Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/C76yVypN0N2Op8sKr7Mqe8COtzQ.roa
File: C76yVypN0N2Op8sKr7Mqe8COtzQ.roa (raw, json)
Hash identifier: Ne8nENMgrnXh9tXZOU02EkwJbXSV1+1bAC4LbBUrr7I=
Subject key identifier: 0B:BE:B2:57:2A:4D:D0:DD:8E:A7:CB:0A:AF:B3:2A:7B:C0:8E:B7:34
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 019425FDCE3D0E8718948000721F734BAF7C
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/C76yVypN0N2Op8sKr7Mqe8COtzQ.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33923
IP address blocks: 94.246.128.0/18 maxlen: 32
185.183.236.0/22 maxlen: 32
194.6.246.0/24 maxlen: 32
194.145.184.0/22 maxlen: 32
2a00:1a40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ce:3d:0e:87:18:94:80:00:72:1f:73:4b:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bbeb2572a4dd0dd8ea7cb0aafb32a7bc08eb734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:84:f9:8d:13:de:24:5b:04:58:64:de:a9:
4c:78:a0:5a:d5:0b:65:c7:ce:91:ff:d3:be:0c:d1:
55:5b:c0:35:7d:05:3f:64:50:2c:d2:5c:e0:fd:ea:
59:da:eb:1a:c3:fa:16:f8:de:55:f9:ec:32:8c:7e:
cc:e1:92:83:c0:9c:ce:61:6f:e5:85:7a:d7:de:76:
7a:31:3d:67:72:50:a5:65:c5:12:fd:e2:43:5d:ce:
f8:ac:f2:8c:c3:f2:a7:c2:ef:b3:a2:57:cb:9b:5f:
d9:04:04:68:3d:f7:9c:ed:62:d6:6a:72:22:c4:09:
f9:15:a0:c1:bc:48:87:ab:3b:86:5e:1a:13:4d:e4:
f3:db:da:d5:76:0a:8e:f0:ba:71:d9:ef:2f:99:3e:
d0:f1:b1:1d:77:66:5d:99:b3:1f:bb:da:f5:9f:51:
dd:a4:40:17:2a:dd:37:68:d4:23:c6:c5:3d:50:5c:
2a:d2:db:90:25:cf:1b:f0:b1:ff:35:6c:f9:d0:e9:
e8:58:46:17:3d:99:f3:c7:40:b0:37:09:aa:24:1d:
ce:f4:8d:f6:3b:96:a2:c9:32:cb:88:34:9c:5c:9b:
c7:2f:8c:00:97:13:15:c0:ab:bf:ac:26:0d:16:b6:
3a:88:d2:bf:41:c7:7f:12:b1:80:1b:4f:dc:d6:9d:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:B2:57:2A:4D:D0:DD:8E:A7:CB:0A:AF:B3:2A:7B:C0:8E:B7:34
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/C76yVypN0N2Op8sKr7Mqe8COtzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.128.0/18
185.183.236.0/22
194.6.246.0/24
194.145.184.0/22
IPv6:
2a00:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
5c:07:c6:14:1d:69:6b:20:95:e8:96:87:f8:ec:82:9a:ba:11:
bc:53:73:d4:86:1e:d1:e4:d7:a9:d1:75:06:e0:48:0f:c0:6b:
7a:fd:a8:cc:67:cb:a9:60:13:57:8e:e1:c2:5b:c7:f8:f7:b6:
b2:9b:1b:ef:90:60:ab:d6:90:2e:4d:62:ed:0c:e7:84:03:b6:
2d:0c:72:a4:18:d3:a8:29:0c:63:9d:fb:a6:fe:e5:a8:94:98:
71:ab:d0:15:47:3e:9b:59:42:12:2d:4c:77:27:6b:71:b1:ec:
d9:66:5e:5f:50:4c:92:76:7e:5f:10:b2:f1:ff:89:60:dd:44:
ab:f2:42:a2:bb:f0:28:22:ea:1d:5a:60:1e:b0:2b:7b:f6:66:
83:f5:c9:80:4b:0c:98:b9:44:4d:ba:0e:65:9e:90:e2:3f:a2:
cb:9e:a0:94:ad:8a:43:e5:2d:f3:48:62:1f:26:81:a8:5c:8a:
6d:23:88:8a:a3:eb:02:24:b1:72:f2:22:86:f3:b6:48:5d:b1:
9c:4a:a6:3a:6b:62:ce:2f:fe:de:a2:18:80:f3:85:be:6f:3e:
66:72:45:83:c5:83:79:96:74:fe:8a:12:28:da:33:49:10:4a:
68:6c:58:81:16:3b:ac:dd:1d:6e:d2:d0:e6:2c:94:49:d2:ed:
de:7f:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net