Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa
File: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (raw, json)
Hash identifier: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=
Subject key identifier: 0D:1E:36:C8:A1:AC:8C:BD:9C:C7:72:E9:D2:76:19:DB:E2:7A:42:32
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 019422FC37CD134BD8FDC53147933ADC8D02
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49651
IP address blocks: 194.180.56.0/22 maxlen: 24
194.180.56.0/24 maxlen: 24
194.180.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:37:cd:13:4b:d8:fd:c5:31:47:93:3a:dc:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d1e36c8a1ac8cbd9cc772e9d27619dbe27a4232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:ac:b0:46:3f:fa:5a:33:e3:32:10:e9:f8:
5f:ee:ac:f1:10:e5:5a:88:c9:73:84:e7:76:5e:24:
1f:94:39:fd:d6:2f:dc:f1:b1:4d:09:da:a9:e4:19:
98:26:80:3d:d6:5d:d1:d1:2f:84:a8:ee:90:b3:15:
20:b7:38:ca:bf:6f:e5:9f:9e:3a:37:71:74:61:9c:
7a:92:98:4b:45:75:8a:8c:58:10:a0:1b:0f:da:42:
56:af:b7:7b:ce:23:59:3e:a0:65:fa:45:1e:4e:10:
77:ba:83:f0:22:16:95:06:7e:02:34:0e:c5:77:19:
6f:3c:5b:7f:a7:d0:f6:29:44:52:7d:17:59:ab:79:
91:23:27:5c:7b:15:5e:54:3e:a1:d0:b0:5e:1a:88:
04:72:59:00:d1:c1:64:dc:d8:2b:be:4a:f4:21:f9:
73:20:74:0f:8f:42:0a:8e:5d:33:51:47:f6:b1:0d:
0a:90:40:fb:89:d5:b0:ef:e2:6d:b1:af:ac:bd:e0:
16:82:f0:22:12:45:94:50:a2:2b:87:83:68:bf:6f:
e0:ad:b0:5c:b3:f0:7f:2f:35:8e:17:68:45:3b:52:
86:f6:54:99:fd:27:86:19:48:2a:be:6c:6b:e9:d2:
f7:20:69:36:67:fc:6a:62:18:0f:2b:59:f0:96:ab:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:36:C8:A1:AC:8C:BD:9C:C7:72:E9:D2:76:19:DB:E2:7A:42:32
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:55:f6:71:0e:76:05:0b:62:70:1a:d8:e4:e3:d2:97:d3:b2:
93:15:b6:d3:0b:c1:9e:3b:1c:25:c2:cb:bc:59:f0:2c:ed:f0:
d3:76:73:1c:6b:85:3c:e1:af:a1:48:e0:34:71:f7:42:34:ea:
57:17:11:6a:16:72:90:14:7b:bd:14:d3:72:65:cf:62:31:5e:
06:74:c0:b3:a3:27:08:5d:d6:06:22:ff:e5:09:f2:10:9a:19:
29:93:d3:1c:e2:d3:52:3c:a8:e2:48:a8:bd:17:43:30:9f:8c:
a4:44:3b:1e:98:1b:05:6e:4a:f5:64:8c:2a:a2:d2:f8:77:4b:
d5:ac:a8:48:56:3d:4f:57:70:da:ec:95:7f:96:fe:a6:bd:15:
73:97:53:8b:fc:7c:11:a9:67:bf:d7:3e:7a:0d:4f:3d:87:33:
f7:57:df:64:30:40:cd:b0:2f:5d:80:8e:71:e6:87:2b:58:e7:
5a:f6:8c:22:4e:8f:3c:d0:1a:c9:a6:58:fb:73:80:2a:f0:55:
dd:8b:78:33:e5:ac:24:84:16:e8:3c:ea:bb:21:7e:72:42:eb:
96:30:a0:c7:3d:03:b4:c2:db:6e:1b:19:74:30:25:83:53:48:
1b:63:e3:24:f4:31:94:df:82:f5:4e:bf:00:a6:73:5d:41:45:
6f:49:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net