Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ofbszTn0i-YSIBGbdtRQO-HAngw.roa
File: ofbszTn0i-YSIBGbdtRQO-HAngw.roa (raw, json)
Hash identifier: +Yij66+the4UDsOblrHzuVkVOxLhBPgs2jttAsdE6SE=
Subject key identifier: A1:F6:EC:CD:39:F4:8B:E6:12:20:11:9B:76:D4:50:3B:E1:C0:9E:0C
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019623D60B776A324FBB48608600CAF06813
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ofbszTn0i-YSIBGbdtRQO-HAngw.roa
Signing time: Fri 11 Apr 2025 07:52:32 +0000
ROA not before: Fri 11 Apr 2025 07:52:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 94.241.172.0/24 maxlen: 24
94.241.173.0/24 maxlen: 24
94.241.174.0/24 maxlen: 24
94.241.175.0/24 maxlen: 24
178.253.22.0/24 maxlen: 24
178.253.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:d6:0b:77:6a:32:4f:bb:48:60:86:00:ca:f0:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Apr 11 07:52:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f6eccd39f48be61220119b76d4503be1c09e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:8e:7a:92:a1:07:f5:52:af:e9:6b:4d:31:
fe:70:8c:58:39:cd:81:34:25:11:36:b1:0e:62:98:
44:8b:e4:e3:39:28:d1:d8:0d:9d:88:52:f6:54:3f:
4b:c8:a2:46:77:21:d5:93:ed:22:ab:51:8d:b6:86:
d6:7a:92:c4:f3:35:ad:a3:91:dd:b0:93:e3:5b:4d:
4c:e6:65:88:3b:29:b9:4c:94:cf:f5:fa:bc:ec:b7:
04:c0:dc:c0:d5:1b:d7:06:af:1f:37:fc:cf:05:6f:
78:08:c8:56:16:bc:5e:23:11:db:00:d8:d6:40:0f:
23:d0:94:37:e4:50:6b:63:72:da:c6:46:28:f0:ac:
c0:fa:1b:39:7e:2b:1a:2d:f7:f0:77:d2:1f:8b:01:
7e:36:fc:38:87:08:69:07:29:14:b7:32:15:4b:5f:
ae:80:30:c9:ab:b4:83:07:f2:5c:df:e8:64:4e:c2:
2b:a6:50:90:72:c6:aa:fe:61:84:c6:20:b1:ed:3d:
8b:0f:68:30:4d:e5:78:b2:e0:c5:85:c0:a9:67:ab:
9e:63:d2:62:e8:cf:60:83:e8:3d:1d:cb:9e:59:fd:
31:9b:7e:c1:9b:47:0e:76:15:fb:fc:57:24:0d:ed:
80:db:6f:5b:ed:62:3a:b4:38:50:11:62:a1:e5:05:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F6:EC:CD:39:F4:8B:E6:12:20:11:9B:76:D4:50:3B:E1:C0:9E:0C
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/ofbszTn0i-YSIBGbdtRQO-HAngw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.172.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:77:10:62:09:c5:ee:e0:29:3d:63:b9:be:67:b1:c2:2a:34:
98:ba:f0:50:60:f2:6b:94:c4:8c:ea:2c:9d:2a:94:dc:96:36:
61:94:40:29:a7:e7:bd:df:af:26:de:26:60:1d:18:eb:5e:a6:
c9:29:06:b9:b4:8f:10:b9:c2:0d:81:5c:f3:c5:cf:17:69:26:
c9:87:59:15:91:be:a6:1f:e0:fb:53:bf:a0:5b:99:bd:26:d6:
ab:9d:65:bf:46:3a:29:3b:c2:e8:b3:c7:37:59:b0:76:1a:98:
c6:eb:9d:09:af:e0:8c:f1:db:97:34:1e:ea:3b:06:e4:1c:fe:
1a:65:50:f1:75:b2:cf:56:b8:55:20:fa:b7:1d:4b:bf:2a:ae:
ab:f5:70:f7:66:ad:e6:19:d8:36:66:4c:18:98:03:1a:2c:b8:
e1:43:51:ed:00:66:c7:30:f9:3c:56:f2:d5:d7:9f:06:36:90:
c3:8c:3b:3e:be:59:36:03:c4:f6:5e:e3:f6:75:ea:a9:35:ef:
66:58:c0:66:9b:05:73:f3:61:70:49:08:e1:3e:c0:76:46:e4:
a7:0b:2d:c3:b0:26:ea:d2:46:1b:f6:ec:7a:a4:4b:9d:17:c3:
78:5b:68:33:87:d5:54:9f:60:50:c0:6a:a6:44:11:72:23:68:
80:84:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net