Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/dpiwVyP36v1YV2afir9h5xUMcuE.roa
File: dpiwVyP36v1YV2afir9h5xUMcuE.roa (raw, json)
Hash identifier: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=
Subject key identifier: 76:98:B0:57:23:F7:EA:FD:58:57:66:9F:8A:BF:61:E7:15:0C:72:E1
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 0195FAE6462F671950FE3A83C17342F1DCE4
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/dpiwVyP36v1YV2afir9h5xUMcuE.roa
Signing time: Thu 03 Apr 2025 09:05:49 +0000
ROA not before: Thu 03 Apr 2025 09:05:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63025
IP address blocks: 45.136.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:e6:46:2f:67:19:50:fe:3a:83:c1:73:42:f1:dc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Apr 3 09:05:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7698b05723f7eafd5857669f8abf61e7150c72e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:3a:fa:9a:2d:fc:e5:96:4d:42:25:54:3e:
ef:f4:73:cc:36:14:75:5e:db:dc:00:2a:bb:1c:57:
69:6c:dd:3e:1f:f7:ba:cf:01:d1:b4:47:31:61:88:
6d:cf:e7:de:e4:92:5b:f8:b5:7c:97:95:32:f1:b1:
db:62:5b:b7:be:41:cf:74:25:6c:a0:12:02:05:3c:
17:3f:43:00:c1:7f:cb:22:85:7f:ec:70:76:c1:8c:
ef:95:26:2e:c1:ff:86:62:b3:02:ac:bf:7c:42:d8:
94:87:d0:a0:56:b6:6e:df:4f:b6:a8:1e:e0:55:62:
9a:80:5e:d8:38:17:b0:d9:69:6f:b3:92:3c:9f:f8:
4d:bc:a5:80:89:ab:83:62:95:ee:56:c2:e6:7a:d2:
40:1a:26:52:9b:c4:10:68:7d:d8:9c:d7:7d:8c:f9:
8d:bb:94:97:6c:10:f2:9e:75:15:7c:bf:d7:e9:2e:
cf:6e:54:4f:e7:22:72:24:dd:c9:a5:f2:56:6a:b1:
ec:74:3c:f9:42:4c:c0:62:d7:fd:d4:bd:a2:88:e3:
fb:71:9c:77:e6:1a:4c:f0:c9:6e:af:fa:6f:f0:c4:
95:34:7d:f5:a2:20:96:d2:40:da:dd:49:7b:dd:b9:
66:a1:4c:4b:35:71:29:b3:c9:84:de:66:10:c1:da:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:B0:57:23:F7:EA:FD:58:57:66:9F:8A:BF:61:E7:15:0C:72:E1
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/dpiwVyP36v1YV2afir9h5xUMcuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.36.0/24
Signature Algorithm: sha256WithRSAEncryption
35:06:b2:6e:8d:74:6c:20:b9:15:19:a3:42:6e:bf:40:a0:c1:
b5:67:1e:24:5d:7b:9a:f6:7e:6d:df:91:13:29:07:9b:c3:c0:
67:aa:2e:9b:97:00:a3:02:a8:7f:97:b5:ea:26:8b:55:a7:fd:
c4:46:64:9f:d1:99:82:31:1a:a6:98:fb:a3:29:65:39:75:bf:
76:4c:16:02:65:df:2b:c0:53:0e:7b:31:a4:40:de:74:d9:4b:
e2:33:96:88:7e:b5:82:91:54:13:3d:91:c5:4e:31:94:a7:8d:
c9:6d:d4:6c:8c:8b:ac:97:45:93:f0:41:35:2d:e0:79:17:98:
88:79:0c:b7:1b:ec:e0:af:c1:e4:57:c1:01:0e:d3:93:99:d3:
9f:91:4d:e7:ea:68:6a:f2:83:f0:c1:a7:a1:1b:cf:83:b8:81:
ef:b2:57:cb:ce:5d:96:d8:94:6f:c4:9a:bc:60:a2:91:e0:56:
01:bc:05:71:21:0b:7e:5f:4b:46:f8:3e:58:ed:19:37:30:56:
d0:c3:28:7f:cf:15:6f:43:14:02:df:99:72:ae:1b:77:12:9c:
a8:d2:93:3e:1b:06:26:1e:b9:54:44:a2:2f:b7:8a:27:e1:de:
c5:3b:8f:ca:7e:ac:46:86:ea:b5:b0:85:f4:00:6f:6f:c6:61:
b3:70:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net