Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/DczTrrLnDVPPLA9bSnvmxSynfMo.roa
File: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (raw, json)
Hash identifier: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=
Subject key identifier: 0D:CC:D3:AE:B2:E7:0D:53:CF:2C:0F:5B:4A:7B:E6:C5:2C:A7:7C:CA
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 01942824384E1B80059EBA4FD4BD44D4A1B2
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/DczTrrLnDVPPLA9bSnvmxSynfMo.roa
Signing time: Thu 02 Jan 2025 17:50:49 +0000
ROA not before: Thu 02 Jan 2025 17:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42580
IP address blocks: 78.29.128.0/18 maxlen: 18
81.20.240.0/20 maxlen: 20
128.65.224.0/19 maxlen: 19
185.218.12.0/22 maxlen: 22
2a0b:c1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:38:4e:1b:80:05:9e:ba:4f:d4:bd:44:d4:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jan 2 17:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dccd3aeb2e70d53cf2c0f5b4a7be6c52ca77cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:c8:b7:fe:38:fb:25:99:e9:06:42:7b:71:
1a:3a:1a:09:92:69:e9:f6:d7:4b:e0:67:8f:c9:71:
9b:17:cc:39:14:8e:60:8e:db:b3:93:e7:a3:a8:10:
a1:3f:53:f0:30:b0:d8:4c:de:5e:3a:8b:29:3f:13:
b8:94:e9:1c:90:04:7c:7a:6b:1d:49:59:bc:af:e7:
d3:1c:11:bd:6e:21:f3:8b:2c:8b:a7:d8:3b:71:c1:
75:92:a7:86:12:5c:2c:05:55:1d:e6:b7:75:5b:9c:
be:53:59:71:d8:f5:cb:8a:5d:e0:e7:84:47:27:95:
88:73:22:08:51:f8:27:e4:d1:f9:f0:bf:c8:b5:88:
60:45:ae:f1:52:1b:2d:67:2f:e4:49:5e:bf:a1:cb:
f2:c4:7b:e1:bb:7c:9d:da:08:17:41:10:8e:d7:94:
35:c8:0b:1a:54:e4:aa:b3:7f:a5:bf:17:28:94:37:
6f:87:a2:14:42:3d:fa:12:80:bf:72:bf:4d:2e:0d:
f4:d7:68:f9:3f:86:eb:53:c4:53:06:e0:97:90:9d:
eb:fd:78:11:1e:30:9a:6e:44:29:44:e8:90:e3:d9:
0d:ed:66:95:58:4f:16:c8:dc:79:de:ab:9b:c4:cb:
f7:ed:cc:e7:a0:29:c9:19:cd:d7:e1:2c:58:37:6d:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:D3:AE:B2:E7:0D:53:CF:2C:0F:5B:4A:7B:E6:C5:2C:A7:7C:CA
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/DczTrrLnDVPPLA9bSnvmxSynfMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.29.128.0/18
81.20.240.0/20
128.65.224.0/19
185.218.12.0/22
IPv6:
2a0b:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
ee:9f:c2:4e:84:51:b8:ae:a8:ba:93:fa:be:c5:b5:da:73:b8:
86:af:38:55:97:27:52:6a:61:ca:c4:ae:e2:8b:d9:24:af:de:
39:1c:4e:c2:37:85:07:6a:dc:1e:a0:a4:6a:9a:2f:c2:74:15:
1b:e3:49:2c:d0:8a:73:c0:ca:40:3e:16:7f:09:a2:f0:e4:85:
36:28:71:5a:33:3b:08:1c:5a:c5:11:f9:eb:3c:05:bf:3c:bb:
ea:ac:dc:98:2d:15:db:db:3a:73:87:6b:56:e5:7d:9f:83:76:
1d:e8:31:ea:f1:9e:e7:1e:b0:77:b0:84:6f:99:a2:a4:5d:ed:
fa:73:01:71:16:df:62:ae:7c:5e:34:bd:b6:f6:f9:ef:12:6f:
a4:be:01:3e:2b:68:4d:6d:a9:21:7c:b8:ba:29:8f:ac:e4:57:
97:29:e8:0b:bd:c0:09:34:e4:6b:7f:a0:94:bc:98:43:ac:4d:
92:7e:cc:6b:d5:77:1e:2b:c2:e7:b3:3c:96:c5:15:0b:16:b1:
be:b9:cb:88:2f:1b:b1:17:41:bd:9c:cc:fd:e8:31:7c:a5:2b:
c2:98:1e:b7:38:b4:5a:34:70:bf:75:af:59:38:86:29:24:80:
41:29:d5:bf:6a:fe:d2:12:12:8b:b0:e1:ac:c3:21:be:93:a7:
7a:75:a5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net