Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dy3_-2-qchhqwV6ugXKT-692o-I.roa
File: Dy3_-2-qchhqwV6ugXKT-692o-I.roa (raw, json)
Hash identifier: lFXyJxAwe/vhzRI9PjKD7egxkU6i67oTKHLLv3nHv9Y=
Subject key identifier: 0F:2D:FF:FB:6F:AA:72:18:6A:C1:5E:AE:81:72:93:FB:AF:76:A3:E2
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 01959DD1D6DAF8692CBBF9805C3767B9CA5D
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dy3_-2-qchhqwV6ugXKT-692o-I.roa
Signing time: Sun 16 Mar 2025 07:18:49 +0000
ROA not before: Sun 16 Mar 2025 07:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204079
IP address blocks: 46.36.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9d:d1:d6:da:f8:69:2c:bb:f9:80:5c:37:67:b9:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Mar 16 07:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2dfffb6faa72186ac15eae817293fbaf76a3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:14:40:1b:d3:7b:40:ca:08:8d:2c:9a:f5:
84:46:94:b3:41:d8:e1:67:94:25:a6:b1:66:12:7b:
3d:ff:5e:51:35:61:c6:38:db:32:19:0f:4d:5d:63:
85:a3:da:e5:cf:e8:05:fc:b1:1b:d1:71:f2:1e:4d:
3a:d7:92:51:f6:e9:3c:42:3b:10:63:f1:36:5c:d7:
b9:d0:56:7b:48:cc:20:8e:6d:7c:f4:3b:50:9f:ab:
81:c4:26:33:aa:8f:71:a3:8e:48:a0:d9:f8:bb:f6:
f4:4e:57:f6:5b:00:85:6b:81:47:d0:4e:8a:73:fb:
df:29:e6:48:ea:6c:04:05:38:7b:b9:1b:e8:61:31:
4f:59:c8:7b:2f:8f:a7:14:b8:0c:9f:e7:1d:ad:f7:
7d:f5:f5:bc:50:83:31:70:02:ca:f5:0e:ee:6c:48:
86:54:d6:76:84:9d:58:f3:b7:1c:7b:4e:df:df:60:
2c:57:aa:2a:0e:d0:c1:06:71:dd:1f:d3:ad:99:25:
32:c4:a0:b8:e3:fe:33:b5:3b:97:68:a3:9d:06:20:
9f:6e:22:6d:50:cf:c6:be:c3:0b:65:35:90:6d:02:
37:45:40:ac:fa:9a:fe:b9:dd:af:ab:16:92:77:70:
b9:2f:2f:69:3f:22:25:05:e1:e7:36:07:1b:91:0e:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2D:FF:FB:6F:AA:72:18:6A:C1:5E:AE:81:72:93:FB:AF:76:A3:E2
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/Dy3_-2-qchhqwV6ugXKT-692o-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:81:1d:27:60:ef:a8:71:41:76:79:ac:e9:ae:86:cf:3a:29:
e7:15:8a:a2:43:dd:75:30:78:de:d3:2e:52:f4:e2:bb:ed:b6:
db:b0:ef:1c:df:74:42:3a:59:e3:ec:fd:14:0d:90:43:9d:59:
05:22:6b:04:16:4a:a2:ee:57:4b:2c:c7:1d:9c:08:cd:e3:59:
5b:2a:ea:2b:f7:e1:d9:c3:ce:2e:26:25:22:78:6b:a9:d3:a1:
ef:f5:09:d3:bf:6a:01:ae:3f:ee:1e:88:5f:23:b1:af:2b:4d:
36:03:f3:31:51:b0:16:62:e3:f6:c1:ff:55:b7:a4:45:b3:95:
3e:9f:58:a8:12:84:46:60:78:8b:ee:2a:ce:57:7b:ed:c5:f1:
df:91:27:60:e3:1f:0b:12:32:ae:80:18:36:23:6b:7e:02:e1:
d6:c5:29:61:dd:56:34:2d:0b:9c:15:09:03:1f:06:d5:8c:ea:
c5:e2:13:a9:df:9e:53:b7:6d:f2:55:92:3b:d8:d9:e4:7e:33:
70:89:55:4e:00:4d:ed:6a:68:79:27:b5:50:ea:b4:33:5e:db:
2a:d2:13:a0:04:c6:ff:ba:e6:8f:fe:61:5c:84:02:e4:68:3a:
28:ff:51:25:64:f1:50:38:df:e1:62:13:4e:8d:1a:49:4f:c2:
8d:1c:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net