Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/xEaq7kolhQn1OmIod6QQM1Gthtk.roa
File: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (raw, json)
Hash identifier: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=
Subject key identifier: C4:46:AA:EE:4A:25:85:09:F5:3A:62:28:77:A4:10:33:51:AD:86:D9
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 0195AB1DC544EBD4114AB759C91B9A1E1AE3
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/xEaq7kolhQn1OmIod6QQM1Gthtk.roa
Signing time: Tue 18 Mar 2025 21:16:49 +0000
ROA not before: Tue 18 Mar 2025 21:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35024
IP address blocks: 185.55.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ab:1d:c5:44:eb:d4:11:4a:b7:59:c9:1b:9a:1e:1a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Mar 18 21:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c446aaee4a258509f53a622877a4103351ad86d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:3c:5a:cf:45:28:8f:df:f0:69:7d:c9:c1:
b9:9c:c9:9e:27:1d:1b:e2:4e:31:af:1f:b6:ef:2e:
77:1f:a8:d7:c2:de:75:ca:85:03:16:7a:d1:b0:c2:
7c:f3:ff:28:6d:9f:74:ed:34:3c:a8:7e:e3:0f:a2:
6d:f8:c3:a8:6f:fe:b8:ab:8d:a9:a2:78:ad:f8:1a:
dd:c5:a8:5d:61:28:29:1e:3a:23:7a:90:dd:ca:98:
89:f7:35:89:7b:60:16:86:26:f7:31:a9:ae:d8:e0:
59:d5:25:f1:15:ee:b7:d8:ff:b5:94:2f:58:a3:6e:
f9:6f:97:2b:ec:75:6b:03:b7:21:42:65:75:24:23:
7a:4e:7c:b8:b5:79:70:4c:0f:b9:54:31:ee:9d:62:
42:9c:03:5a:d6:3e:63:8c:cd:d4:cc:24:3a:a1:46:
b0:a4:de:73:13:7e:c1:fd:e6:fb:30:fa:5b:d6:ca:
1e:4d:ce:7f:85:ad:e3:8a:04:22:1f:bd:20:ce:a5:
ae:10:3e:e7:37:be:9f:3e:1b:07:29:00:50:9e:39:
2e:ea:ef:49:0a:cd:b1:88:98:df:7a:5b:c9:b9:6e:
d8:37:44:8e:e3:67:4b:85:05:5c:ec:cb:80:3c:aa:
1d:72:09:8c:a5:a6:35:05:6e:37:f9:50:cd:af:67:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:AA:EE:4A:25:85:09:F5:3A:62:28:77:A4:10:33:51:AD:86:D9
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/xEaq7kolhQn1OmIod6QQM1Gthtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.241.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:64:07:e8:01:1f:ec:ff:84:1e:04:b6:b3:73:d2:b5:a8:
a6:72:fc:ad:53:29:be:a5:52:03:c1:9b:45:c2:51:84:e6:f7:
b7:d9:0a:c6:5b:2f:1a:18:7e:a5:24:c7:cb:ed:c0:da:d4:1b:
75:70:0d:a8:8b:69:f2:c4:96:52:16:de:ab:7b:eb:12:1a:71:
e9:bb:55:51:5a:99:e0:91:80:4b:72:1c:da:83:7d:44:ee:2f:
5c:3a:72:db:64:60:83:10:a7:ed:26:2d:06:a6:dc:34:04:21:
24:64:c5:f3:db:be:8f:32:98:af:b4:73:a0:87:20:64:0e:22:
8b:62:44:8e:38:6f:d2:f7:66:30:e7:d4:ea:a8:5d:5c:27:8d:
6f:fd:c5:f0:15:99:53:b7:07:a9:d9:b8:14:bc:96:d1:e3:8b:
0c:f2:b3:5b:6d:78:ce:00:63:f1:4d:f7:75:6b:e8:5f:08:fd:
3e:be:32:cd:50:f5:bf:d8:15:c9:35:25:49:9f:be:20:29:43:
3a:d4:c3:fe:5d:91:e6:64:03:28:91:59:66:c8:af:e1:5a:9c:
86:59:24:db:81:42:7d:03:ad:eb:11:2b:25:85:cf:ef:9c:41:
14:e9:1a:f5:92:ed:eb:5b:c7:c2:b6:55:c1:e3:c2:9c:57:12:
4c:da:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net