Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/adfSrjz8zMQzfk6RQgh0psxTHR0.roa
File: adfSrjz8zMQzfk6RQgh0psxTHR0.roa (raw, json)
Hash identifier: m6kWVuP71bRqpA1w6ImUyPJpL3NVhQk9W2DY/Q8Wxoc=
Subject key identifier: 69:D7:D2:AE:3C:FC:CC:C4:33:7E:4E:91:42:08:74:A6:CC:53:1D:1D
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 01962489E888FF1619AFA9CF7A7E771DCF10
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/adfSrjz8zMQzfk6RQgh0psxTHR0.roa
Signing time: Fri 11 Apr 2025 11:08:59 +0000
ROA not before: Fri 11 Apr 2025 11:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 178.253.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:89:e8:88:ff:16:19:af:a9:cf:7a:7e:77:1d:cf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 11 11:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d7d2ae3cfcccc4337e4e91420874a6cc531d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:4a:97:04:e0:b7:33:0e:33:67:13:ea:69:
70:13:76:dc:22:f8:c5:56:c6:87:4c:0f:41:40:8a:
d1:72:77:a0:4b:30:a5:43:ad:89:46:b2:97:7a:d0:
50:66:67:23:c3:18:08:1d:07:4d:c3:5f:db:db:6e:
36:89:d8:e7:74:b1:50:97:ca:46:da:f1:a9:df:c8:
1b:5c:59:b1:18:7b:8e:e0:6c:f1:26:9d:a2:a1:15:
1a:ce:f2:88:48:b1:eb:be:e9:d7:2c:c4:0a:d4:e0:
37:79:f5:0c:b8:3d:b5:bf:3e:bb:5a:f1:09:43:a1:
2a:c7:9b:96:d1:80:d3:22:39:c2:9c:7b:e4:8e:32:
22:ad:76:4c:6d:bc:c0:96:d4:c5:73:78:f1:c6:dc:
fb:fc:c7:94:7a:08:bb:e4:39:24:97:3d:1e:07:9e:
08:75:ff:cf:46:55:2c:a2:40:26:1d:63:48:cc:11:
e1:24:e2:37:fa:42:8f:15:26:53:fb:f7:4a:2d:c1:
bc:b9:ef:73:f8:8c:14:a0:73:3b:dc:de:6e:55:67:
b3:54:88:4f:6c:f5:ba:37:ae:70:65:73:18:07:6f:
37:73:7a:9a:06:26:16:3c:20:f0:c1:f6:dc:68:74:
1d:73:da:d0:67:76:7f:60:e6:1e:dc:02:c6:ff:26:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:D2:AE:3C:FC:CC:C4:33:7E:4E:91:42:08:74:A6:CC:53:1D:1D
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/adfSrjz8zMQzfk6RQgh0psxTHR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:02:aa:ea:12:55:82:b8:1c:d5:87:79:c5:e3:51:b9:d9:60:
f2:f6:f0:62:e8:c1:94:5e:af:84:d9:d3:28:4e:56:60:8f:7e:
78:e4:36:83:58:aa:b1:fe:0c:00:18:fb:a1:4a:d4:f9:7a:1f:
cd:6c:3b:02:37:8b:64:e1:da:5b:85:cd:d2:3d:19:5c:b1:50:
01:e7:f2:82:99:54:46:42:f5:f3:8f:ad:00:97:05:c0:f0:82:
63:d2:58:71:39:ae:fa:77:d9:5a:36:a6:c3:59:e4:e2:d7:c5:
86:1b:e2:7d:bf:be:ed:28:ba:47:02:4e:7d:17:32:76:e4:9e:
0e:72:42:96:51:13:77:2f:79:e4:4b:53:27:75:63:ed:c3:3d:
e0:ad:a8:9d:51:a8:88:80:ee:ef:13:56:2c:77:11:68:d3:e2:
1c:cf:37:c2:2e:df:53:ac:dc:eb:6f:c3:c4:72:1c:63:d6:0c:
fe:8d:c9:d3:6f:95:55:ae:d1:38:a8:00:7f:ce:7f:f8:c6:c1:
e7:cd:40:e2:96:f1:71:2b:92:11:a2:1c:57:50:a3:e2:d9:79:
6a:b4:52:22:a2:fb:aa:b8:1f:50:f2:6d:b3:69:15:3f:f7:ae:
0b:d1:1b:8e:34:7d:f9:ea:3e:ab:09:df:2b:f7:cc:71:35:7a:
13:2d:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net