Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/TRLssSByve8p7zVYSOimtplK7a0.roa
File: TRLssSByve8p7zVYSOimtplK7a0.roa (raw, json)
Hash identifier: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=
Subject key identifier: 4D:12:EC:B1:20:72:BD:EF:29:EF:35:58:48:E8:A6:B6:99:4A:ED:AD
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01960F0C5C18C16D5C3E0EBCC2F6DF3C6EFD
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/TRLssSByve8p7zVYSOimtplK7a0.roa
Signing time: Mon 07 Apr 2025 06:59:50 +0000
ROA not before: Mon 07 Apr 2025 06:59:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 212.102.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0c:5c:18:c1:6d:5c:3e:0e:bc:c2:f6:df:3c:6e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Apr 7 06:59:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d12ecb12072bdef29ef355848e8a6b6994aedad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:2b:ba:50:70:89:30:7d:f4:2a:3b:8a:2b:
79:c6:79:2b:2a:3b:47:b3:90:db:b9:d4:a4:60:f7:
7a:46:2b:5d:3c:66:51:b3:b5:ec:a7:bf:cb:fa:f9:
e0:01:29:0d:b3:81:a9:42:99:42:2c:a1:76:c0:c9:
60:2e:af:c1:2f:c2:41:01:39:84:0c:be:77:a7:58:
d7:94:9b:c8:5a:d4:18:67:74:f0:0d:dd:ad:bb:ed:
90:f8:5c:85:21:03:39:1b:01:27:36:77:e8:a1:cf:
1a:bb:d2:84:d3:b2:26:dc:2c:e7:c4:cb:78:d6:b7:
fe:4b:17:7b:6e:70:4e:ae:c6:b8:e6:9b:f7:8c:1b:
2f:d0:c1:92:d4:fb:38:27:5a:bc:c4:a8:c0:19:4e:
e4:57:37:e3:c5:15:49:6f:ee:47:0c:3a:eb:5d:09:
71:3b:cc:b8:3e:9c:59:4e:bc:d0:59:18:51:b8:c0:
3f:be:7e:2a:87:c5:6a:1f:4e:0c:95:b5:56:39:22:
81:ff:46:14:0f:48:f7:46:53:1e:51:ed:1b:43:96:
ce:7c:53:c7:f1:4a:88:5f:d5:d3:e4:e3:84:c4:4b:
bf:36:7e:18:11:49:7b:25:57:4d:07:0f:35:4e:a3:
59:3f:f9:b6:12:52:5d:e9:27:1c:f6:67:08:33:bf:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:EC:B1:20:72:BD:EF:29:EF:35:58:48:E8:A6:B6:99:4A:ED:AD
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/TRLssSByve8p7zVYSOimtplK7a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0e:0c:fb:2b:29:fb:c2:91:1e:eb:99:32:90:4c:38:e8:65:
9d:94:2d:2e:8b:fa:e1:bc:75:46:b2:7c:6d:01:49:ca:ce:35:
98:7f:ed:e9:38:8c:4b:d4:0e:4c:1b:96:80:b3:c0:a8:55:41:
b7:e5:69:e3:88:f8:ff:6f:b5:14:10:5f:89:1a:d1:7b:40:4c:
2c:5a:47:e3:11:80:00:28:95:63:e9:8e:2f:f1:c1:93:fb:94:
08:f1:58:53:93:bc:c4:05:26:cd:a7:f6:f7:39:ab:35:97:05:
f7:e2:1a:90:7a:57:ce:41:84:70:79:97:d9:ae:83:bd:ee:b1:
c5:0f:61:5c:b7:2e:d6:d3:bb:ff:24:5c:59:cb:27:3e:8c:14:
ed:09:09:9c:ac:53:c7:ee:90:f3:bd:06:d0:3a:0b:28:83:bc:
75:1f:27:fd:da:cb:1c:60:7d:aa:a1:6d:c2:b1:0e:cc:1d:d3:
26:22:56:97:aa:ab:12:67:a4:d3:cf:0a:e2:f3:c2:ec:7f:27:
9e:ab:49:1d:e2:bc:8d:bd:24:4c:b2:ee:96:97:a2:65:6e:52:
71:5f:ca:f9:ae:ef:35:0f:90:cc:9d:88:2e:57:72:a9:75:3a:
2f:26:4f:47:59:ba:9e:fd:cd:50:7b:af:9a:39:34:ab:ee:c4:
2e:46:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net