Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/3y0yAsA1Ant0h9c-rZLPfvvobgA.roa
File: 3y0yAsA1Ant0h9c-rZLPfvvobgA.roa (raw, json)
Hash identifier: 8KRmqzCONzP8OtumafBRNftRxCWZFMMwcSzGlA+ay1A=
Subject key identifier: DF:2D:32:02:C0:35:02:7B:74:87:D7:3E:AD:92:CF:7E:FB:E8:6E:00
Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial: 0194228D5DC753D26894693D64665D6A005C
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/3y0yAsA1Ant0h9c-rZLPfvvobgA.roa
Signing time: Wed 01 Jan 2025 15:47:57 +0000
ROA not before: Wed 01 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62146
IP address blocks: 194.150.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5d:c7:53:d2:68:94:69:3d:64:66:5d:6a:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Validity
Not Before: Jan 1 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df2d3202c035027b7487d73ead92cf7efbe86e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:6a:d1:3f:57:d0:9e:fc:c4:e6:94:64:12:
b6:8e:9a:47:72:70:e5:79:28:d3:9e:a0:92:56:39:
18:f4:31:16:ee:78:12:e5:32:c0:19:a7:20:ab:e0:
42:9c:95:27:38:ce:9d:28:1c:6d:7c:7d:9e:2f:fa:
df:da:18:b9:4a:cf:bc:c1:10:bd:74:78:e6:0e:11:
f8:4c:66:6f:c9:8c:e2:26:40:bd:da:9c:ef:98:5f:
e6:09:da:dc:3c:50:5e:87:1b:bc:41:bf:d2:b2:62:
87:e6:4b:e6:c9:fc:00:a2:ec:80:92:ae:28:11:64:
bc:ad:f5:17:f8:b4:c3:8c:b2:ee:93:68:61:b0:6b:
9e:ac:b5:6c:e1:6f:39:4f:59:f8:d4:ed:a2:71:c2:
ef:8d:da:f8:34:7c:c6:83:ab:5a:79:28:7a:56:1c:
a0:44:13:2d:f6:ab:e3:b5:2f:a2:12:da:f5:d7:76:
77:27:dc:62:d1:3e:6b:c8:0c:2a:29:4b:3c:f7:db:
7f:d4:93:f1:a3:8c:c8:ae:0c:ef:25:d6:01:f7:4f:
6a:32:e3:f0:25:a1:85:3c:7f:43:6d:88:7d:e8:b1:
ee:8a:4f:4c:7a:7b:60:88:af:b3:d2:f3:c0:34:8e:
1d:1f:ac:0e:e3:5e:76:c3:07:58:73:17:64:2b:22:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:32:02:C0:35:02:7B:74:87:D7:3E:AD:92:CF:7E:FB:E8:6E:00
X509v3 Authority Key Identifier:
keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/3y0yAsA1Ant0h9c-rZLPfvvobgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.106.0/24
Signature Algorithm: sha256WithRSAEncryption
79:83:1f:da:43:bd:d8:ac:88:8c:e9:8c:b2:d4:af:61:d8:56:
d3:7b:81:be:0e:f0:96:41:cb:28:b0:10:a0:75:32:60:30:0c:
8b:6d:0a:ed:0d:b4:4e:d1:52:cf:b6:4d:d6:a0:a4:70:49:07:
8e:b2:88:e7:73:58:e7:39:3d:35:8d:b2:4e:25:89:60:0c:48:
19:53:e9:68:9c:7d:9b:49:0e:f4:a6:a4:78:f1:bf:6c:57:b2:
db:73:31:d7:88:76:38:f1:09:52:8b:9f:42:07:5d:0d:d7:fc:
2a:ca:bd:2f:c7:c1:10:ec:f0:e8:bf:00:f0:f1:a9:d6:67:4b:
26:9d:62:93:64:65:1b:81:87:86:99:67:82:90:8f:5e:d1:11:
2e:d9:d8:a7:35:50:be:97:75:02:a1:3a:77:64:91:a0:9b:87:
8f:95:89:17:af:98:ca:36:68:e5:a4:c4:90:31:cc:75:d2:c5:
d9:51:1a:86:a7:e3:f2:39:61:58:46:5b:5c:73:60:be:97:0f:
f4:fe:63:6b:fa:67:86:29:3e:d9:9a:f5:fa:64:9b:b9:9d:48:
52:82:c9:18:fc:c6:b1:e9:d9:30:7c:d8:09:69:07:82:36:e0:
9e:bb:42:46:d5:30:32:bb:0f:27:d3:21:47:10:d8:a5:61:57:
94:bb:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net