Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3swNa_xzTgP8AkYyLBBIrCVQ52s.roa
File: 3swNa_xzTgP8AkYyLBBIrCVQ52s.roa (raw, json)
Hash identifier: VNJUFw+Fdi5x2QiAhG7d0Y2q6bY9iIUHwJCHJkGc3H0=
Subject key identifier: DE:CC:0D:6B:FC:73:4E:03:FC:02:46:32:2C:10:48:AC:25:50:E7:6B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0195F0CF91EC3EC87FAE701E6C53DA241F7E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3swNa_xzTgP8AkYyLBBIrCVQ52s.roa
Signing time: Tue 01 Apr 2025 10:04:49 +0000
ROA not before: Tue 01 Apr 2025 10:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 81.29.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:cf:91:ec:3e:c8:7f:ae:70:1e:6c:53:da:24:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 1 10:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=decc0d6bfc734e03fc0246322c1048ac2550e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:88:08:43:c3:85:03:1d:e5:d6:35:8e:91:
c1:02:0c:cc:4d:49:05:96:12:34:fc:e8:9b:23:bc:
67:b2:71:4c:f2:2d:de:d4:34:34:66:47:53:27:39:
1e:d4:03:89:8b:74:c2:93:e8:0b:4e:ab:4a:f8:51:
85:76:08:ff:b0:67:54:cd:46:74:dd:0a:79:8b:c1:
cd:18:49:f2:d6:9c:75:9e:64:4b:a3:ca:be:8e:57:
0a:a2:43:47:35:a1:d5:82:51:65:c9:79:bb:7f:e5:
a0:ec:db:b3:0a:0b:02:f7:c9:69:ef:af:8c:7d:38:
ca:26:a3:b8:0c:21:6f:0c:67:69:59:9c:c9:3f:48:
e8:df:16:a8:e3:2c:ab:2e:82:31:20:5f:47:b4:f2:
27:06:62:e2:64:41:63:55:11:95:b8:51:3e:4e:8e:
7b:ef:32:f1:a2:09:b3:b0:5f:22:ad:ca:07:4a:5b:
72:50:9f:44:ad:c1:5c:a8:77:8b:51:c6:c4:fd:f0:
2b:0b:07:1c:98:96:1b:e7:aa:ee:25:9f:a5:ce:89:
6e:c3:15:d3:df:b9:a5:0a:e3:b1:b6:39:32:16:83:
f5:e1:0e:3f:2f:8e:cc:14:37:d7:bc:d6:ec:cb:34:
67:25:6e:c1:ae:8d:08:82:7b:94:79:c8:80:a4:b3:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:0D:6B:FC:73:4E:03:FC:02:46:32:2C:10:48:AC:25:50:E7:6B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3swNa_xzTgP8AkYyLBBIrCVQ52s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.147.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1d:7d:c9:07:e0:04:fe:30:76:a5:d2:70:cd:4d:1b:7a:16:
23:fb:44:dc:d8:7b:a1:f9:aa:fd:59:92:c3:39:c5:1a:0d:6b:
03:e3:17:fa:59:d5:f3:46:e9:04:f5:d8:7f:dc:da:fd:d4:99:
21:89:b7:15:63:95:52:3f:6e:1e:df:23:2b:5a:81:59:d1:77:
bf:f4:0c:0f:29:34:e3:d2:39:24:11:c9:73:c9:4a:1b:ae:d4:
3c:21:b2:31:13:59:09:d5:7b:65:01:69:13:60:1f:7f:a4:2c:
4b:c8:f1:b7:d2:cd:cb:79:ae:08:d0:93:2f:9f:ba:b7:c6:8a:
32:03:93:21:16:64:69:2a:54:0a:76:f9:bd:7e:99:a1:4a:22:
89:13:2e:a4:41:60:62:20:4d:1b:05:85:b7:5e:59:db:65:f7:
46:b4:ee:45:41:f4:10:40:09:1c:27:e5:e5:26:cb:cb:f4:ef:
7e:48:77:6c:58:78:55:ad:32:05:9a:f5:83:46:c6:2f:83:93:
9f:33:74:5f:bd:2c:3c:ca:93:89:e1:26:72:a8:21:7c:97:d3:
a6:3b:b9:03:df:25:7b:48:96:e0:bd:55:d4:f3:1e:fe:20:b7:
04:f0:b2:6b:f4:59:03:be:7c:51:1b:55:e9:36:2e:37:e3:a5:
d2:ee:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net