Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/olor_tHkoN8k1oKb8ve7r7Hwc2c.roa
File: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (raw, json)
Hash identifier: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=
Subject key identifier: A2:5A:2B:FE:D1:E4:A0:DF:24:D6:82:9B:F2:F7:BB:AF:B1:F0:73:67
Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial: 01941FFA6999DDCC97FFE2E239C02D570409
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/olor_tHkoN8k1oKb8ve7r7Hwc2c.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206591
IP address blocks: 185.181.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:99:dd:cc:97:ff:e2:e2:39:c0:2d:57:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25a2bfed1e4a0df24d6829bf2f7bbafb1f07367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:d8:e8:fa:50:d7:f2:73:0c:97:be:75:36:
f6:20:ba:93:26:51:81:07:21:ae:9a:45:56:fc:48:
23:60:60:b7:fc:2f:28:5d:1e:4e:5f:1f:95:39:f4:
77:f2:bd:9b:75:72:79:ea:04:ae:de:b7:49:6f:d5:
0a:7d:09:47:40:15:79:6e:4f:b2:84:ae:94:53:57:
7f:93:d2:7c:51:e7:c7:3b:aa:93:eb:02:b2:e5:43:
71:39:c6:fd:aa:23:75:3d:44:17:b8:6e:2e:3e:f4:
5a:ef:36:86:ce:bd:1a:3f:d6:d2:f7:b5:8a:6c:b6:
22:c2:9d:66:47:3c:c0:57:c6:e7:1a:c0:eb:4d:a5:
5f:e8:eb:a7:8b:a0:43:de:1c:ac:f1:60:fa:da:63:
00:f8:72:07:5d:e5:07:51:14:35:04:2d:c8:80:f7:
5e:56:5b:ac:27:bb:9f:f8:29:22:4e:1a:57:26:b6:
e4:af:fd:41:35:b8:d7:af:77:da:1d:c0:b9:5a:c8:
89:51:cc:f4:4e:0a:fe:4b:92:01:32:b6:2c:5a:ea:
f6:16:4f:91:3f:9e:3f:ee:29:52:68:7e:82:17:b9:
80:8d:25:6c:ed:41:e2:63:11:76:6e:33:27:94:3e:
0b:8c:2d:39:37:b7:ff:51:2f:8f:dc:0a:b3:56:2f:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:2B:FE:D1:E4:A0:DF:24:D6:82:9B:F2:F7:BB:AF:B1:F0:73:67
X509v3 Authority Key Identifier:
keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/olor_tHkoN8k1oKb8ve7r7Hwc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.179.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0b:b3:c3:9c:7d:1a:f0:6a:14:17:a1:aa:98:a8:77:c6:99:
19:f9:a3:ec:7e:4e:79:ca:97:26:67:9d:9a:b2:5b:59:fd:cd:
f8:38:32:a6:08:bf:aa:36:33:93:ec:a3:8a:04:26:c8:ed:0d:
40:8d:75:ed:81:bf:b9:b4:02:a2:b8:5a:a2:06:0a:cc:fe:d7:
70:15:2e:9e:6b:a3:5d:dd:f3:c2:2d:d8:a3:37:f5:fc:88:69:
00:25:29:b9:14:c5:42:55:df:ec:f8:4f:d5:33:16:b9:56:4b:
16:8e:8a:b5:ec:bc:71:4a:25:db:90:20:dc:46:aa:7f:cf:84:
c0:62:fc:5d:3f:2f:82:6f:fa:55:a9:7f:d9:22:d8:8e:1a:0e:
e8:6d:ba:42:cc:cc:20:82:91:85:f8:b0:be:19:0b:fc:83:69:
fb:dd:b5:99:c9:e0:db:87:58:34:b1:e8:3e:20:27:4d:94:ba:
0b:f4:ca:85:76:8f:24:45:93:da:09:60:ce:3c:bb:bf:b7:86:
af:cb:a2:b6:bc:e9:b7:6a:e1:b7:55:2e:d1:ef:19:48:4c:1e:
b0:6b:ff:40:74:a3:65:9a:d4:a6:90:42:40:89:a5:57:bf:36:
80:6b:6c:77:3a:aa:bf:39:4c:d2:27:44:1f:d3:1d:51:94:02:
2a:df:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net