Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/dpkm40-IuRL9U8FvKYAgHOT_e-Q.roa
File: dpkm40-IuRL9U8FvKYAgHOT_e-Q.roa (raw, json)
Hash identifier: +pLEc9f+ONTMmL/MqR34HQq2JVpi5u/RLk7sW+pSBCk=
Subject key identifier: 76:99:26:E3:4F:88:B9:12:FD:53:C1:6F:29:80:20:1C:E4:FF:7B:E4
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 01943BC5FE2655CC5B30F25EDB62E4328530
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/dpkm40-IuRL9U8FvKYAgHOT_e-Q.roa
Signing time: Mon 06 Jan 2025 13:20:18 +0000
ROA not before: Mon 06 Jan 2025 13:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207474
IP address blocks: 94.231.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:c5:fe:26:55:cc:5b:30:f2:5e:db:62:e4:32:85:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Jan 6 13:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769926e34f88b912fd53c16f2980201ce4ff7be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:50:e6:01:a2:6f:f7:7c:8a:c0:79:50:46:
67:63:b7:f1:1b:d3:78:ab:b2:a3:ea:5c:8c:f4:b5:
01:a5:09:b9:97:17:70:b7:e0:c8:9d:2d:48:a3:a9:
b4:f2:9c:94:1b:e0:89:61:5e:d9:25:8b:bb:36:54:
f1:b5:92:57:f5:65:65:42:4b:4b:31:9d:97:24:33:
3f:6e:f9:74:c1:29:7a:1f:42:2a:d6:c0:ef:03:32:
fd:af:5d:09:cc:a6:db:5c:43:58:2c:46:e0:8f:2f:
f2:23:0b:08:af:60:c7:04:81:fb:31:1e:d3:fb:3d:
77:c3:23:b0:ac:0c:0f:14:ad:b1:b4:ca:84:2d:c2:
11:aa:52:5d:6d:28:95:af:1b:7c:22:94:01:2c:14:
9e:3b:ae:d5:31:8e:84:ea:01:62:3c:c8:64:02:b7:
07:eb:cb:f7:93:b3:8d:1c:0d:3a:1b:85:9a:bb:cb:
7e:1e:4a:35:05:3c:a3:0a:90:a7:c0:2b:21:2c:4f:
c7:d9:d2:73:4f:de:00:ea:c7:d7:f5:69:0b:c6:d6:
9d:8f:17:25:1f:8c:19:73:5b:cd:e7:0b:f1:2a:ce:
46:24:bb:21:6a:fd:89:c1:81:42:30:39:05:05:1d:
dd:29:63:71:f8:b6:d6:91:5d:ca:7e:81:9b:5b:2b:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:26:E3:4F:88:B9:12:FD:53:C1:6F:29:80:20:1C:E4:FF:7B:E4
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/dpkm40-IuRL9U8FvKYAgHOT_e-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d5:af:1d:9d:74:b8:de:3c:e5:6a:e3:34:aa:19:d0:cf:9b:
7c:e8:66:7b:e5:0e:5a:22:c3:b4:07:5a:bb:7b:13:0f:be:51:
c2:e6:5b:6c:14:f5:e2:c6:c0:ff:30:28:0c:e2:44:49:ca:39:
6a:66:ad:44:71:eb:a5:31:60:f7:2d:0a:2f:38:fe:38:9f:8c:
c1:d8:73:3d:05:ff:78:ad:2f:20:74:3e:e9:6e:56:fc:fc:b5:
58:1d:34:fe:27:fb:6b:3f:63:8a:f4:5f:e2:1a:64:8b:ac:cd:
35:47:5d:fa:7b:2a:01:7c:04:1e:a0:a3:26:ff:20:6f:b7:fb:
26:f3:e4:3c:ed:c1:9e:9e:3e:f1:12:07:fd:2e:e9:35:db:4a:
b3:8c:d6:bd:61:61:ff:12:93:a8:ed:aa:57:ab:c9:50:7b:d6:
89:cd:39:aa:3f:06:c4:13:0b:c4:43:58:d0:a3:65:ae:95:1b:
71:df:27:60:cd:19:31:7d:fa:b7:39:3a:a7:42:d5:44:53:b4:
15:cc:62:f5:f2:9e:7a:20:88:c5:a1:93:5f:3f:51:8d:8b:6c:
6d:52:a3:f2:f1:83:ee:28:09:ef:c3:33:ca:5b:f7:25:72:56:
45:95:60:c9:79:22:99:31:b2:86:87:3d:80:af:e5:d8:d6:2b:
63:d8:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:03:38 2025 by rpki-client on console.sobornost.net