Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa
File: tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa (raw, json)
Hash identifier: DX7nnKsn9/Gq5SSYvCSnPhv/mgOxdAVaf7ValTsSLAA=
Subject key identifier: B5:49:E9:DE:50:97:B6:8A:0A:04:21:FF:8C:0F:D5:7D:AD:8C:8D:24
Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial: 0194CD58585D32DB9C13BB20FA4B6B62F1E5
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa
Signing time: Mon 03 Feb 2025 19:45:06 +0000
ROA not before: Mon 03 Feb 2025 19:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205889
IP address blocks: 185.185.173.0/24 maxlen: 24
185.185.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:58:58:5d:32:db:9c:13:bb:20:fa:4b:6b:62:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Validity
Not Before: Feb 3 19:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b549e9de5097b68a0a0421ff8c0fd57dad8c8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:e0:cc:59:81:8a:2a:07:c6:27:cf:fc:2c:
00:af:d3:2d:a6:c8:91:6b:ee:d6:b4:aa:bb:73:f6:
37:20:1b:fc:69:d2:18:ba:bb:93:4c:ec:99:ad:fd:
7e:fa:c7:99:82:b7:c2:aa:12:87:1f:47:5c:d0:2d:
a4:4e:b2:71:53:0a:3b:27:26:aa:89:aa:7c:88:89:
9d:c5:fd:60:43:18:d0:98:78:f8:95:3a:be:00:93:
8c:2e:d1:8a:d6:53:d3:5f:ed:15:f3:7c:13:47:f8:
4a:b3:11:03:73:4a:b3:b7:ba:06:90:a9:4e:90:32:
72:0a:73:54:34:af:5b:4e:c9:c3:47:44:28:f4:81:
0d:31:82:28:42:c4:6a:8c:2b:54:33:e5:94:1d:1f:
70:89:d3:f0:c3:8d:fa:b3:3b:72:18:61:72:7c:fa:
ae:8d:e0:ab:5d:0f:78:ab:92:19:d2:fe:36:79:cd:
f5:91:57:9f:03:17:55:d9:d3:9b:59:76:cd:32:b0:
9c:03:33:be:41:e4:0e:c4:16:73:85:15:db:b4:22:
86:d2:16:3f:fd:9f:e0:dc:a3:70:13:1c:cc:a8:33:
4b:75:ca:21:2d:09:73:5e:5d:a4:96:8e:93:8d:d7:
c7:3a:3a:9e:8f:34:42:f0:66:2a:b5:90:24:e4:d1:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:E9:DE:50:97:B6:8A:0A:04:21:FF:8C:0F:D5:7D:AD:8C:8D:24
X509v3 Authority Key Identifier:
keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.173.0-185.185.174.255
Signature Algorithm: sha256WithRSAEncryption
ab:f6:f6:2e:51:db:6c:26:60:6c:92:a8:c7:9c:67:b8:dd:e3:
2c:e6:7f:ce:6b:aa:82:27:5f:df:c0:d0:6e:f7:b0:22:8b:31:
5a:2b:18:b0:ca:f5:2c:dc:2b:c7:c7:da:b3:8c:e5:83:c2:f8:
84:26:5b:6a:41:e9:6e:be:f6:3a:f8:05:96:28:c1:bb:4f:fb:
55:06:4a:88:5d:73:3e:0c:3b:88:bb:d9:b4:b8:23:b3:db:2f:
bf:46:6c:07:10:aa:e7:31:39:f1:41:8d:ba:15:d2:0f:40:48:
cb:6f:98:3b:3b:a8:7f:77:33:70:d1:c1:50:0e:17:d4:c7:3d:
fd:f9:fc:4d:fb:a0:2a:3c:83:a3:7c:3f:b0:8e:4d:16:54:04:
f2:c4:c2:b1:62:7f:db:df:26:cf:d1:12:ee:ce:1c:93:ef:2f:
1f:43:e3:c7:43:6d:11:91:82:21:0c:56:cf:d9:df:3c:d1:21:
79:e4:0d:79:4c:64:3f:bf:29:ca:c0:9f:57:b2:ef:39:28:c1:
68:ae:6a:fc:99:e6:cb:d7:d1:7b:d7:95:ef:98:ab:02:2c:cb:
8d:f5:90:23:cb:49:bc:1f:04:75:7d:4b:54:5b:7e:f9:f8:3a:
2a:ed:99:70:5a:7f:cc:45:8b:eb:f0:f1:4e:3f:78:c3:b7:39:
0f:fc:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net