Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tddUGE-pBGK40doZRQ4h5NRUf4.roa
File: 2tddUGE-pBGK40doZRQ4h5NRUf4.roa (raw, json)
Hash identifier: X4CIXMhNuitVv4LXjy7KZs90lj/6vyZf16cTabK984Y=
Subject key identifier: DA:D7:5D:50:61:3E:A4:11:8A:E3:47:68:65:14:38:87:93:51:51:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196037437C0A5FB0B675F7F43A47A0FD71F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tddUGE-pBGK40doZRQ4h5NRUf4.roa
Signing time: Sat 05 Apr 2025 00:57:50 +0000
ROA not before: Sat 05 Apr 2025 00:57:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 94.156.14.0/24 maxlen: 24
193.148.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:74:37:c0:a5:fb:0b:67:5f:7f:43:a4:7a:0f:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 5 00:57:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad75d50613ea4118ae3476865143887935151fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:3e:65:8d:de:c5:96:75:7f:21:d8:5c:39:
ec:79:b6:7a:e3:54:48:60:8e:60:5f:a4:bc:d1:a3:
ad:c0:46:ce:37:c5:6a:24:e6:ec:a8:73:74:bb:5e:
ef:43:a5:93:bf:ef:9e:fa:5d:95:8a:c3:73:3c:e4:
b9:7a:00:3b:9e:54:81:5d:65:c3:c6:95:78:54:72:
9e:a0:ee:da:48:10:b7:2b:24:d0:64:00:4f:68:aa:
16:a3:7d:8e:7e:03:33:27:ce:eb:cd:15:5a:e4:05:
ec:e5:b0:fb:7e:0a:a8:49:de:00:98:5f:24:26:70:
79:62:3b:93:df:d6:0a:23:e1:de:1b:ee:23:c3:0d:
18:9d:b9:99:8a:01:36:bb:3c:4a:1e:fa:36:e4:52:
68:e1:2d:3d:f0:74:48:89:f5:bf:fc:20:b9:60:f3:
c0:e2:c9:a2:2e:01:03:9a:7c:3e:fb:ae:30:2c:77:
00:3b:d2:f7:ad:f5:5b:7e:04:91:89:d8:ca:c5:2c:
f4:92:22:01:fe:f3:16:4a:8a:5a:41:9c:0b:74:b4:
6c:2e:9b:46:65:72:39:51:31:9b:c8:38:78:55:c9:
24:43:fa:ab:79:c6:29:9e:fe:48:70:5c:4d:56:06:
3b:9f:73:7b:24:17:44:93:48:0b:25:9d:98:48:cb:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D7:5D:50:61:3E:A4:11:8A:E3:47:68:65:14:38:87:93:51:51:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2tddUGE-pBGK40doZRQ4h5NRUf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
193.148.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:7e:ea:92:09:a8:a3:5f:4a:a2:de:94:f3:2e:3f:65:b8:
c7:45:06:47:38:19:0e:ad:bd:55:1b:91:fb:d9:eb:b7:ef:76:
92:23:2d:87:82:35:46:34:5d:cd:1a:e1:e7:bf:7c:9f:bc:ce:
93:01:f0:2a:dc:c9:1e:61:d4:d5:0e:74:44:f8:a3:a1:eb:9e:
28:25:52:07:2c:2b:ec:33:43:30:b1:3a:35:8a:42:6d:8b:09:
45:14:9b:bb:1a:4b:53:43:41:b7:f4:32:db:03:e4:ce:83:f4:
2c:f5:68:f0:76:54:33:80:06:72:73:7d:1a:ce:c4:1c:9a:e0:
15:03:c4:01:81:e3:4d:71:61:fc:32:25:e3:b7:bb:b1:36:e2:
42:aa:26:ff:c0:03:8b:38:4c:55:e7:d6:d6:9e:60:eb:aa:12:
d1:78:90:ae:78:46:d6:58:de:12:5e:3a:a1:a9:ad:f9:0d:e2:
de:6d:05:40:80:6c:29:62:1b:00:19:c4:26:03:1c:4b:90:3c:
d2:5d:64:66:9a:3a:73:bf:59:4d:05:05:0c:81:2a:97:75:4f:
c7:71:ee:97:30:8c:2e:69:84:ce:76:d1:e9:96:ce:ed:d5:3f:
c9:eb:20:59:52:5f:31:bb:cc:fa:36:47:06:c5:3b:42:65:89:
26:93:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net