Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa
File: xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa (raw, json)
Hash identifier: UKVupoJGtNRB7xSecoUEhumnrVWffmz284NYSDysuEw=
Subject key identifier: C5:33:77:8C:DD:C9:46:D0:78:3F:9C:41:56:32:F0:F5:C0:E4:A1:58
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019421B1F4BE4B24E45064C8A403D6533B5C
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6843
IP address blocks: 185.120.36.0/24 maxlen: 24
185.120.37.0/24 maxlen: 24
185.120.38.0/24 maxlen: 24
2a06:8f00::/30 maxlen: 30
2a06:8f04::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:be:4b:24:e4:50:64:c8:a4:03:d6:53:3b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c533778cddc946d0783f9c415632f0f5c0e4a158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:64:b0:1a:69:4b:89:ee:c0:71:43:3c:bf:
ba:e9:03:6b:fe:92:db:01:77:31:1d:3e:23:5d:71:
a4:a8:58:61:20:71:a3:11:e1:69:47:9d:f2:dd:dc:
a6:a6:ba:58:31:4a:0d:25:be:b3:86:2c:39:e5:5d:
db:3a:f1:73:04:a0:fb:1e:8e:40:45:43:eb:da:26:
e0:0c:63:b6:2c:ff:3a:b1:2a:10:26:14:2f:47:bf:
f6:f0:7e:ea:c0:8d:78:e0:f0:f9:cb:a5:e5:80:6f:
f1:e7:1d:9c:51:6a:23:bd:23:ad:69:6e:45:68:b4:
55:2d:9b:bb:7a:1e:ca:43:cc:bc:91:33:89:08:49:
1b:25:31:72:3b:b0:af:1a:5a:29:6a:fd:ce:82:9f:
23:d3:bc:29:24:b4:64:cc:2b:33:cb:cf:59:76:9a:
a2:9c:06:bc:f7:c9:2b:86:8f:73:10:4c:7b:1c:04:
21:af:20:c5:16:10:a8:0e:94:19:d5:36:31:3c:28:
b5:a6:94:ac:8d:ce:da:6a:81:e2:e4:4a:91:9e:a1:
82:1c:c1:85:21:c0:6f:50:97:d9:85:9c:36:d4:2b:
3d:79:ec:63:fd:1c:8e:8c:c3:8c:6b:f0:e9:7e:14:
55:2e:eb:92:f0:b6:fa:85:fa:fa:f9:6d:f3:63:00:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:77:8C:DD:C9:46:D0:78:3F:9C:41:56:32:F0:F5:C0:E4:A1:58
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/xTN3jN3JRtB4P5xBVjLw9cDkoVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0-185.120.38.255
IPv6:
2a06:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
22:40:07:0f:d5:0d:4f:e9:06:0d:78:de:32:26:08:f2:c6:fa:
10:56:92:19:06:bc:d2:9e:08:19:5a:39:e5:8b:4e:e9:f0:b6:
54:0a:51:72:95:b0:8b:ff:42:21:85:a2:4b:b3:26:5f:4b:2b:
25:4a:39:0d:f3:1c:5b:a5:8e:32:a8:cf:ef:5d:6e:31:c6:bf:
db:e7:e0:f2:9b:2e:28:e0:1c:7b:8c:c3:93:35:4c:ed:09:62:
a5:f8:86:e9:dc:b6:b4:66:10:ca:8b:f6:ae:e0:cb:44:74:19:
42:29:e9:90:58:08:c0:83:1f:80:24:80:0c:13:d0:7e:df:26:
10:13:7d:4c:32:0c:3a:50:d7:1b:81:3b:ed:cf:5c:f4:e3:a8:
3c:1b:6f:65:e8:32:b3:b9:55:c1:6d:f5:ff:3c:83:f8:57:ab:
b8:2b:d1:74:8c:be:d9:3f:9f:dc:33:bc:6e:dd:b5:76:8c:39:
90:13:a5:07:13:a0:8a:89:3b:5f:c3:1b:df:d6:eb:95:08:41:
56:10:77:9b:c4:ef:51:80:8a:7b:ee:de:ce:9e:30:dc:1f:8d:
d6:8f:b0:de:37:95:fc:a0:a9:97:28:0d:a6:17:5c:fa:47:a8:
53:87:d2:25:88:9d:b1:75:f1:e8:8f:95:bd:00:20:70:c6:2f:
09:b8:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net