Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/TlWh2FiC6L1EjrJJE9K2hqgG6QM.roa
File: TlWh2FiC6L1EjrJJE9K2hqgG6QM.roa (raw, json)
Hash identifier: KfB3SRGDOEDGj5LQWUrH02oNNKr12IvZ1o4EmR6ZIco=
Subject key identifier: 4E:55:A1:D8:58:82:E8:BD:44:8E:B2:49:13:D2:B6:86:A8:06:E9:03
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019420D5BC5C149597A65673781024D50544
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/TlWh2FiC6L1EjrJJE9K2hqgG6QM.roa
Signing time: Wed 01 Jan 2025 07:47:45 +0000
ROA not before: Wed 01 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 185.105.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bc:5c:14:95:97:a6:56:73:78:10:24:d5:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jan 1 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e55a1d85882e8bd448eb24913d2b686a806e903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:30:ec:03:31:5f:9c:fa:9b:c8:c2:77:00:
08:46:9d:04:5b:53:10:82:bf:b9:42:20:1f:80:82:
23:48:d2:f6:75:90:18:f1:df:db:de:f9:e0:9e:bd:
59:a7:86:62:80:b5:90:bf:ad:9e:17:e0:ab:a7:47:
0c:38:cb:88:a1:bb:4d:75:90:38:79:19:55:e8:4e:
27:a5:16:9d:63:96:a0:10:7c:ec:89:dd:3f:f1:cf:
b8:26:29:4e:14:37:54:82:1e:c3:8f:82:e1:51:34:
7d:f9:a9:5e:bb:0a:5b:80:c8:eb:51:fd:64:be:b3:
93:5d:3d:47:8f:76:97:d6:9c:c5:8e:7f:b8:f2:ea:
88:7b:ec:b5:fd:97:90:81:d6:75:d0:8e:81:d4:db:
c0:ec:fc:ef:d2:61:53:58:a8:f0:f7:6b:32:e2:99:
83:38:2c:b2:f0:b5:98:ad:81:93:20:f2:4a:6b:a5:
e6:67:2b:fb:44:45:e0:f4:0b:ff:7b:1b:bb:ae:f4:
49:a9:af:8e:67:27:5c:4f:cd:45:a3:da:eb:ca:d0:
9b:2e:8a:2b:97:1e:48:b6:5c:16:e4:df:6f:6c:c3:
2c:c0:cd:cd:08:6a:2e:4e:f7:29:48:4c:d5:7d:f5:
32:bf:89:e4:e0:6f:b8:7a:b3:79:43:39:28:38:1c:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:A1:D8:58:82:E8:BD:44:8E:B2:49:13:D2:B6:86:A8:06:E9:03
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/TlWh2FiC6L1EjrJJE9K2hqgG6QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d2:9f:1a:89:53:fd:fd:c8:1f:e9:69:39:f1:7e:32:a7:5f:
8c:22:f8:30:e6:4a:94:c2:3e:28:92:91:c2:29:22:2a:84:6d:
91:f5:0a:7b:94:c1:ab:34:df:be:47:65:ef:43:9a:7b:56:36:
ac:2b:14:73:ae:b8:5a:0c:7f:1d:ee:1c:d5:e6:9b:09:85:bf:
43:a7:17:75:06:3a:63:3e:cd:7f:b0:a1:6e:62:fe:e1:e2:98:
84:98:e2:a4:a6:28:82:02:2d:35:24:e6:4c:3d:75:a8:1e:39:
61:67:dc:aa:b5:6e:25:08:4f:67:e8:d2:ea:bc:79:3c:72:4d:
d1:00:c7:68:8a:af:dc:d6:ba:7c:70:16:92:d8:5c:0d:ca:a5:
c6:09:05:8b:5e:8b:dd:ea:08:71:87:34:62:2a:be:36:8c:48:
fc:54:bf:76:f5:b7:8d:9a:16:04:a7:44:d3:59:60:e9:de:5e:
fc:74:88:d2:fb:10:a2:f7:70:a8:ac:a0:6e:e1:75:f4:ed:80:
6b:83:75:d0:55:2a:c1:ce:4c:75:76:e0:51:af:08:e3:b7:a8:
11:57:7e:6f:e0:61:46:91:97:74:cb:67:6a:af:44:5b:d2:f1:
45:bf:1b:39:43:04:46:c2:bd:91:8c:e4:52:f6:89:fd:c9:d4:
90:63:07:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1bxcFJWXplZzeBAk1QVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjUwMTAxMDc0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTU1YTFkODU4ODJlOGJkNDQ4ZWIyNDkxM2QyYjY4NmE4MDZlOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lww7AMxX5z6m8jCdwAIRp0EW1MQ
gr+5QiAfgIIjSNL2dZAY8d/b3vngnr1Zp4ZigLWQv62eF+Crp0cMOMuIobtNdZA4
eRlV6E4npRadY5agEHzsid0/8c+4JilOFDdUgh7Dj4LhUTR9+aleuwpbgMjrUf1k
vrOTXT1Hj3aX1pzFjn+48uqIe+y1/ZeQgdZ10I6B1NvA7Pzv0mFTWKjw92sy4pmD
OCyy8LWYrYGTIPJKa6XmZyv7REXg9Av/exu7rvRJqa+OZydcT81Fo9rrytCbLoor
lx5ItlwW5N9vbMMswM3NCGouTvcpSEzVffUyv4nk4G+4erN5QzkoOBw0/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE5VodhYgui9RI6ySRPStoaoBukDMB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvVGxXaDJGaUM2TDFFanJKSkU5SzJocWdHNlFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWkLMA0G
CSqGSIb3DQEBCwUAA4IBAQB10p8aiVP9/cgf6Wk58X4yp1+MIvgw5kqUwj4okpHC
KSIqhG2R9Qp7lMGrNN++R2XvQ5p7VjasKxRzrrhaDH8d7hzV5psJhb9Dpxd1Bjpj
Ps1/sKFuYv7h4piEmOKkpiiCAi01JOZMPXWoHjlhZ9yqtW4lCE9n6NLqvHk8ck3R
AMdoiq/c1rp8cBaS2FwNyqXGCQWLXovd6ghxhzRiKr42jEj8VL929beNmhYEp0TT
WWDp3l78dIjS+xCi93CorKBu4XX07YBrg3XQVSrBzkx1duBRrwjjt6gRV35v4GFG
kZd0y2dqr0Rb0vFFvxs5QwRGwr2RjORS9on9ydSQYwes
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:58 2025 by rpki-client on console.sobornost.net