Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dko559fKg7jHSh6A5UqsgMn0mRs.roa
File: dko559fKg7jHSh6A5UqsgMn0mRs.roa (raw, json)
Hash identifier: 9o8mdddCxbgONWINJIDmhQNLAJDGIChA2dHP/iUjsBw=
Subject key identifier: 76:4A:39:E7:D7:CA:83:B8:C7:4A:1E:80:E5:4A:AC:80:C9:F4:99:1B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0195659C0C5D34AFAF95112C9423A91CEB1D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dko559fKg7jHSh6A5UqsgMn0mRs.roa
Signing time: Wed 05 Mar 2025 09:21:20 +0000
ROA not before: Wed 05 Mar 2025 09:21:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:9c:0c:5d:34:af:af:95:11:2c:94:23:a9:1c:eb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 5 09:21:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=764a39e7d7ca83b8c74a1e80e54aac80c9f4991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:b1:94:b0:98:af:00:31:60:d3:d7:e2:7e:
b0:c5:83:08:ae:0a:ac:76:aa:74:6d:8f:3e:3e:c4:
76:30:6f:3d:7a:a4:14:f3:cd:bd:24:59:69:a2:0e:
9b:1c:c9:ea:7f:bc:d6:b3:cf:57:de:a2:8e:ec:e3:
ef:60:ac:ce:63:b2:dc:d9:00:97:a3:4b:3b:c6:2e:
f4:66:db:6b:36:9c:b3:9e:97:49:33:10:03:b9:5a:
a5:ff:2d:e7:ab:a0:17:70:82:b2:79:4c:0f:22:e0:
5f:12:04:e3:08:00:96:d5:36:7a:9b:a7:66:66:20:
15:d5:f8:fb:b3:28:3d:9e:21:9d:71:50:45:65:84:
e7:83:e6:7a:9e:55:69:41:84:8c:5b:03:84:f6:4e:
3f:b1:aa:8b:a3:1e:f3:6b:83:dd:6c:c0:ab:38:ce:
3d:d5:7c:33:63:33:82:d7:2f:0f:aa:6e:ed:a7:db:
42:6f:80:66:3e:26:15:7e:8a:16:44:e9:fb:f7:0b:
05:34:42:27:cc:e0:e9:07:0e:47:3d:cb:5a:84:9a:
19:cc:4c:f0:77:d8:1b:fd:e9:80:5b:e1:be:b9:1d:
30:b7:e4:b4:9f:b4:e6:5c:66:49:c5:da:bd:70:e3:
c5:6c:dc:66:c0:92:03:89:bb:48:2b:2a:c1:1e:58:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4A:39:E7:D7:CA:83:B8:C7:4A:1E:80:E5:4A:AC:80:C9:F4:99:1B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/dko559fKg7jHSh6A5UqsgMn0mRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
176.125.251.0/24
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f5:5d:bd:84:c2:24:83:d4:83:a8:b8:cb:2a:6e:b3:5b:d1:
11:3a:ed:75:69:c7:86:bd:53:bb:93:55:63:27:16:f3:39:83:
f8:e4:5e:54:6f:2b:e6:58:28:77:a6:56:33:62:94:f6:12:93:
3f:e3:dd:2c:3d:8f:44:69:95:1e:ba:48:d4:e7:89:91:32:73:
26:7c:2c:55:fe:da:a6:9c:83:cf:48:6b:1b:4d:6f:aa:25:e1:
2a:b3:11:e7:55:47:75:f2:06:76:b3:78:19:c3:0b:c8:ec:9b:
0d:3e:1b:bd:ff:d8:d9:cc:d5:36:87:2f:42:73:19:2d:c7:5a:
a1:4a:e7:c5:ad:56:cd:47:84:23:fb:49:67:71:3a:ef:90:2b:
9a:07:87:7a:14:bd:9e:88:2f:63:cf:75:cd:3b:9b:65:9f:bd:
52:de:3f:0b:30:a5:29:8b:9b:f1:09:f0:0b:5a:c4:01:bb:af:
e3:29:75:4c:4d:4c:f6:5a:f5:d2:b6:7a:1a:d1:63:21:f5:ea:
2e:a3:3a:a3:6a:26:00:02:42:e6:98:a4:23:8b:1c:9f:e8:ef:
70:d9:f4:bb:81:32:dc:6a:4a:6a:09:c5:dd:3e:d2:04:ba:f6:
8c:41:4f:7c:76:6f:96:16:36:bf:67:0c:95:ba:c0:26:9e:fd:
47:f5:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:55:52 2025 by rpki-client on console.sobornost.net