Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/55sTvowHGJg92qkZxcKwSCfNCK4.roa
File: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (raw, json)
Hash identifier: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=
Subject key identifier: E7:9B:13:BE:8C:07:18:98:3D:DA:A9:19:C5:C2:B0:48:27:CD:08:AE
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 0194228D2784CBFE9A89B1E64E25D2E70487
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/55sTvowHGJg92qkZxcKwSCfNCK4.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8303
IP address blocks: 149.219.0.0/16 maxlen: 16
149.219.249.0/24 maxlen: 24
149.219.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:27:84:cb:fe:9a:89:b1:e6:4e:25:d2:e7:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e79b13be8c0718983ddaa919c5c2b04827cd08ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:4b:28:2c:4a:26:57:d5:12:26:84:be:a6:
a0:fb:86:33:4c:12:33:6e:ef:9d:54:1e:57:14:a1:
62:b1:a4:2d:18:52:ad:bd:ea:5e:20:87:f4:f0:c6:
17:20:ee:8c:12:88:54:5c:a6:c3:84:ac:32:c8:a3:
0f:94:17:b7:00:07:69:4f:79:47:14:98:75:ae:ee:
6e:d0:a1:cd:6b:37:55:8c:19:f4:a6:71:70:84:86:
9a:a8:1a:fb:0b:ad:cc:6d:8c:22:b1:d0:f9:10:42:
ac:8c:c5:73:76:6c:4a:40:d4:b5:a8:e1:08:b9:70:
f1:5f:db:8c:f4:0b:8f:8a:4a:a8:42:09:fe:de:ef:
0f:f7:3f:73:9d:e3:de:34:0e:14:90:61:19:5b:56:
fd:b0:82:0d:dc:ab:ed:44:21:8f:8b:9f:dc:4b:c0:
f5:9f:00:8a:a1:15:4b:cd:98:54:cb:a4:4f:c9:73:
a8:40:ff:b5:ca:5d:0f:06:ec:a1:87:84:1f:48:fa:
f9:04:88:82:67:93:e8:08:c3:bf:70:f5:07:67:dc:
2a:d0:f6:9e:66:41:9e:ed:b0:99:e4:09:e9:19:fc:
92:18:5f:ed:05:33:60:95:1b:9f:3c:38:6e:a1:31:
ff:7e:8b:63:d2:a7:7f:75:db:14:c3:c9:90:1c:ce:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:13:BE:8C:07:18:98:3D:DA:A9:19:C5:C2:B0:48:27:CD:08:AE
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/55sTvowHGJg92qkZxcKwSCfNCK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:b5:de:74:94:2c:6e:74:c2:14:83:36:40:24:2a:1e:87:fc:
1f:ad:84:f1:71:e8:0a:01:64:cd:76:42:73:d7:85:0b:6a:76:
65:81:2f:5a:bf:0d:86:66:7d:d7:72:e6:81:ba:9a:9b:42:ec:
38:79:ad:8e:5e:84:33:29:2b:70:33:37:01:22:ac:5e:83:1b:
47:38:5a:c7:d6:5d:32:f1:54:dd:45:37:e9:83:46:4c:82:2a:
48:ca:2a:04:8a:cf:fc:94:7f:d0:7b:d9:1a:77:d7:70:91:9e:
00:3c:16:53:7e:df:ac:63:7d:ab:b9:ab:71:f5:14:a3:85:05:
88:a7:8a:01:59:2f:a3:d2:0e:a2:db:a1:50:97:2c:78:c0:29:
09:7f:d0:40:7e:7e:6d:38:62:1e:62:0c:2b:f4:e1:b7:d1:52:
2b:73:5b:c4:34:6a:23:51:4c:6d:fa:2d:51:c0:c4:af:30:84:
72:33:35:e3:d9:05:6a:d1:f8:46:10:d0:e6:75:54:4e:5e:20:
d7:ce:fb:76:46:aa:44:e7:89:e2:0c:3b:d0:fd:ff:27:b5:f4:
ea:75:a9:aa:af:f1:a2:9b:52:c0:cd:86:0f:25:e5:1c:4a:1f:
b3:0d:28:52:11:a8:99:43:6f:d0:69:9e:68:81:de:a1:5e:95:
f3:37:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net