Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/555OtsBoO5k75PqRH4BO_DA3D2k.roa
File: 555OtsBoO5k75PqRH4BO_DA3D2k.roa (raw, json)
Hash identifier: JoD/O0cUloB5B7+5WbDwTZ/ljwNvngOLp/z0qSnIMTQ=
Subject key identifier: E7:9E:4E:B6:C0:68:3B:99:3B:E4:FA:91:1F:80:4E:FC:30:37:0F:69
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019426D9CE6CD5F7F26C33044603A51D3923
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/555OtsBoO5k75PqRH4BO_DA3D2k.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205471
IP address blocks: 185.69.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:6c:d5:f7:f2:6c:33:04:46:03:a5:1d:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79e4eb6c0683b993be4fa911f804efc30370f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:bd:fb:e0:a5:ec:b3:92:f3:7f:de:ba:ec:
d2:b3:6b:0e:29:74:94:14:d8:23:03:89:38:64:a0:
1c:8b:81:94:18:d2:fd:67:34:48:b2:92:bf:2d:42:
f4:43:8f:3c:55:02:ec:89:e8:b9:02:0f:75:dd:56:
1c:aa:7f:88:84:d7:ea:fa:9c:50:ee:9a:f6:ed:21:
84:e5:59:45:50:f8:71:c7:53:08:50:5b:10:63:05:
e2:3e:04:4f:75:b3:5d:6e:1c:35:56:d8:e7:0b:ac:
d0:31:0e:33:0d:49:91:b2:de:36:1f:6c:47:61:88:
50:a3:c2:80:2d:e3:bb:d3:62:12:67:f6:37:f1:ff:
46:d9:1a:4b:a5:a9:ed:f2:9d:bd:94:45:dc:48:db:
4d:0c:76:eb:ae:ce:7e:f4:24:7a:bc:76:31:b7:26:
f5:b6:43:da:94:3a:a1:33:38:62:6e:70:7c:8b:e8:
49:6e:71:76:a3:18:5f:d4:f0:c3:b0:ee:20:37:56:
9f:12:df:1d:bd:91:7c:00:f0:f2:43:33:e5:f3:fc:
49:f2:31:46:dd:a8:62:8a:bb:05:94:c0:1e:9e:74:
fc:70:cc:0b:44:80:1d:f5:2a:6b:54:01:9c:3e:44:
c9:74:dc:a9:09:ee:07:fb:5f:e1:9e:9d:0e:fb:be:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9E:4E:B6:C0:68:3B:99:3B:E4:FA:91:1F:80:4E:FC:30:37:0F:69
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/555OtsBoO5k75PqRH4BO_DA3D2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.185.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:dd:5d:f7:49:91:99:ee:4c:6d:6a:31:ec:15:a5:fb:1a:59:
c6:72:b7:b5:61:ab:43:36:ad:99:24:d1:ac:68:9e:ba:c6:43:
36:d4:10:d0:58:c6:95:df:74:7d:04:cc:f9:d7:5c:45:eb:db:
34:7b:d2:57:38:fe:01:64:3d:06:58:a4:6b:54:1d:7f:cb:06:
6b:3c:2b:d5:8d:9c:39:ca:c2:35:ca:b3:2b:6b:0a:dd:f1:eb:
50:f1:37:22:04:20:68:85:26:45:a7:9b:c5:5c:f2:53:b9:ce:
0f:d2:1d:ce:b2:b9:5b:d1:09:94:a4:76:03:85:96:a1:69:f9:
77:fc:cb:c2:e1:89:b9:6f:49:e8:9f:9c:0e:44:88:96:51:96:
74:5d:9f:79:22:97:25:cd:cb:3b:b5:e8:9d:f5:b8:58:39:40:
37:2a:a5:8a:3c:ce:0e:39:df:35:e8:72:a7:d3:fc:dd:67:b1:
30:18:14:be:c8:38:3b:35:87:a2:78:da:38:97:f1:d2:55:b1:
61:26:3b:bc:37:a3:51:1f:41:1c:ed:6c:5e:f4:42:4e:76:e3:
2d:61:a7:c4:bd:0e:24:4a:20:bd:d8:d4:ba:8a:22:f1:40:27:
34:45:a0:72:c7:6a:70:56:40:66:e6:08:82:37:1b:6e:ea:d9:
d6:e6:2c:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2c5s1ffybDMERgOlHTkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjlmYTdiOTQ0ZjdlN2M2MGQ3M2VmMTBiNzc2ZmMyNzk5
NWE0ZWQwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzllNGViNmMwNjgzYjk5M2JlNGZhOTExZjgwNGVmYzMwMzcwZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMm9++Cl7LOS83/euuzSs2sOKXSU
FNgjA4k4ZKAci4GUGNL9ZzRIspK/LUL0Q488VQLsiei5Ag913VYcqn+IhNfq+pxQ
7pr27SGE5VlFUPhxx1MIUFsQYwXiPgRPdbNdbhw1VtjnC6zQMQ4zDUmRst42H2xH
YYhQo8KALeO702ISZ/Y38f9G2RpLpant8p29lEXcSNtNDHbrrs5+9CR6vHYxtyb1
tkPalDqhMzhibnB8i+hJbnF2oxhf1PDDsO4gN1afEt8dvZF8APDyQzPl8/xJ8jFG
3ahiirsFlMAennT8cMwLRIAd9SprVAGcPkTJdNypCe4H+1/hnp0O+76HMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeeTrbAaDuZO+T6kR+ATvwwNw9pMB8GA1UdIwQY
MBaAFNn5+nuUT358YNc+8Qt3b8J5laTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvNTU1T3RzQm9PNWs3NVBxUkg0Qk9fREEzRDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvMmZuNmU1UlBmbnhnMXo3eEMzZHZ3bm1WcE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUW5MA0G
CSqGSIb3DQEBCwUAA4IBAQAO3V33SZGZ7kxtajHsFaX7GlnGcre1YatDNq2ZJNGs
aJ66xkM21BDQWMaV33R9BMz511xF69s0e9JXOP4BZD0GWKRrVB1/ywZrPCvVjZw5
ysI1yrMrawrd8etQ8TciBCBohSZFp5vFXPJTuc4P0h3Osrlb0QmUpHYDhZahafl3
/MvC4Ym5b0non5wORIiWUZZ0XZ95Ipclzcs7teid9bhYOUA3KqWKPM4OOd816HKn
0/zdZ7EwGBS+yDg7NYeieNo4l/HSVbFhJju8N6NRH0Ec7Wxe9EJOduMtYafEvQ4k
SiC92NS6iiLxQCc0RaByx2pwVkBm5giCNxtu6tnW5ixP
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net