Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa
File: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (raw, json)
Hash identifier: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=
Subject key identifier: C6:9D:CC:2E:4C:3A:A1:0D:4E:EF:85:E6:B7:84:0F:35:83:11:81:4A
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 01942369B862BAB1158234725824F6D435D1
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa
Signing time: Wed 01 Jan 2025 19:48:38 +0000
ROA not before: Wed 01 Jan 2025 19:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202021
IP address blocks: 185.56.64.0/22 maxlen: 24
185.56.64.0/24 maxlen: 24
185.56.65.0/24 maxlen: 24
185.56.66.0/24 maxlen: 24
185.56.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b8:62:ba:b1:15:82:34:72:58:24:f6:d4:35:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Jan 1 19:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69dcc2e4c3aa10d4eef85e6b7840f358311814a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:10:b6:95:e0:78:2a:47:f6:72:71:14:f9:
f3:9c:4a:cc:8f:80:90:f8:67:9c:1f:8b:7f:cd:75:
97:65:52:40:92:33:6c:13:02:76:02:f8:55:2c:cc:
48:99:b1:ac:aa:33:99:7b:99:1b:22:09:a8:77:62:
3d:1a:77:1a:36:82:3d:6c:0b:e7:42:bb:9d:44:fd:
05:bb:d2:fa:a4:69:16:e6:18:f9:f0:ca:62:66:a9:
ad:f6:35:5e:c1:1a:e7:a5:0b:d2:e6:5e:a7:70:b2:
a4:ff:e2:c2:d6:f0:8a:d8:a9:19:20:3d:92:24:d0:
ad:0e:f8:4a:a0:15:dc:60:5f:fd:e4:dc:06:ff:0d:
2d:41:0e:79:13:ae:06:b7:f4:24:d4:44:b6:29:7e:
57:2d:eb:06:19:24:df:8e:57:8e:2d:67:32:e2:41:
3e:a7:e3:58:b6:cc:13:5c:3e:55:44:50:b3:9d:6f:
57:05:cf:3b:6d:bc:de:f8:3c:b3:c8:3a:05:9f:8d:
0f:86:8a:3b:c5:80:6e:18:fd:58:36:73:d4:11:1a:
6a:cf:c8:5b:2c:e6:29:b0:39:80:17:d1:b2:35:c6:
4f:04:e6:0d:85:0b:75:f2:d0:39:9b:61:7c:6a:62:
3b:8a:ba:da:4c:6c:e4:ab:2c:8f:28:7c:2e:d5:e4:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9D:CC:2E:4C:3A:A1:0D:4E:EF:85:E6:B7:84:0F:35:83:11:81:4A
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.64.0/22
Signature Algorithm: sha256WithRSAEncryption
23:1a:37:00:d7:ad:8b:31:31:0c:d1:f3:29:80:bd:ab:84:44:
93:20:85:43:58:b6:8a:0f:e5:a4:94:f7:21:f7:31:22:f4:29:
b3:58:b5:22:40:33:97:ff:e7:c4:27:29:b8:c6:bf:3f:d3:e4:
19:95:4d:d5:66:40:e7:db:8f:77:47:e2:17:2e:51:22:86:4f:
55:b6:fe:8f:cd:71:7b:d3:c9:1c:51:e2:1f:24:99:33:a1:02:
5f:30:77:6c:f4:10:1e:15:3b:12:d5:a8:05:0f:1c:cc:4d:23:
81:6a:c6:2b:46:d0:3b:f2:1f:ce:5b:22:06:81:67:e9:83:e8:
02:1f:b5:9a:e6:63:06:59:ec:34:4e:ea:71:fc:ab:30:ad:83:
a9:63:f6:f5:7e:ed:9f:cc:bf:01:77:e0:b7:f3:61:69:c2:ef:
fb:12:d2:b5:f1:84:87:16:0d:05:99:7d:80:5b:ed:b8:63:be:
7b:5a:bd:27:c2:43:e8:d6:90:13:a1:c1:0c:49:c4:4b:be:e0:
a1:db:cf:52:c8:fd:4a:84:8d:38:29:68:cc:d9:ef:6a:4f:bb:
26:4a:91:80:ad:94:7e:ea:a7:b0:33:c9:7c:7e:74:41:be:03:
71:4a:be:ef:9e:29:fc:37:b0:8a:68:84:99:09:56:d0:df:1a:
90:c6:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net