Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/ttoTW1mb5ILG0PA-_tc15H39Bu4.roa
File: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (raw, json)
Hash identifier: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=
Subject key identifier: B6:DA:13:5B:59:9B:E4:82:C6:D0:F0:3E:FE:D7:35:E4:7D:FD:06:EE
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 0194228E2AFD491ACBC111D42418B8BB8519
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/ttoTW1mb5ILG0PA-_tc15H39Bu4.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206543
IP address blocks: 185.44.230.0/24 maxlen: 24
185.44.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2a:fd:49:1a:cb:c1:11:d4:24:18:b8:bb:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6da135b599be482c6d0f03efed735e47dfd06ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:a0:91:5c:af:93:b0:9e:90:c9:6a:df:66:
2b:62:53:bb:a1:67:e0:c6:45:79:48:c3:d0:e0:46:
d3:af:72:7a:04:c1:4e:26:ef:81:ab:39:1c:62:39:
bb:b2:a1:63:1d:10:1d:96:20:93:a3:f7:02:02:32:
75:f5:da:0f:ce:ed:e4:17:87:e5:d0:c1:d6:a6:3f:
c3:bd:01:6a:9a:72:b3:f2:71:13:4b:c4:de:62:b9:
b2:6a:bc:8e:5e:99:fb:9d:03:a6:ac:0a:8f:3d:99:
cb:a5:97:3f:b1:34:2e:42:db:90:07:83:5e:4c:2e:
83:fa:51:9d:23:75:bc:bc:7a:c3:f1:7b:28:a0:92:
dd:8a:c9:8f:2e:a9:5f:ab:a4:a0:15:41:75:58:6c:
19:75:c7:78:0c:e1:94:04:e1:5c:15:eb:ba:2f:2f:
ab:da:60:7b:2e:51:c0:63:e8:dd:d1:81:55:63:52:
20:4d:4b:ef:f5:3f:96:8d:1e:30:8c:1b:f5:8d:95:
37:bd:e2:5d:3b:26:e3:69:77:56:f1:af:03:ff:5d:
e2:1f:b6:ae:6c:fb:ce:21:e4:54:49:a2:c1:73:8b:
f5:28:48:7d:8a:cb:04:47:bb:04:42:fe:7b:01:51:
83:83:04:55:ca:78:38:8c:5f:82:1a:0e:72:ea:61:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:13:5B:59:9B:E4:82:C6:D0:F0:3E:FE:D7:35:E4:7D:FD:06:EE
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/ttoTW1mb5ILG0PA-_tc15H39Bu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.230.0/23
Signature Algorithm: sha256WithRSAEncryption
30:28:1f:5c:e9:55:51:0d:f9:7c:e5:a6:4e:86:63:56:1b:93:
08:99:00:ff:e2:c4:14:78:59:1d:68:f0:84:15:a7:33:7b:77:
7e:59:1b:ae:31:12:4c:2a:8c:91:43:09:a7:fc:3e:be:6a:90:
8c:09:b5:8f:71:2e:c1:06:94:ba:05:1e:ca:69:45:72:97:04:
59:50:bb:cf:49:98:a8:e8:bf:40:98:86:ad:ee:a3:7e:d1:7f:
72:ac:56:85:fd:c9:6b:b0:49:0f:f0:9d:03:81:e7:72:79:47:
9b:2e:42:16:5f:f1:da:a5:38:da:b2:c5:02:99:25:d9:10:af:
e3:18:25:a0:5d:56:88:93:da:57:42:28:20:e6:7e:5d:59:79:
17:0f:e1:62:86:36:0a:aa:2e:14:69:6b:bd:e7:8e:49:8b:88:
c6:3f:46:90:88:b6:87:97:6f:ee:b4:bc:d9:31:a7:f0:9b:51:
7e:8c:22:ab:87:77:46:09:3e:17:1d:e1:f2:cb:f0:fa:76:d2:
bc:7b:a4:94:90:8b:2b:25:cf:18:a6:d8:c0:52:af:0a:ed:1b:
35:d0:11:b0:92:6a:e2:ff:cd:f4:98:87:21:96:c6:29:12:bb:
e7:40:a8:46:35:81:e1:8b:a3:46:50:31:82:25:28:04:b3:c6:
8b:9f:79:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijir9SRrLwRHUJBi4u4UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwODNmNjk3OTU0ZWM3Y2M0OTJlNWFhNDZjYzhlZjEzZmM4
ZWRhOTEwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmRhMTM1YjU5OWJlNDgyYzZkMGYwM2VmZWQ3MzVlNDdkZmQwNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotSgkVyvk7CekMlq32YrYlO7oWfg
xkV5SMPQ4EbTr3J6BMFOJu+BqzkcYjm7sqFjHRAdliCTo/cCAjJ19doPzu3kF4fl
0MHWpj/DvQFqmnKz8nETS8TeYrmyaryOXpn7nQOmrAqPPZnLpZc/sTQuQtuQB4Ne
TC6D+lGdI3W8vHrD8XsooJLdismPLqlfq6SgFUF1WGwZdcd4DOGUBOFcFeu6Ly+r
2mB7LlHAY+jd0YFVY1IgTUvv9T+WjR4wjBv1jZU3veJdOybjaXdW8a8D/13iH7au
bPvOIeRUSaLBc4v1KEh9issER7sEQv57AVGDgwRVyng4jF+CGg5y6mHZKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbaE1tZm+SCxtDwPv7XNeR9/QbuMB8GA1UdIwQY
MBaAFACD9peVTsfMSS5apGzI7xP8jtqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMt
ODE5ZGIxNmI2NmVlLzEvdHRvVFcxbWI1SUxHMFBBLV90YzE1SDM5QnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hOTJmY2UtN2ExYi00Y2I3LTllNWMtODE5ZGIxNmI2NmVl
LzEvQUlQMmw1Vk94OHhKTGxxa2JNanZFX3lPMnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSzmMA0G
CSqGSIb3DQEBCwUAA4IBAQAwKB9c6VVRDfl85aZOhmNWG5MImQD/4sQUeFkdaPCE
Facze3d+WRuuMRJMKoyRQwmn/D6+apCMCbWPcS7BBpS6BR7KaUVylwRZULvPSZio
6L9AmIat7qN+0X9yrFaF/clrsEkP8J0DgedyeUebLkIWX/HapTjassUCmSXZEK/j
GCWgXVaIk9pXQigg5n5dWXkXD+FihjYKqi4UaWu9545Ji4jGP0aQiLaHl2/utLzZ
Mafwm1F+jCKrh3dGCT4XHeHyy/D6dtK8e6SUkIsrJc8YptjAUq8K7Rs10BGwkmri
/830mIchlsYpErvnQKhGNYHhi6NGUDGCJSgEs8aLn3m/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net