Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa
File: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (raw, json)
Hash identifier: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=
Subject key identifier: 0E:90:B2:6C:09:BD:6C:14:68:52:91:C6:02:E2:10:F3:A2:EA:E6:9C
Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial: 019426D9AD7BF1888E231736164322E3AF6E
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201416
IP address blocks: 178.211.152.0/24 maxlen: 24
2a0d:2540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ad:7b:f1:88:8e:23:17:36:16:43:22:e3:af:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e90b26c09bd6c14685291c602e210f3a2eae69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:0e:b8:9d:2c:e6:81:3f:5b:fb:fa:63:b8:
72:4d:eb:43:cc:8f:90:3b:66:87:8a:81:0b:e2:82:
6c:c0:6a:b2:81:2d:3c:e3:98:2d:75:d9:c3:00:98:
fc:f1:3f:55:e1:92:8a:03:80:41:82:fe:be:78:1e:
26:6d:2f:27:e2:a6:a6:ef:e9:71:db:0f:c0:2d:32:
92:7b:cf:b2:1f:20:df:e2:43:a9:9c:9e:09:41:2d:
6b:60:70:49:1b:7a:4a:be:03:3d:6c:12:cb:e6:c8:
3e:f4:b5:0b:47:65:9a:e9:c6:6f:2e:e5:9a:58:00:
32:6e:e7:82:f3:1d:fd:07:09:9b:6f:a1:36:3b:6b:
50:be:53:6a:82:4e:24:c6:e3:fc:77:8b:61:fa:88:
93:b5:67:5b:c0:e3:2d:5c:23:36:ef:24:d3:7c:2f:
9d:7d:31:d4:d9:a9:c5:44:2c:77:d5:a6:16:1d:aa:
07:34:d0:f6:7c:f4:8d:f8:92:85:92:8b:f2:17:7f:
45:3e:62:b3:18:5f:cf:9d:f9:97:30:76:d9:1c:58:
92:b9:a2:ab:1d:36:88:a8:59:e7:26:c9:d2:91:12:
48:55:37:66:1b:c8:49:fb:25:52:96:46:41:52:19:
4e:e1:d0:69:4a:bc:14:62:91:fe:b4:a3:95:b2:63:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:B2:6C:09:BD:6C:14:68:52:91:C6:02:E2:10:F3:A2:EA:E6:9C
X509v3 Authority Key Identifier:
keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.152.0/24
IPv6:
2a0d:2540::/29
Signature Algorithm: sha256WithRSAEncryption
81:dc:c4:a3:f7:66:e7:4b:b0:d0:c3:c1:8f:32:bb:36:16:5f:
d0:ba:88:21:ea:bb:a1:9b:64:11:75:ee:0a:3a:d4:bf:3d:b8:
2f:d3:66:ed:e4:e5:13:5f:6b:fd:22:5c:3f:b1:bd:52:b8:97:
45:6f:c5:2b:95:4b:13:4a:1b:44:bf:39:ab:7d:aa:52:14:12:
fc:50:cf:52:00:9c:8d:23:06:d0:cc:23:c1:98:8a:06:48:bb:
7e:cf:6a:54:e8:87:06:0d:09:30:16:89:e6:f3:95:fb:99:af:
1e:76:4e:93:51:cf:53:c8:1a:a9:c2:a6:2a:e1:11:79:77:03:
50:e6:cb:17:72:53:2f:7f:c5:a7:81:30:59:96:11:2f:c4:63:
70:04:74:04:78:1d:55:bb:9a:5b:b9:35:91:7b:e2:ba:06:90:
b4:f4:ab:87:82:10:52:de:c9:74:3e:1c:64:62:71:b0:fe:4a:
31:0f:37:17:56:37:6a:79:96:ac:6f:fb:07:72:19:63:55:80:
40:9b:f3:65:f3:3b:0d:16:f7:38:01:f7:fc:c4:22:40:32:db:
1c:5d:28:a0:7b:9c:95:dc:5c:43:c6:2b:32:57:43:30:fc:c4:
5a:be:66:0a:88:1f:0b:c5:b7:82:01:7e:6a:8d:83:6a:c3:e9:
c1:08:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net