dede78affcae02dfedef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:75:1e:ba:6d:6a:12:de:b6:e2:fa:5a:21:
58:f9:c7:71:84:43:89:2a:8b:03:0e:fb:82:cc:99:
8e:c1:5c:3b:32:b4:2c:b5:c3:b2:db:d1:5d:e4:72:
05:04:0b:0c:38:de:fe:53:e0:1f:c1:c7:07:2b:ac:
67:98:87:a5:5a:b1:28:66:3c:1a:5b:d3:33:3e:28:
19:92:ff:31:c5:d6:d4:31:4b:7a:77:1d:8e:a5:a8:
40:0a:1c:2b:2d:b5:ba:1f:d5:d6:b7:64:1e:d5:ed:
22:77:04:9a:20:f5:b1:d4:66:2e:62:0a:ec:23:40:
4a:95:68:5c:05:c7:9b:71:6d:3e:f6:4f:6c:c3:50:
49:98:e0:a9:1c:23:7e:df:ca:29:9b:06:76:e6:96:
ba:83:a5:d6:df:87:7e:56:d2:e7:cc:bd:4a:fb:bd:
73:0a:35:97:c7:a7:7e:8a:d4:8a:2a:96:8e:3b:0d:
26:45:bf:54:a3:b4:c0:84:13:b5:2d:8b:d6:93:46:
e5:cc:b7:82:98:26:ed:0c:5e:3a:81:3c:86:45:f0:
87:87:71:30:62:79:47:93:94:a4:de:62:4b:12:c7:
08:cf:1a:4f:62:ff:28:3b:d2:83:b1:ca:04:3e:94:
58:ab:dc:b7:65:ab:ef:ed:32:3e:5e:fb:5c:80:ac:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:F5:FE:D2:9D:02:9F:54:DE:DE:78:AF:FC:AE:02:DF:ED:EF:87
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/3wb1_tKdAp9U3t54r_yuAt_t74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.125.64/26
109.105.127.128/26
IPv6:
2001:948:61:1::/64
2001:948:62:3::-2001:948:62:4:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
24:ed:0b:9b:0d:de:f6:e2:db:0b:01:fd:49:9e:71:3c:3e:6d:
20:f2:8c:4e:53:db:44:ff:4a:7a:87:8f:07:ff:34:0e:80:30:
33:23:76:67:7d:a4:5f:73:75:7d:0a:76:28:a1:7d:12:98:44:
cc:cb:e5:17:ba:63:33:73:4e:e1:5e:a1:2b:e4:de:5f:16:7d:
43:8d:0f:c3:17:d1:0d:49:25:d4:38:29:33:08:34:33:ef:72:
47:e7:f0:fc:5f:33:b8:2e:e9:a4:01:b4:52:d2:ff:88:53:61:
c8:a9:e5:c3:a6:1d:3f:0a:2d:9c:b9:61:1b:4c:db:01:32:8a:
91:e1:19:db:db:64:b4:40:45:82:eb:66:cd:45:a3:82:93:59:
05:e2:96:47:95:25:9a:ee:4a:7b:e7:44:4e:79:b9:3c:73:87:
46:aa:8f:52:7a:93:0d:1d:02:bc:97:ef:bf:b4:be:64:8f:0d:
c5:81:2e:ed:0a:a1:57:17:2b:5c:65:82:59:48:3a:f4:82:3a:
ab:cf:39:0b:8d:2b:0a:9f:58:55:26:6f:bf:ca:19:5a:5f:6d:
57:d5:0a:8e:31:67:1d:cc:6d:40:7f:88:b9:bf:9f:2b:19:6f:
0e:4a:fa:6f:57:e5:6c:aa:fd:22:de:4f:e8:87:de:c0:97:f3:
ae:9c:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net