Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_cP3UgMYs8ntd5Y34tF6UHpwjlY.roa
File: _cP3UgMYs8ntd5Y34tF6UHpwjlY.roa (raw, json)
Hash identifier: Yp8eev8CClESbwcOmaBbySaMT8kebzpXR37poP+ygPE=
Subject key identifier: FD:C3:F7:52:03:18:B3:C9:ED:77:96:37:E2:D1:7A:50:7A:70:8E:56
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01960F4473EAA7DB38D0D26C2541EDA7A891
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_cP3UgMYs8ntd5Y34tF6UHpwjlY.roa
Signing time: Mon 07 Apr 2025 08:01:06 +0000
ROA not before: Mon 07 Apr 2025 08:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 109.176.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:44:73:ea:a7:db:38:d0:d2:6c:25:41:ed:a7:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 7 08:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc3f7520318b3c9ed779637e2d17a507a708e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:f8:c9:e1:ca:5a:dd:bd:6f:21:8f:d0:4a:
73:02:4c:da:d2:56:b8:ec:b3:cb:78:94:e6:30:b2:
bf:7a:e6:20:11:b0:09:9e:71:4a:49:40:a5:54:82:
13:6c:89:45:ba:82:31:f9:77:29:4f:1c:4c:37:d4:
b8:bf:1a:57:9e:83:c8:fa:97:bb:b6:6f:aa:7d:22:
3c:0b:e1:4b:f2:93:fd:88:0f:3e:de:ad:95:a6:b2:
34:b0:9d:a1:83:d6:94:60:84:a1:0a:69:5d:9d:5e:
ea:e8:3b:94:2f:48:fa:7e:94:52:a1:58:17:14:3f:
37:0d:3d:ff:ef:50:b3:38:07:62:29:e2:bd:a5:16:
d1:a9:9f:9f:a9:21:07:e3:1c:83:8c:f6:d4:58:92:
54:0c:a4:d1:a9:9c:1b:94:28:b7:25:64:20:ca:67:
fd:49:c5:65:5a:66:62:7b:3b:97:2e:0f:83:bf:21:
a1:c0:bf:f1:19:35:a7:5a:b9:03:32:10:1b:f0:90:
8b:04:14:15:e6:53:1a:81:41:7f:42:e6:96:82:3f:
72:a9:3f:3a:04:e6:a8:b1:ce:10:ee:f3:36:bb:89:
45:04:76:24:ec:2b:f9:46:a5:7a:0b:10:e0:d6:53:
d0:0f:52:5c:fa:f6:17:2d:d6:62:4f:e8:ab:e1:99:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:F7:52:03:18:B3:C9:ED:77:96:37:E2:D1:7A:50:7A:70:8E:56
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_cP3UgMYs8ntd5Y34tF6UHpwjlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:16:f8:59:0d:cd:cf:7d:a5:06:6b:82:79:b0:8f:ef:51:fa:
f3:d4:59:54:cc:bb:03:ab:76:22:f4:c6:fe:4e:fc:69:ea:99:
85:33:7c:ee:13:d7:4d:90:ca:25:ec:0f:dc:16:5d:bb:fb:06:
18:f8:26:9b:60:0e:58:d5:11:68:1c:80:a8:bb:53:30:18:58:
42:2f:b6:16:72:6d:77:b1:18:f8:78:5a:42:ed:f0:99:db:84:
15:0f:08:5b:c2:d6:18:0d:8c:18:b2:90:62:5a:13:c5:90:bf:
2d:95:37:22:b0:ad:ce:ad:d9:06:4e:2d:01:91:3e:9a:c6:f7:
1e:d6:85:c7:4a:40:a0:67:07:db:f0:54:9a:e0:b6:31:83:1e:
6d:5e:1a:87:0b:08:b0:e2:dd:69:7c:99:70:f0:3a:00:5a:c2:
5e:1d:7b:2f:d9:e4:73:aa:d0:88:52:bd:f2:0e:a6:2c:e2:13:
ae:4c:00:cf:37:6b:27:f7:93:2f:e7:87:24:6f:29:c3:29:08:
8e:31:81:a1:98:2f:2c:79:e9:14:90:c5:23:da:4b:43:14:03:
1d:74:06:64:01:12:2e:75:ad:9b:22:f5:46:86:53:19:e0:39:
dc:e9:52:be:2e:4f:12:c4:c0:0b:d3:25:28:d9:8c:ad:1d:00:
97:f2:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net