Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/b_Dm6TuKr2O9F9em_a6cktDchPg.roa
File: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (raw, json)
Hash identifier: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=
Subject key identifier: 6F:F0:E6:E9:3B:8A:AF:63:BD:17:D7:A6:FD:AE:9C:92:D0:DC:84:F8
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C6846FE71F5288FCE0109C95DA70
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/b_Dm6TuKr2O9F9em_a6cktDchPg.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56908
IP address blocks: 194.58.198.0/23 maxlen: 23
194.58.198.0/24 maxlen: 24
194.58.199.0/24 maxlen: 24
2a01:3f1:1980::/44 maxlen: 48
2a01:3f1:3000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c6:84:6f:e7:1f:52:88:fc:e0:10:9c:95:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ff0e6e93b8aaf63bd17d7a6fdae9c92d0dc84f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:79:e8:57:de:34:a1:d5:55:56:a5:77:c4:
9b:ae:b5:f2:dd:da:7b:87:e7:7e:b6:bb:33:56:3f:
9c:31:bb:6b:07:a6:13:4b:7f:36:12:e4:75:88:d4:
58:a5:b8:c1:17:21:c4:a9:49:c0:13:35:b4:4c:98:
ef:8c:33:8e:5f:9b:92:9a:ef:c5:43:99:17:fc:00:
96:a2:6f:46:2f:a1:67:30:91:2f:d4:3d:83:29:b6:
42:47:56:34:49:29:bf:3a:0e:8c:05:f0:bc:4a:af:
16:ec:cb:bd:c9:45:5d:6e:28:07:27:c6:73:ad:a8:
e2:65:5a:a4:07:e8:92:98:e4:97:81:5b:c4:a7:db:
22:30:5a:d6:a1:0b:16:f1:b2:00:81:af:c8:42:64:
6e:6e:79:3b:c3:36:fa:a7:51:68:21:12:ac:56:ab:
3c:da:f9:fd:89:7b:8b:23:ae:19:b5:cc:96:18:05:
5a:09:59:d5:76:5b:c2:05:06:29:9b:1e:e6:aa:53:
31:16:38:96:d8:ac:9c:aa:fe:cc:5e:ff:27:aa:98:
8d:25:88:89:a5:61:41:86:d8:06:f4:2d:88:4a:60:
7f:45:8b:e2:bd:5d:be:09:39:4a:48:2d:7f:7d:90:
bf:f7:a8:b1:e4:d8:c8:a9:68:93:3e:90:e1:25:c1:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:E6:E9:3B:8A:AF:63:BD:17:D7:A6:FD:AE:9C:92:D0:DC:84:F8
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/b_Dm6TuKr2O9F9em_a6cktDchPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.198.0/23
IPv6:
2a01:3f1:1980::/44
2a01:3f1:3000::/38
Signature Algorithm: sha256WithRSAEncryption
42:64:48:48:8b:42:9c:d0:08:e7:0d:40:9c:92:58:d5:da:b7:
39:27:f8:c6:f8:fd:f8:38:ae:0d:37:90:79:ec:33:6b:fd:d4:
fa:9d:86:2f:41:d8:50:01:32:97:19:50:ae:05:8f:a9:35:94:
32:ed:c0:94:8c:26:93:e3:d2:7b:5a:06:b2:c3:b1:7e:cc:73:
e4:42:75:55:02:b9:26:d1:77:e7:56:1d:45:c7:5f:e3:b8:28:
2f:01:e8:4d:8a:70:da:80:26:5c:ad:af:f2:5f:e3:aa:01:19:
4b:97:7c:d1:6f:97:ea:b7:3b:e8:16:6b:d2:1e:da:b4:a7:eb:
0b:68:1f:9a:49:5b:07:77:4e:f5:56:b0:2e:f9:a5:11:85:f8:
dd:fd:da:57:c4:70:84:dd:7f:2b:8a:8e:da:f9:8e:49:7e:e9:
d5:85:2d:d8:e6:71:81:41:a2:28:74:98:38:11:d0:32:29:55:
a7:19:d6:89:77:a4:71:bf:d8:63:c2:b9:f1:9b:82:41:46:e3:
41:69:0f:52:f6:ac:ee:c9:46:8b:0d:8d:6e:33:4f:30:9b:66:
42:e8:7a:be:16:2e:1b:02:14:0c:eb:02:12:ba:2f:89:87:57:
f5:44:a0:da:0d:e2:24:97:aa:c7:af:8b:da:be:4a:9d:5f:0b:
80:8a:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net