Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/DzgRwer0SyfEiMUBymVa3GjZBhc.roa
File: DzgRwer0SyfEiMUBymVa3GjZBhc.roa (raw, json)
Hash identifier: H6oc5ilH3tnHz0hpCDXzWc1+BWJ5xndGPAgz0hIghPU=
Subject key identifier: 0F:38:11:C1:EA:F4:4B:27:C4:88:C5:01:CA:65:5A:DC:68:D9:06:17
Certificate issuer: /CN=a2074339bb216b85bdc83d61778821adf9149d56
Certificate serial: 01941FFA995A3FD5B74DFCA6857A9A866649
Authority key identifier: A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/DzgRwer0SyfEiMUBymVa3GjZBhc.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52051
IP address blocks: 185.124.48.0/22 maxlen: 24
2a01:b1c2::/32 maxlen: 48
2a01:b1c3::/32 maxlen: 32
2a0e:8f80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:5a:3f:d5:b7:4d:fc:a6:85:7a:9a:86:66:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2074339bb216b85bdc83d61778821adf9149d56
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3811c1eaf44b27c488c501ca655adc68d90617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:0b:04:e6:f2:90:a5:3e:a9:4e:8e:a0:68:
52:c6:48:13:bf:b8:6d:bf:21:68:33:4c:03:16:14:
f1:be:36:0c:89:c3:05:5a:67:ae:da:0a:c5:2a:1e:
b4:6b:5a:94:83:d7:07:6f:c2:56:3b:c0:4b:46:d0:
01:0a:33:f6:99:fd:43:9f:c8:f8:68:5a:1d:b4:34:
fa:df:23:a2:29:f8:33:6b:ef:bf:45:0e:ef:07:a4:
0d:79:b0:92:5f:44:d4:76:76:2d:d6:f4:0c:6e:41:
d4:8c:a4:87:51:c3:f6:74:ec:8c:06:7a:61:20:bc:
8e:a0:7c:18:94:bf:a7:4a:34:0b:94:94:53:b9:d1:
04:95:ce:9f:27:ec:3f:0f:ca:3a:80:df:40:d7:e3:
44:cb:ff:e1:13:47:bd:3d:3f:5e:f5:8c:20:49:04:
59:33:e8:e7:ba:dc:71:2f:cc:3f:1d:4b:91:15:b4:
e4:1a:9f:0a:0e:fc:88:65:d3:5c:74:8b:76:a0:f4:
57:60:08:8f:02:ab:92:96:da:1d:d3:91:ba:71:07:
b2:1e:cc:6b:42:d2:9a:34:cd:0f:c0:f8:14:43:b2:
fd:1d:18:e8:5d:00:f5:9b:8b:62:2f:8f:76:01:5b:
1f:70:31:d4:de:19:d5:20:f1:63:c5:db:74:b6:a7:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:11:C1:EA:F4:4B:27:C4:88:C5:01:CA:65:5A:DC:68:D9:06:17
X509v3 Authority Key Identifier:
keyid:A2:07:43:39:BB:21:6B:85:BD:C8:3D:61:77:88:21:AD:F9:14:9D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogdDObsha4W9yD1hd4ghrfkUnVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/DzgRwer0SyfEiMUBymVa3GjZBhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/571b34-acf9-4ebf-988b-0feb66e7f28a/1/ogdDObsha4W9yD1hd4ghrfkUnVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.48.0/22
IPv6:
2a01:b1c2::/31
2a0e:8f80::/48
Signature Algorithm: sha256WithRSAEncryption
b8:0f:4c:00:c8:ca:2a:64:f9:b8:b9:89:fe:87:c2:dc:4e:6e:
c5:11:1a:27:0f:18:87:a7:f7:ef:da:ec:8d:44:1e:59:44:1a:
29:50:50:b4:12:c7:cb:16:e6:2d:db:aa:cc:41:9d:69:2d:ae:
0f:bb:23:21:e6:17:b6:8f:68:82:11:18:2b:01:9b:4a:74:2f:
b9:7d:07:7c:a0:e8:01:71:fb:01:78:ff:65:bc:a0:0a:26:b5:
8b:6c:08:91:66:31:1c:ab:fc:69:0b:26:b1:7e:1f:78:c8:6a:
c5:79:14:25:25:3e:fd:8b:b3:78:66:2a:8a:2e:d3:2c:a4:5b:
ea:a7:33:ac:32:f2:3e:a1:18:52:cb:31:3b:73:be:c8:d0:c3:
35:7a:93:e9:cd:2c:6d:95:bd:44:07:0f:d3:16:f4:e3:53:4f:
81:30:b2:40:5b:f9:7c:bc:81:84:92:e4:5d:89:a1:87:8b:fb:
90:0f:d1:c6:c9:cc:ef:d0:6e:26:47:43:d5:86:5c:8a:29:48:
a5:3b:4d:0b:ba:e2:da:fa:d4:f3:b8:23:36:5c:3c:a3:ba:22:
f6:a4:33:06:f0:af:cf:c1:3f:f1:96:87:ee:ea:8b:61:97:45:
89:96:61:70:b0:1b:79:27:be:38:fc:4a:09:8d:20:82:ce:d6:
7b:ff:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net