Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/tTtHoX1wSZCp5whsaQk__p5Qj-c.roa
File: tTtHoX1wSZCp5whsaQk__p5Qj-c.roa (raw, json)
Hash identifier: XeNLM4ma2PLd2XIUXqACuWWh4dYsZ4F8oRpJO/BVSZc=
Subject key identifier: B5:3B:47:A1:7D:70:49:90:A9:E7:08:6C:69:09:3F:FE:9E:50:8F:E7
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 019427483CB73CA94F6B324CB11E1DCE22C9
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/tTtHoX1wSZCp5whsaQk__p5Qj-c.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59630
IP address blocks: 156.114.0.0/20 maxlen: 20
156.114.5.0/24 maxlen: 24
156.114.10.0/24 maxlen: 24
156.114.12.0/24 maxlen: 24
156.114.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3c:b7:3c:a9:4f:6b:32:4c:b1:1e:1d:ce:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b53b47a17d704990a9e7086c69093ffe9e508fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:a4:54:3c:85:e2:8e:cd:c8:f6:fc:9c:a2:
81:17:83:31:90:ec:d8:50:e1:fc:a8:23:09:f5:6d:
82:2e:f4:38:e7:02:f9:c4:8d:a9:73:53:6e:26:1c:
c4:b8:94:9b:c3:70:eb:0a:13:35:08:3f:6f:71:60:
0c:ab:c6:fd:e9:f6:1e:f3:54:0c:81:c0:8d:71:6b:
a2:d6:28:78:fd:a0:6c:2d:7e:7e:e4:dd:d0:1e:3b:
32:31:fb:1c:91:3b:d4:09:fd:94:84:ac:9d:a5:29:
a6:46:04:3d:1b:57:bc:b9:20:e3:fd:40:66:aa:65:
91:7a:8c:48:d6:6e:f9:89:78:2f:8f:a5:5b:c6:7e:
ef:3a:cd:e5:6a:d8:31:0c:79:60:e6:58:9d:1e:df:
28:d0:21:4c:74:ff:6c:18:ba:06:e6:e1:a9:f3:3a:
e6:1c:50:5a:3d:a1:85:90:4a:a1:b1:09:d2:2a:15:
e2:6d:4e:85:70:a4:3c:2a:cf:a1:72:c4:c7:84:b1:
b0:93:24:ec:58:1b:90:7a:63:99:57:95:e4:c1:b3:
01:3d:3b:8a:88:cd:22:3e:cc:5d:cc:e6:dc:a9:bf:
40:b3:66:47:8f:64:48:e7:8a:94:a8:21:a8:6a:77:
8d:3d:98:ad:d9:25:2a:b1:d4:33:e5:ca:8c:24:92:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:47:A1:7D:70:49:90:A9:E7:08:6C:69:09:3F:FE:9E:50:8F:E7
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/tTtHoX1wSZCp5whsaQk__p5Qj-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
88:7d:20:9f:ed:a9:49:77:da:ed:b0:03:b5:58:52:91:9a:4e:
77:22:20:55:d9:6a:cd:55:46:63:1b:22:f3:57:56:fe:e0:29:
f3:f7:3c:c1:20:59:69:d4:ca:15:20:bf:84:39:cc:9a:b7:13:
05:ae:d2:d0:f1:c7:9c:62:8a:e5:d2:f3:cc:90:a8:4d:65:e7:
46:5b:92:32:ae:48:ed:c9:ce:cf:1d:e5:ed:bf:32:7e:ee:5f:
7a:0e:12:19:20:80:84:18:56:57:3d:34:a1:22:d2:57:e9:1d:
45:82:16:70:d8:6c:52:02:b9:b2:cf:30:ce:d7:e1:b5:8f:83:
6b:ac:77:6a:77:d7:c0:c9:be:ea:f6:4c:f8:6f:62:44:ab:82:
40:95:f0:da:bb:2b:65:56:48:0c:d6:14:75:c0:ef:e5:ba:97:
0f:c2:58:51:9f:3e:cb:cd:7a:d4:d2:73:66:64:29:16:fd:01:
5e:31:64:ca:9b:b4:55:0a:08:04:20:44:8d:18:03:48:c9:36:
02:d3:b5:ad:98:b1:79:73:02:56:b6:9a:37:8e:8b:b4:ee:ff:
6b:d7:bc:35:7d:af:17:71:c6:7f:13:a7:f5:ef:83:67:16:b6:
87:1b:26:7a:e2:d6:6f:92:d6:6a:f0:6f:57:6a:0d:13:83:a8:
26:04:31:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net