Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa
File: On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa (raw, json)
Hash identifier: 9kDdHzwM7pfMm0bFoQEb02mFtUGZEAgcsF0RvK2rnzM=
Subject key identifier: 3A:7D:1C:C5:77:69:42:F6:7F:8C:92:35:46:48:77:65:FB:8B:53:17
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 01941FFA556A9664D4D6C2D62F602EBBB140
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47944
IP address blocks: 94.125.200.0/21 maxlen: 21
94.125.207.0/24 maxlen: 24
2a03:2ba0::/32 maxlen: 32
2a03:2ba0:1:888::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:55:6a:96:64:d4:d6:c2:d6:2f:60:2e:bb:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a7d1cc5776942f67f8c923546487765fb8b5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:4f:05:44:e2:ec:91:21:60:fa:b7:47:24:
c5:28:a8:cd:3f:0f:68:61:7a:50:9d:e1:ae:cb:08:
09:49:0f:08:2e:fa:f3:92:9f:21:11:5b:f6:d9:1c:
2c:65:b3:9e:e1:0d:9d:55:24:dd:a8:39:e8:6a:1e:
47:c6:14:25:b5:d4:a5:77:06:f3:8d:ea:21:5a:b9:
55:53:f4:48:34:93:39:9f:17:b8:84:d5:42:bc:fe:
2a:e3:92:72:18:25:9c:b7:6c:19:69:97:30:b6:0d:
10:2e:31:53:d4:8f:60:0b:cc:cd:f7:89:38:97:85:
87:fe:a3:ea:24:73:a3:68:7d:55:b4:eb:3f:f2:d8:
59:c1:b6:ad:ab:ed:bf:2c:35:7c:62:b7:87:21:dc:
a6:3b:bf:d2:cd:47:f0:c8:ae:b3:0b:f3:38:a2:f5:
1b:8c:ff:67:9f:c3:f5:c3:28:90:49:a6:e3:c4:f5:
ec:d0:58:db:22:b0:2e:ed:f2:10:fc:9b:27:0c:21:
14:c4:ef:73:30:e2:8a:d3:02:17:f9:09:1d:05:0d:
6d:ec:7b:ae:7c:f9:29:30:1a:d1:99:60:e6:52:42:
ae:5d:07:8b:90:ba:45:76:5c:76:37:f6:16:13:f9:
01:67:48:ee:78:f5:e3:c4:53:38:65:b9:98:b2:2b:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7D:1C:C5:77:69:42:F6:7F:8C:92:35:46:48:77:65:FB:8B:53:17
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.200.0/21
IPv6:
2a03:2ba0::/32
Signature Algorithm: sha256WithRSAEncryption
36:01:0e:10:70:f1:fe:13:20:a5:0a:1f:9c:10:45:8a:6f:d7:
ff:8e:1d:01:ad:a1:94:57:1b:57:57:e8:a8:df:71:93:bc:8c:
91:21:f5:db:a7:76:2d:ef:05:d3:34:cd:69:06:76:9e:e3:e4:
e3:19:2c:34:87:7d:a6:75:d9:71:f3:d1:be:43:5e:90:b4:3d:
a6:f8:13:33:28:16:9e:16:1a:bd:cb:2c:fd:1e:40:26:ef:ab:
a3:1c:e9:65:86:f9:d7:05:ef:2d:bc:ef:b1:fc:e4:05:13:29:
40:d1:ac:ae:ca:a2:37:e3:51:e4:6f:c0:28:8e:9e:5f:22:05:
1c:b7:43:46:53:76:0c:6a:4e:1e:ac:9d:07:19:a7:19:00:34:
ea:0d:d9:db:ac:72:b5:21:86:5a:86:1a:16:68:19:fe:3f:33:
89:50:c0:37:a3:2e:7a:31:96:66:eb:5e:5d:55:92:98:1a:87:
28:27:22:12:02:29:59:40:d0:cc:09:d0:a0:51:19:43:4b:d0:
28:f0:bf:4d:35:85:71:7a:3a:df:c9:03:3f:e7:b7:41:d0:70:
4f:53:b0:dc:1a:99:e0:32:34:2a:34:8f:4b:d1:47:6e:48:b6:
b1:3d:bb:b4:0c:e8:74:16:98:75:2f:a1:dd:1c:b5:8a:6b:85:
28:c8:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net