Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3LVaNB3KvQ965s6UullJWswPfp0.roa
File: 3LVaNB3KvQ965s6UullJWswPfp0.roa (raw, json)
Hash identifier: NBkjOrmtXqy4cOSfRjbCEsV2ppZ0hs9sC51ZL54sXAY=
Subject key identifier: DC:B5:5A:34:1D:CA:BD:0F:7A:E6:CE:94:BA:59:49:5A:CC:0F:7E:9D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0196005B5D65D43573C7A2E4D58BE6ED2077
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3LVaNB3KvQ965s6UullJWswPfp0.roa
Signing time: Fri 04 Apr 2025 10:31:49 +0000
ROA not before: Fri 04 Apr 2025 10:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 212.32.48.0/24 maxlen: 24
212.32.49.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:5b:5d:65:d4:35:73:c7:a2:e4:d5:8b:e6:ed:20:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 4 10:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcb55a341dcabd0f7ae6ce94ba59495acc0f7e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:4c:a7:71:22:57:c2:ea:96:22:a1:c9:51:
80:a8:18:d7:3f:00:c8:87:60:22:bb:c7:50:f6:67:
5c:19:c2:88:11:59:d3:fd:aa:60:99:46:4b:2b:89:
c1:e2:82:e2:c8:39:83:5c:d2:01:62:ba:aa:42:ee:
94:4b:ee:5d:0f:0e:10:82:8b:48:b0:46:d5:f2:8f:
fa:57:bb:81:65:64:b8:08:93:50:50:de:13:61:8f:
54:a7:c2:45:cf:15:b6:a8:63:75:fe:91:81:b9:5a:
49:28:ba:58:11:4d:1a:2c:d9:de:71:69:3b:ec:d1:
a6:54:b1:2b:d1:5f:47:5e:4e:49:b2:6d:47:54:3a:
cc:f3:d9:27:46:3b:cd:c5:f3:2e:3b:9d:e5:3f:1c:
52:37:c5:a5:74:ae:6a:16:c1:0a:43:82:9f:d0:e6:
7d:d5:00:40:1c:4b:87:1e:06:29:d5:bd:a0:bd:6e:
c4:43:bd:7b:10:4a:fe:fe:96:e6:2d:af:a6:d2:73:
1f:47:aa:32:db:49:5d:b0:08:5f:6e:93:cd:ef:3c:
65:99:75:61:8a:9c:61:e5:95:03:19:9b:31:89:a8:
86:ab:0e:ec:d3:c1:86:eb:72:46:bb:ef:fb:1d:ac:
aa:7e:c7:99:c6:a5:82:ae:56:5a:7e:2f:9b:a8:6b:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B5:5A:34:1D:CA:BD:0F:7A:E6:CE:94:BA:59:49:5A:CC:0F:7E:9D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3LVaNB3KvQ965s6UullJWswPfp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.48.0-212.32.50.255
Signature Algorithm: sha256WithRSAEncryption
d8:e9:62:2e:db:a1:06:00:c9:70:54:e4:ec:61:e7:35:a4:75:
c7:f2:ca:49:a7:97:77:eb:fa:fd:1f:8d:2d:65:7e:75:16:cf:
b5:3e:4f:53:e8:c4:0d:6c:47:39:f8:ea:26:7d:b4:3f:94:66:
3d:c1:36:d6:fe:8d:49:d7:05:c5:e4:8a:40:2f:48:71:91:aa:
49:d5:8d:ad:05:0c:44:f8:41:24:25:d4:bf:46:52:19:a8:b2:
e5:97:aa:17:41:05:0d:9f:8d:be:ac:ca:d3:13:08:7b:70:83:
5e:92:29:67:c0:9a:07:52:2f:c1:f8:f3:9a:e2:56:91:c6:fc:
65:e2:7e:4b:cc:3d:45:b2:0e:2a:f1:e3:18:ef:ea:79:c5:a5:
ad:74:2a:35:6f:65:ec:50:08:b0:05:86:31:b1:17:0f:b6:bb:
00:2e:67:85:14:e7:e3:97:06:6f:65:37:cd:2d:a3:9a:68:92:
33:4e:06:75:72:da:95:df:ab:43:7a:6a:ae:e7:cf:d1:0c:c4:
66:b1:2e:24:5b:f1:59:6d:08:46:8e:43:50:86:84:51:0b:58:
b6:dc:4b:71:d3:c4:8e:90:32:e2:04:71:22:e2:a5:48:8f:b2:
aa:a7:b2:1f:7f:98:07:16:a3:e3:d9:e1:de:56:b2:9a:85:c7:
cb:25:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net