Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa
File: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (raw, json)
Hash identifier: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=
Subject key identifier: 3B:16:7F:49:01:55:27:CB:B3:3D:64:A3:18:00:E7:20:C2:3E:B8:60
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 01941FFA2EC7D64EB67323A9AD0F40BF0185
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49489
IP address blocks: 89.190.144.0/22 maxlen: 22
185.36.220.0/22 maxlen: 22
193.169.82.0/23 maxlen: 23
2a00:efe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:c7:d6:4e:b6:73:23:a9:ad:0f:40:bf:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b167f49015527cbb33d64a31800e720c23eb860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:a7:6d:ef:06:66:15:3f:c8:b9:4a:37:37:
0f:78:40:2f:5e:db:46:85:74:2e:a6:27:11:79:18:
db:ac:db:2d:fb:fa:d0:18:b1:1e:6d:58:ae:73:82:
f9:73:76:a7:60:53:a7:ef:85:ad:6c:12:db:c0:37:
3e:db:c6:63:cb:8a:c8:07:44:5e:0d:a2:24:60:30:
31:e7:66:a1:98:ff:a9:da:6b:1f:e0:51:b2:75:90:
e1:2b:29:9d:44:ef:9e:59:d0:d7:19:29:3e:8b:b2:
29:18:f3:c2:d5:b9:59:38:e9:fe:0d:e0:ff:f1:a6:
bd:ce:65:c9:79:f8:20:b1:63:76:92:a7:82:34:57:
09:67:7d:78:07:92:0d:e1:1c:cc:9d:e9:4f:b2:7a:
41:a3:e7:05:db:af:3a:3d:47:78:10:6c:82:30:7a:
36:2b:df:5b:6c:a2:40:45:19:3d:d5:47:15:e3:f9:
79:27:40:e8:7c:8c:b3:c1:30:e0:4b:33:64:ab:fb:
96:4f:67:bf:f4:71:5d:77:bd:8f:d2:e7:8c:74:b7:
76:77:74:f2:8d:50:9f:48:f5:81:c5:cb:43:fd:2a:
d1:ef:b5:65:14:5c:e0:07:07:18:6e:3d:f4:87:81:
5d:12:fc:ca:b5:69:72:27:cb:ba:67:c4:2a:ca:4a:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:16:7F:49:01:55:27:CB:B3:3D:64:A3:18:00:E7:20:C2:3E:B8:60
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.144.0/22
185.36.220.0/22
193.169.82.0/23
IPv6:
2a00:efe0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:73:d0:eb:e6:52:1e:70:7b:31:a0:1b:62:78:60:8d:ff:a6:
27:0b:51:ea:04:31:46:cf:36:80:ba:70:ac:92:0b:b0:4b:3e:
7b:36:3a:d2:e1:3a:f4:73:d4:55:d7:a3:e0:cb:c1:4e:c3:27:
d9:bd:03:96:ac:d0:90:81:d5:1f:da:df:ea:cc:9a:c4:c8:61:
41:e8:e3:ac:7b:60:c4:c6:f1:f3:5e:d4:0d:48:83:f4:e8:7c:
05:b6:c7:b6:14:c7:15:63:93:02:94:f7:2f:f0:d4:00:40:34:
0d:f0:77:2e:d1:a4:89:14:5d:64:b2:0d:70:34:3b:a5:d3:0d:
2f:ea:b1:32:86:8e:4e:fe:b4:4c:02:1f:a8:22:f4:ac:88:e5:
e9:f7:f5:4b:3f:69:7a:c2:24:f7:52:50:94:21:9d:7b:d8:89:
18:95:b8:ed:e0:b6:b3:da:e5:07:c5:3e:52:8b:cd:f5:fb:4c:
f7:14:f9:74:43:22:4f:f7:17:46:af:d8:77:d9:e1:9c:75:0f:
7a:ea:f9:3b:a9:5a:78:1b:db:03:da:4c:72:56:70:db:26:07:
4e:74:ea:a3:3c:e9:ee:c0:10:a5:42:f3:d0:c1:7e:45:a8:05:
e7:79:3b:cd:27:5d:40:a7:61:54:f9:d4:80:80:86:a1:f6:e0:
53:93:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net