Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa
File: 3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa (raw, json)
Hash identifier: TfmSTeRDZAQ5oGtcUm708DsfM+xSj27+amI7sJGhkx4=
Subject key identifier: DF:31:6A:D0:50:0D:2C:30:9B:06:24:2D:1A:83:9D:25:F1:A2:FC:44
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 019425FDD01C310ADB1BE05BF8865E242FDB
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62047
IP address blocks: 185.48.9.0/24 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:1c:31:0a:db:1b:e0:5b:f8:86:5e:24:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df316ad0500d2c309b06242d1a839d25f1a2fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:7f:b8:b2:f0:d7:4d:01:5d:d2:97:1a:4a:
73:52:2f:97:44:5d:c8:52:b4:1e:87:b3:bf:ea:46:
83:43:c2:b3:53:b8:66:e0:3f:9d:91:64:a4:ae:97:
88:5d:7d:2b:ac:32:de:a6:1e:cf:42:9a:d7:13:51:
2c:63:09:50:89:c7:e7:ce:d7:57:af:92:ae:3b:16:
1b:a5:59:ee:2a:22:b5:37:5f:76:0f:8e:54:ef:12:
4a:cf:ff:6b:8d:f3:0e:83:b8:28:6c:eb:92:13:d6:
f8:12:b3:12:a2:9c:9b:2c:65:71:0c:6a:d0:9e:89:
c7:df:eb:c9:e0:05:0f:00:2c:e2:3d:dd:6d:a5:7b:
ee:cc:57:2c:27:7f:4b:bd:8f:45:58:df:47:f0:45:
5f:4d:4f:ea:e7:e9:c9:2a:b4:20:ec:2e:39:e3:76:
8e:4d:ad:a6:08:4c:a5:c0:91:73:b8:86:71:ca:ed:
d4:21:14:40:36:36:20:f8:fb:6b:9d:61:1e:02:02:
5d:b9:cd:e2:cb:d0:d8:f5:4f:70:83:96:3f:02:bc:
25:47:00:6f:84:df:5f:cd:1d:c9:41:ce:35:7c:d4:
ad:f5:6d:62:30:1c:13:e5:0f:4e:15:65:2a:84:59:
52:8f:19:fe:be:e7:ee:83:0c:38:62:62:49:fd:af:
b7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:6A:D0:50:0D:2C:30:9B:06:24:2D:1A:83:9D:25:F1:A2:FC:44
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/3zFq0FANLDCbBiQtGoOdJfGi_EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
09:af:3f:52:a9:8e:a7:27:02:77:a9:23:ed:f3:85:12:fc:08:
23:ec:13:fe:0f:22:1a:59:01:be:47:84:68:37:79:cc:ac:36:
2f:ee:98:d5:1f:07:e4:4c:ad:46:90:d7:6f:b7:81:8b:96:90:
5d:9d:4d:9b:68:2b:b2:f2:41:7d:7d:6e:b4:01:cd:e8:c4:ec:
ec:c1:a7:39:0a:d6:84:94:5d:b0:2d:01:bf:32:8a:ae:c5:3e:
10:4a:f3:84:18:ae:84:cc:5b:bb:6d:73:57:db:b7:d2:c1:41:
8c:73:f4:9f:7d:f0:c5:1e:20:4d:66:2d:43:12:04:df:27:9e:
a6:84:51:50:3e:f4:37:65:66:3b:a9:52:0a:20:2f:d4:af:30:
e4:3c:36:be:66:24:5e:5e:95:36:11:dd:13:da:90:20:c9:ae:
79:ac:06:29:8a:19:37:ea:6e:ed:c1:af:37:55:0a:ed:f2:6d:
0d:c8:e5:d1:4d:fa:a5:3f:64:b7:29:1b:07:35:69:42:19:a4:
5b:d5:a0:89:31:b8:65:fc:4d:5d:96:4e:4b:72:9d:d3:67:94:
40:cd:89:d6:e4:2c:69:d1:29:e3:e6:78:0a:bc:90:db:3d:00:
5b:9b:f5:83:7c:2f:a4:d1:95:c0:07:e6:95:31:bb:56:f6:fd:
f8:1a:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net