Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa
File: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (raw, json)
Hash identifier: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=
Subject key identifier: 3F:70:1A:60:64:86:30:37:39:57:A5:EF:9C:C5:9C:E0:D2:7C:49:B8
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019420682CA55C51D03B8A04FFB10268CCB3
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa
Signing time: Wed 01 Jan 2025 05:48:05 +0000
ROA not before: Wed 01 Jan 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48613
IP address blocks: 194.126.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2c:a5:5c:51:d0:3b:8a:04:ff:b1:02:68:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f701a60648630373957a5ef9cc59ce0d27c49b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:2b:5a:82:24:cc:6d:1a:8c:33:ba:fc:da:
1f:97:15:b4:5f:b4:20:73:ca:20:9e:c4:7a:39:f8:
1c:2d:e2:b3:62:c9:55:70:f5:90:ab:28:4c:c4:1e:
81:91:7b:5b:82:ed:c7:20:70:9f:77:35:22:c2:5e:
d8:2c:82:fa:a7:4d:98:f1:b1:bc:81:08:62:ff:39:
02:56:30:51:d0:b0:82:6b:24:c6:9b:8d:ae:b7:fd:
92:04:7d:a3:80:8e:10:db:2d:31:9a:82:c5:05:b8:
25:ce:39:b8:82:eb:a0:3c:dd:49:c0:c7:91:6b:f4:
73:a3:b4:5e:44:07:10:22:cb:1e:31:38:c9:f2:ab:
fe:20:a4:95:34:b8:f4:0b:0a:4d:5a:3c:98:13:29:
f0:72:c2:e4:53:2b:b3:05:37:8f:7b:61:54:85:d3:
18:9b:0b:cd:c3:ce:e5:2b:da:07:a7:02:68:3e:12:
e5:30:46:64:02:f5:e8:61:77:00:b4:21:71:da:58:
0c:1c:be:c0:3b:45:36:a1:61:5f:bc:e1:da:b0:61:
8b:ec:25:85:35:07:32:c7:74:6e:fb:ef:0d:40:fe:
c9:c4:80:ce:b6:bd:dd:99:68:42:18:61:b3:4f:b6:
13:ed:4e:86:62:79:70:cb:0e:27:37:5c:d4:7f:10:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:1A:60:64:86:30:37:39:57:A5:EF:9C:C5:9C:E0:D2:7C:49:B8
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c4:f5:f1:47:23:66:53:dd:f9:c9:9e:b6:f6:c9:09:c8:66:
fc:9e:9a:3f:87:52:b4:6f:5b:6a:37:37:03:89:eb:c9:3f:b1:
25:59:f7:ba:d1:27:b7:45:3a:db:cc:7a:aa:45:d1:54:3d:ca:
6c:7e:64:46:f3:c8:14:db:f5:77:47:9e:6a:cc:5c:1a:d8:e7:
2a:3a:6f:7c:29:42:75:f1:36:93:16:90:23:73:0e:a2:f6:a0:
74:29:20:a7:8c:34:58:72:37:c8:96:66:db:79:1b:93:12:8c:
7f:79:51:0a:81:4a:18:63:22:a9:71:b2:0d:01:2f:63:ec:0d:
a0:e6:40:cf:e2:40:4a:34:3a:41:0a:8d:bb:7d:91:47:c0:92:
6f:67:ee:9c:e8:f8:7b:69:b3:35:41:cf:94:9e:3e:ea:37:26:
55:e4:3d:67:3d:72:3f:bd:61:aa:f0:6a:fd:12:d6:f8:e2:77:
6c:3b:c1:98:05:57:0b:dc:c2:9f:84:ab:98:45:4b:dd:f3:37:
ec:06:ee:de:4a:1b:84:6c:c7:13:4a:94:9e:ee:10:c0:a6:37:
ff:b8:65:87:27:9a:86:5e:47:2d:b8:f5:30:0f:d7:8f:02:37:
de:05:ab:6a:bb:9f:56:b4:da:25:9e:ac:34:63:2d:2d:02:48:
fc:e4:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net