Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/a3d_hnnXOXJQCTytaWzEwy3OSj4.roa
File: a3d_hnnXOXJQCTytaWzEwy3OSj4.roa (raw, json)
Hash identifier: OvN98CXfpNCSo41DM5O0xqfMMcNTWc2NfcNvajle7JI=
Subject key identifier: 6B:77:7F:86:79:D7:39:72:50:09:3C:AD:69:6C:C4:C3:2D:CE:4A:3E
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB86E84637A6CBA31736397B04A20
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/a3d_hnnXOXJQCTytaWzEwy3OSj4.roa
Signing time: Wed 01 Jan 2025 01:48:23 +0000
ROA not before: Wed 01 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201435
IP address blocks: 185.72.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b8:6e:84:63:7a:6c:ba:31:73:63:97:b0:4a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b777f8679d7397250093cad696cc4c32dce4a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:29:58:22:62:c3:f1:6a:37:f2:af:fe:2e:
98:ef:dd:b7:0d:66:d0:33:b8:70:11:37:27:0f:68:
6f:6b:c4:dc:eb:00:5b:69:cf:b4:b2:23:85:95:33:
cb:02:54:2f:1a:08:b4:a9:02:9d:20:b1:3f:9a:d1:
f2:c4:04:81:fd:8f:95:a8:c4:a1:4c:28:6c:b8:d8:
7a:90:79:be:7c:5b:ae:aa:ff:61:69:a7:f9:0c:e9:
d8:93:d5:d1:3e:18:3f:dd:9a:c9:b0:3a:fa:68:25:
cc:1b:4b:c0:d7:df:20:47:fc:28:66:b1:38:89:68:
d3:6a:85:64:c7:5e:80:40:bf:02:e2:27:43:c4:83:
9a:0d:77:2d:b6:3b:92:2f:1c:c3:f7:bc:52:5b:4d:
01:a5:dc:27:f5:9b:35:17:43:de:36:23:0c:cd:de:
f5:12:db:bb:77:f5:46:6d:d4:65:88:90:d2:43:58:
0e:7f:04:1f:1c:5f:4d:a4:8c:98:45:b5:95:c8:b8:
2b:84:83:0d:5e:ca:a4:b1:16:85:f2:00:20:6a:9e:
11:f4:21:7f:3c:36:bd:40:85:61:c0:f6:2a:42:d5:
26:b5:1e:0f:a8:2b:05:67:48:df:1d:f6:53:64:36:
f4:7c:6f:ac:49:0e:bf:c9:6a:d9:31:69:e3:99:27:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:77:7F:86:79:D7:39:72:50:09:3C:AD:69:6C:C4:C3:2D:CE:4A:3E
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/a3d_hnnXOXJQCTytaWzEwy3OSj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.52.0/22
Signature Algorithm: sha256WithRSAEncryption
48:91:d8:65:13:98:b4:c3:0a:c6:e5:f1:e5:ef:8c:5f:db:be:
3a:9a:a2:41:1c:7a:ef:32:b8:d1:ab:36:5b:40:9d:ea:5d:64:
69:da:92:c9:1d:c8:9e:e0:0d:10:f1:86:ac:e4:b2:ae:5f:3a:
0a:42:16:83:36:4a:89:86:98:d6:db:68:58:d4:25:41:fa:55:
50:e6:69:1f:84:6a:02:cf:c1:db:f0:6e:99:0c:a2:62:96:ea:
75:cc:f9:f9:0d:66:c2:79:66:35:ea:aa:e2:ef:70:df:e0:27:
0d:03:9e:d8:02:f3:68:bf:95:27:20:75:5f:4b:59:48:22:c0:
29:93:2e:2c:67:99:46:fb:75:60:c3:ad:d7:cc:77:6f:24:65:
8d:23:f6:e7:d0:df:d5:be:a3:6e:cc:6e:69:da:d2:d0:4e:5f:
ba:4d:69:4a:cc:04:85:ee:57:b2:3b:5e:a6:51:a1:5a:d3:e8:
96:71:cd:fd:f5:60:d7:50:f8:33:82:cb:47:2c:75:95:61:9a:
b4:95:e2:32:d5:24:eb:12:73:c0:da:db:8b:3d:10:68:f1:b7:
a5:ce:a2:07:f7:ab:0f:62:15:06:b1:9f:ed:76:11:14:2a:da:
b9:83:52:29:30:4a:ae:02:0d:16:fe:7c:f4:c3:5a:72:48:11:
eb:0d:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net