Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/D2t0G5l-no81p6rarPw2-EpQMYw.roa
File: D2t0G5l-no81p6rarPw2-EpQMYw.roa (raw, json)
Hash identifier: Ao7GMS7CFmzAFJghE2/XSbtoAU6qWDBHEwHUCZKTHwY=
Subject key identifier: 0F:6B:74:1B:99:7E:9E:8F:35:A7:AA:DA:AC:FC:36:F8:4A:50:31:8C
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 0194214460CE52E47954B5DDBBDD80ECB54E
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/D2t0G5l-no81p6rarPw2-EpQMYw.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48278
IP address blocks: 94.244.0.0/18 maxlen: 22
185.191.148.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:ce:52:e4:79:54:b5:dd:bb:dd:80:ec:b5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f6b741b997e9e8f35a7aadaacfc36f84a50318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:1f:94:2c:66:c8:a7:b0:c0:7d:78:d5:ab:
88:a3:cf:c4:b9:8f:02:2e:59:58:c8:b8:02:62:92:
e9:a8:ee:1e:51:31:76:e4:c6:cb:3d:32:b1:1a:02:
ce:b1:bb:51:b7:07:a8:94:2c:1b:6f:d3:ab:5a:62:
8c:6a:78:ce:77:da:67:1b:10:b3:ae:7e:8f:f7:28:
65:09:0e:47:1d:ab:76:ab:36:84:78:a6:54:30:df:
2d:5e:a6:8d:1f:94:94:e0:c6:58:64:f0:cb:5f:b1:
f4:97:05:0d:99:15:b1:97:be:34:88:56:66:1f:2a:
fe:68:36:00:62:b0:b0:8d:64:3c:f1:b0:b3:cb:ef:
62:c1:d2:60:ef:d6:9f:f1:b7:55:c5:2d:55:4a:8b:
71:44:0b:29:ce:db:0e:26:08:9b:0a:6b:50:17:9f:
0a:d8:b2:86:b4:22:f5:b5:de:6e:60:a8:2c:c1:f5:
c0:72:3d:ad:e7:fd:c6:64:03:aa:dd:6c:7e:e9:a2:
a4:ff:e6:6f:b3:ef:e6:9e:93:4a:e8:a3:f0:f3:1f:
24:4d:85:77:1e:e2:a2:cf:06:c8:6c:74:91:76:08:
e4:75:b3:94:c6:41:a5:32:1e:3a:cb:06:02:2c:ac:
92:48:03:e2:e1:fd:1c:8c:dd:2b:27:60:aa:49:75:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6B:74:1B:99:7E:9E:8F:35:A7:AA:DA:AC:FC:36:F8:4A:50:31:8C
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/D2t0G5l-no81p6rarPw2-EpQMYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.244.0.0/18
185.191.148.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f4:57:ed:e6:28:da:aa:86:25:54:9e:0c:90:0f:f3:ce:2f:
ba:30:8a:3b:87:d2:98:8c:34:4e:35:b8:a2:62:31:02:34:99:
76:3a:a1:7e:07:d6:58:12:83:8e:38:ff:b9:67:bf:40:a7:47:
06:60:a9:c2:f8:b4:90:60:81:6c:a5:93:17:c9:45:de:df:f3:
35:89:33:4b:97:57:ba:1e:4d:ff:3b:a3:dc:f0:1b:7b:54:06:
38:56:e0:a7:2f:9a:fc:64:ea:7e:1f:76:df:54:99:f5:5f:b3:
82:4d:c2:3c:7c:e7:d0:2e:f7:16:88:0a:a2:f5:93:02:1b:02:
92:93:b6:41:2c:57:5a:e6:b7:a6:c7:ab:77:bd:4c:0a:1e:d1:
e3:e5:90:46:01:2d:35:ba:f3:43:11:b5:a1:10:ff:87:c3:75:
a4:d4:cd:fe:fe:73:84:6f:7d:d3:87:39:d8:11:3d:de:2c:88:
61:9a:18:ac:0b:77:c1:da:08:19:46:61:4f:0f:23:a2:9d:67:
61:7f:ae:41:68:e8:13:26:a3:97:3a:0a:cf:f3:da:db:6c:31:
53:d4:b2:f5:55:20:2d:57:5e:93:3a:34:c7:7b:4e:46:63:38:
01:54:18:db:aa:c7:f2:51:26:dd:2e:33:9a:40:13:3f:ae:d2:
bf:58:36:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net