Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/dSYYIsgqOPsPCWRb8n6bjaKooRw.roa
File: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (raw, json)
Hash identifier: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=
Subject key identifier: 75:26:18:22:C8:2A:38:FB:0F:09:64:5B:F2:7E:9B:8D:A2:A8:A1:1C
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019426D9B12D6D12634E772853781A089CAE
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/dSYYIsgqOPsPCWRb8n6bjaKooRw.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15851
IP address blocks: 212.127.64.0/19 maxlen: 19
213.231.192.0/18 maxlen: 18
2001:a48:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b1:2d:6d:12:63:4e:77:28:53:78:1a:08:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75261822c82a38fb0f09645bf27e9b8da2a8a11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:e7:68:58:03:d4:ac:c3:32:f2:29:da:42:
c6:50:34:d7:fb:dd:78:bf:51:4f:ff:df:7a:d5:4b:
98:23:6b:9d:ff:15:ee:d6:07:1a:b0:98:d6:c3:75:
95:ee:d9:80:cd:ac:1c:a3:c4:a1:66:47:bd:74:7c:
06:6d:3e:bd:53:19:d3:27:0d:fe:35:d9:53:b3:8a:
62:e1:fe:d0:32:3b:c3:3e:1c:09:28:f5:fe:5e:3b:
0e:b6:4c:87:45:51:63:e2:57:2a:9e:d0:9d:65:91:
8c:2d:13:e9:6d:88:b4:09:ec:9d:0d:3d:9b:90:6b:
ee:1f:7e:03:4b:16:c1:c1:0d:08:97:bd:47:7b:09:
dd:1f:b9:fd:d5:a3:0a:c1:25:89:59:dd:7a:e4:d3:
0d:77:73:72:f3:77:f7:6a:86:e9:2b:ab:19:73:c6:
92:2a:a7:27:0b:74:1a:dc:f7:78:d6:9d:41:60:b2:
ed:34:fb:e0:2e:55:d7:c7:52:07:ec:0c:22:03:b6:
28:7b:1e:95:6a:14:ea:37:05:0c:89:bb:e6:8b:98:
03:45:5c:25:27:f1:20:16:af:d6:72:49:1b:26:f1:
29:ac:02:77:11:20:19:3f:22:91:ea:01:38:67:6a:
df:4c:70:d9:19:7e:b6:6b:32:4e:c3:15:29:b6:40:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:18:22:C8:2A:38:FB:0F:09:64:5B:F2:7E:9B:8D:A2:A8:A1:1C
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/dSYYIsgqOPsPCWRb8n6bjaKooRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.64.0/19
213.231.192.0/18
IPv6:
2001:a48:8000::/36
Signature Algorithm: sha256WithRSAEncryption
50:17:4a:65:45:66:92:89:78:ad:ec:75:90:6a:a2:ab:62:df:
31:29:f1:ab:34:4f:b1:0c:d1:b0:f3:80:73:0b:da:a3:c1:87:
8d:f5:a7:65:22:8b:35:c8:45:b4:0a:cc:3c:f1:23:4e:16:be:
59:a4:a7:b8:86:59:c4:6e:e9:d1:ff:d8:75:64:9e:95:57:2d:
e0:15:a3:ed:a9:67:56:91:5c:c0:67:6e:86:2a:d0:24:63:4a:
78:a0:7b:a4:09:62:39:24:e5:78:7a:c0:54:ab:61:7e:d0:58:
63:bc:27:b3:d4:76:b7:7c:53:bb:c8:c2:73:2e:8e:58:69:cd:
5a:8b:a4:67:8f:48:c9:09:b2:11:8c:f0:01:d3:fc:cd:a1:26:
69:55:0c:fe:e3:9a:10:85:c1:60:9a:b7:6f:bc:03:49:09:d0:
5b:9a:35:7c:d6:f4:f9:94:d3:c7:df:68:1b:96:22:a6:ca:16:
cf:cc:cf:5b:da:fd:5e:52:da:17:0d:f6:83:0a:ff:d6:fd:46:
bc:db:ba:0c:39:7f:6c:f7:fb:4e:c4:96:5d:47:33:35:2d:7d:
e1:cd:06:ed:87:02:69:7e:f9:af:31:1d:13:b8:10:38:15:ec:
b7:87:c6:56:ca:c6:b4:8d:fd:e3:ac:fe:ad:f7:bd:b9:f5:bc:
16:d4:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net