Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/CgYapJdE3lATpkmQavkm2MlhTAs.roa
File: CgYapJdE3lATpkmQavkm2MlhTAs.roa (raw, json)
Hash identifier: leTUYkK/UbPoz5ypT99weLoqPEKtLynpZc0EJfzHDjs=
Subject key identifier: 0A:06:1A:A4:97:44:DE:50:13:A6:49:90:6A:F9:26:D8:C9:61:4C:0B
Certificate issuer: /CN=463528c540a6d577c2d1cc1a6eea17124b392386
Certificate serial: 0194206800B1F95647BF19AA3737ECA4B52E
Authority key identifier: 46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/CgYapJdE3lATpkmQavkm2MlhTAs.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61094
IP address blocks: 194.56.72.0/23 maxlen: 24
194.56.74.0/24 maxlen: 24
194.56.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:00:b1:f9:56:47:bf:19:aa:37:37:ec:a4:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463528c540a6d577c2d1cc1a6eea17124b392386
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a061aa49744de5013a649906af926d8c9614c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:80:8b:bd:65:90:c9:44:16:87:34:83:08:
e8:56:3a:23:5d:a7:b3:f5:4f:47:ac:06:b3:c4:39:
19:d0:2c:4c:75:08:cd:ba:f6:29:f9:a0:52:c2:66:
99:12:ef:11:6c:e8:b7:64:c0:2e:f6:1c:d1:15:93:
24:fb:1a:01:ef:04:82:15:5a:b5:32:37:de:1f:ad:
1d:07:14:42:89:19:ff:f4:4f:c1:36:a1:a1:64:82:
fb:79:0c:6e:13:b9:3c:90:7f:05:3e:e7:97:df:83:
e3:d7:2c:78:ec:26:63:44:c2:44:15:ba:d1:58:6c:
e2:1e:82:d3:71:ab:ce:ed:64:6d:f1:3c:75:77:d9:
31:15:1a:6e:1a:4a:f1:05:72:d1:31:0f:e7:85:e9:
1f:ac:3e:47:e2:f9:70:0d:b7:8a:3d:89:56:93:21:
9b:c0:b0:c4:5d:59:6e:e5:dc:2c:d6:49:07:be:d6:
2c:be:f7:50:a7:d4:b8:61:e8:c7:35:fe:8a:51:12:
94:bd:d3:38:4e:e7:47:56:87:f2:dc:11:7f:10:07:
e4:85:22:21:54:60:62:2e:ed:3c:83:b0:a6:d5:d8:
34:b6:e5:fd:17:2d:00:fb:65:4e:51:bb:e7:31:0f:
32:2d:73:20:c8:ec:28:0e:c4:98:f6:3a:94:56:c4:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:1A:A4:97:44:DE:50:13:A6:49:90:6A:F9:26:D8:C9:61:4C:0B
X509v3 Authority Key Identifier:
keyid:46:35:28:C5:40:A6:D5:77:C2:D1:CC:1A:6E:EA:17:12:4B:39:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjUoxUCm1XfC0cwabuoXEks5I4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/CgYapJdE3lATpkmQavkm2MlhTAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c96291-5efb-41b3-bcfb-92b0fd5d7644/1/RjUoxUCm1XfC0cwabuoXEks5I4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:52:67:93:45:89:da:fd:84:b6:a7:a8:37:e3:d5:86:61:d0:
99:54:69:38:3c:8e:73:4d:79:d4:71:19:e4:77:ed:0c:d9:78:
8c:a7:ba:54:9a:df:a5:6f:ce:9d:8e:b8:29:87:56:ee:b0:d4:
28:67:3c:68:ad:3e:80:3c:93:f7:e2:6f:53:b1:48:9d:f0:36:
cc:e0:2a:22:6f:92:c8:cf:5b:04:67:2e:c6:4f:b0:55:34:03:
6a:6c:ed:51:f5:81:63:04:37:41:74:80:ba:93:0d:c0:58:9e:
2c:5b:b2:c1:43:c7:5d:2b:76:68:9c:47:9f:3c:42:15:d5:5c:
e3:bd:d5:04:f5:d2:64:21:2a:d2:b2:12:b3:1e:2b:06:38:39:
b7:c2:69:dd:44:83:ae:01:fd:55:08:ed:1e:15:3d:a7:31:de:
70:8c:c7:20:7d:62:d0:f1:b5:38:fa:57:c0:59:b9:df:6c:75:
29:5d:ae:b9:dd:4c:96:54:96:77:40:81:8b:77:88:2e:6f:29:
8f:55:58:08:10:f0:f3:8d:c6:cf:c2:a6:45:4a:05:18:d9:f5:
b4:81:6b:cf:6a:c2:dc:9f:01:80:99:8e:ed:86:9d:5a:c7:45:
6b:42:ac:a8:09:cd:ea:09:0c:78:e3:62:f3:93:53:fa:44:91:
5b:1c:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net