Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa
File: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (raw, json)
Hash identifier: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=
Subject key identifier: AC:35:D0:21:5F:DF:53:7C:EE:3E:25:58:EF:05:4D:53:95:DF:9C:46
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019426D9E6EEEFD93E9E280CFB574F0F30BB
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204770
IP address blocks: 5.199.165.0/24 maxlen: 32
185.8.106.0/23 maxlen: 32
2a02:ae02::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:ee:ef:d9:3e:9e:28:0c:fb:57:4f:0f:30:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac35d0215fdf537cee3e2558ef054d5395df9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:79:5f:ef:b3:d5:c2:07:32:8d:fd:96:c0:
3c:d0:37:2f:b7:59:fe:49:5e:3f:89:d2:96:fe:a9:
26:7b:ba:51:de:68:f2:fb:80:dd:08:9e:5f:43:e3:
94:de:6f:fc:ff:c9:e0:3d:f7:55:d8:19:09:9c:4d:
3d:85:1a:a9:02:f9:c7:53:a5:f3:5e:5a:c1:73:fd:
8d:ae:21:27:76:ab:2e:cb:7a:99:23:fe:62:64:34:
ee:d0:f1:c2:e6:e1:21:bd:6c:38:f9:ad:88:d3:29:
b7:1e:a9:90:5f:8f:4c:b9:a4:2f:ef:24:99:e2:b8:
5e:a6:e0:38:ee:f2:2b:26:50:ee:48:76:e4:96:e1:
a2:2d:7d:93:a5:b0:1a:c3:67:f5:0f:cb:bd:d2:e2:
9f:8e:50:2a:3e:28:3d:cb:88:43:f0:f0:e7:4a:65:
d6:25:1d:7f:85:68:b3:fa:28:20:4d:92:5b:c9:a8:
a7:39:76:20:f7:3b:71:8b:e5:50:e9:a4:b4:3d:f2:
49:eb:89:85:48:22:8e:10:3d:97:22:0e:3c:98:48:
26:20:f9:38:3a:a0:06:ed:ed:bd:ad:30:ae:b9:bb:
aa:a2:37:a6:e8:60:fa:06:b4:43:09:ff:6e:ee:52:
56:31:93:cd:06:64:31:29:a3:13:e8:67:13:f3:27:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:35:D0:21:5F:DF:53:7C:EE:3E:25:58:EF:05:4D:53:95:DF:9C:46
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.165.0/24
185.8.106.0/23
IPv6:
2a02:ae02::/36
Signature Algorithm: sha256WithRSAEncryption
c7:8f:5f:3f:c9:be:1d:48:50:9d:0d:12:4e:18:f0:eb:5d:6f:
cf:72:73:97:93:1b:ab:f2:ab:89:e3:24:c2:84:da:e2:d1:d9:
b2:89:ab:78:b3:98:ea:fd:26:79:8f:5c:9e:cd:99:21:16:ee:
ea:59:5e:28:14:3d:5f:90:fa:a5:b0:82:ec:d4:f6:6a:30:8e:
c3:fe:08:77:dd:95:7e:ec:f5:2a:b2:66:1f:d7:4e:89:cd:62:
34:b2:23:ea:74:38:a9:fb:e0:9b:9c:7c:bd:c7:79:e8:19:2f:
da:ac:94:c5:e8:7b:90:e2:7f:44:4e:31:4d:ca:8d:30:5a:6f:
d1:10:e9:62:6f:8f:b5:e5:87:5b:25:58:71:f7:ca:b6:13:05:
37:73:d7:b2:f3:a1:a4:bc:24:8e:ff:76:74:95:34:5a:d3:a5:
84:70:67:3e:93:04:50:6f:b0:79:97:bd:5d:41:9f:d6:c1:3d:
12:81:6f:2c:6e:18:43:21:32:d0:50:25:2d:bb:37:4f:f7:d1:
d0:30:e9:86:5b:45:4f:1f:c5:ec:a9:77:b0:11:04:74:7b:a0:
ea:d7:f6:56:ba:49:8b:e0:ae:ad:7d:61:8d:4c:08:83:d5:b7:
1e:8c:44:02:6a:34:3f:0b:a6:4d:e1:53:f4:38:48:9e:a2:8c:
21:7f:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net