Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UX7Jg3NQMWOn_XnL0qfumFP_th0.roa
File: UX7Jg3NQMWOn_XnL0qfumFP_th0.roa (raw, json)
Hash identifier: oM+kj+bTRDVfIDKYXQPYhZJFDoHz/bWd2p/hXbKKGTI=
Subject key identifier: 51:7E:C9:83:73:50:31:63:A7:FD:79:CB:D2:A7:EE:98:53:FF:B6:1D
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0195E8471EA585B10875AE9588B41DB80517
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UX7Jg3NQMWOn_XnL0qfumFP_th0.roa
Signing time: Sun 30 Mar 2025 18:18:49 +0000
ROA not before: Sun 30 Mar 2025 18:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.232.0/22 maxlen: 24
178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:47:1e:a5:85:b1:08:75:ae:95:88:b4:1d:b8:05:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Mar 30 18:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=517ec98373503163a7fd79cbd2a7ee9853ffb61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:06:29:93:b7:63:7c:8c:b2:ed:89:0f:c8:
3d:af:df:15:1a:50:4f:09:e3:9e:62:62:46:ad:07:
36:bd:99:5c:b7:ea:93:22:28:7e:df:c5:60:05:45:
51:95:7f:68:1f:71:e3:aa:af:73:00:0a:a9:81:ab:
f7:61:a7:2c:37:9c:26:91:f2:a3:e3:cc:35:19:00:
d2:e8:aa:12:36:03:4c:90:58:a4:78:1a:62:74:b0:
02:05:74:88:4f:70:53:2a:d0:cf:71:3b:f7:d3:53:
b7:8e:9d:ab:6d:89:1d:ac:c8:f4:1e:67:0a:83:fc:
0a:2e:dc:1a:b1:89:50:aa:e3:39:1e:09:ee:63:8c:
ee:2b:66:f9:d4:65:a5:d3:84:2e:63:22:b5:75:92:
fd:bf:4d:36:4d:3f:ca:39:1a:44:97:fb:5f:d2:0b:
11:3c:1f:74:8a:fc:f1:d0:3a:02:39:8a:83:45:93:
ed:64:ab:7c:11:c6:04:78:94:0e:6b:05:5a:e0:1a:
de:52:75:18:02:f7:34:8d:1b:1c:ba:eb:65:b9:53:
bb:75:04:6c:13:5b:8f:32:97:b0:47:88:03:6e:84:
4a:39:4b:a2:03:7f:42:0a:7f:fd:4f:ec:90:f8:65:
a7:53:bc:32:27:c9:71:f8:28:06:8f:a4:f2:8e:eb:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:C9:83:73:50:31:63:A7:FD:79:CB:D2:A7:EE:98:53:FF:B6:1D
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/UX7Jg3NQMWOn_XnL0qfumFP_th0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:17:a3:d6:b9:b2:06:4d:2e:28:25:8f:6d:bf:60:f3:d7:de:
3b:4c:0c:85:96:55:59:0a:be:6b:c9:35:27:e1:34:61:82:b6:
7f:79:42:0b:b3:c1:d9:65:2d:82:2f:cf:09:6d:e2:e7:cf:c7:
49:68:60:ea:84:aa:19:09:75:ad:ca:d7:ca:8e:89:a7:c7:57:
b0:37:0a:2d:1e:ee:a2:b7:d1:64:fe:3a:46:bd:03:22:35:2c:
03:f4:a2:b9:0c:4f:ad:49:57:b7:80:9d:02:c7:ee:bd:90:2b:
c1:3c:cc:59:37:9a:a5:17:b7:45:72:61:cd:58:45:e1:48:e1:
0e:4c:3a:53:96:e6:25:5a:24:7f:f3:4f:62:9b:3e:41:77:b8:
a1:2e:c3:ad:7b:9f:a3:62:04:7a:c2:87:bf:e1:cd:a1:9a:99:
2e:b8:19:70:03:3a:55:6f:40:42:cd:48:b0:76:ec:d2:ae:64:
a2:57:45:06:dc:49:aa:d5:ac:6a:6b:61:5b:ac:4d:09:82:0d:
53:d3:e0:a3:3a:9b:f5:45:c1:a1:92:06:b0:b1:8d:92:b4:21:
27:1e:ef:b8:59:19:7f:37:bc:06:50:02:3e:d3:b3:80:fd:cc:
e6:ef:93:2b:6f:a9:a9:f7:dc:28:be:43:1b:61:cb:c6:8b:b4:
15:01:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:51:08 2025 by rpki-client on console.sobornost.net