Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/TivLjo1FQOCYPys-6PXg0sxsbgk.roa
File: TivLjo1FQOCYPys-6PXg0sxsbgk.roa (raw, json)
Hash identifier: cOyTOfhMRVGrlkCzBgDz7G/M7TZAET9d2rVBDG9vbos=
Subject key identifier: 4E:2B:CB:8E:8D:45:40:E0:98:3F:2B:3E:E8:F5:E0:D2:CC:6C:6E:09
Certificate issuer: /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial: 019624F8B0E9F1FF7F72A5C39BA5207E9B8C
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/TivLjo1FQOCYPys-6PXg0sxsbgk.roa
Signing time: Fri 11 Apr 2025 13:10:00 +0000
ROA not before: Fri 11 Apr 2025 13:10:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57575
IP address blocks: 89.207.156.0/24 maxlen: 24
109.205.197.0/24 maxlen: 24
185.153.54.0/24 maxlen: 24
2a13:9a40::/32 maxlen: 32
2a13:9a41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f8:b0:e9:f1:ff:7f:72:a5:c3:9b:a5:20:7e:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Validity
Not Before: Apr 11 13:10:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e2bcb8e8d4540e0983f2b3ee8f5e0d2cc6c6e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:d3:38:73:ef:fb:54:4d:42:6f:f1:83:2f:
d1:1a:b5:3a:55:15:da:08:b0:6c:ab:03:dc:4e:cc:
37:4f:b2:a8:28:d3:16:2d:1c:5b:b4:70:12:95:3b:
bc:12:a8:87:14:26:bd:82:ad:0f:56:46:bd:9f:2d:
ae:ed:77:12:b6:10:b4:fe:b8:d0:d9:c0:3e:f2:d8:
94:e0:e4:2b:c8:a5:37:3d:14:cc:25:9f:4d:52:24:
af:8a:d0:fd:2a:14:34:d2:6d:4d:3c:ff:37:94:0b:
ea:50:20:35:30:e6:48:e2:79:96:fc:87:d7:79:95:
3d:38:8b:3b:05:35:12:e1:91:80:36:d6:38:90:93:
62:e8:11:c0:06:21:52:da:90:6c:8f:06:e0:1c:b5:
8b:ff:39:e8:e7:6b:d7:e4:77:93:ec:ad:70:d3:9a:
5d:4f:86:2b:da:26:77:85:ae:3c:e6:a1:9d:f0:5d:
e7:a1:c1:01:a5:4e:2f:29:d5:9b:cd:0b:02:2f:ca:
85:40:8c:02:38:be:b1:30:4a:ec:e9:09:d7:39:12:
37:e9:fa:28:d6:ba:be:57:95:6d:91:67:ad:da:61:
55:44:b3:31:d0:7c:33:e8:5b:04:f7:06:88:1d:4c:
52:5d:f6:7f:cb:34:7e:70:87:7b:5e:4b:de:6e:e7:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:CB:8E:8D:45:40:E0:98:3F:2B:3E:E8:F5:E0:D2:CC:6C:6E:09
X509v3 Authority Key Identifier:
keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/TivLjo1FQOCYPys-6PXg0sxsbgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.156.0/24
109.205.197.0/24
185.153.54.0/24
IPv6:
2a13:9a40::/31
Signature Algorithm: sha256WithRSAEncryption
aa:e1:70:dc:3a:cc:ca:34:c2:7f:62:b7:4f:12:4f:14:e9:06:
e0:dc:42:17:7f:13:5c:22:6e:48:4a:06:0d:a5:49:99:be:dd:
f7:61:6a:9c:66:8b:f8:9d:c0:c4:4e:0b:cd:83:bb:4f:b1:4b:
0b:a7:34:ff:e3:a8:ca:e6:4e:ad:37:ee:c8:23:7f:40:6d:03:
c8:87:c5:a3:7a:cb:8a:c1:fc:95:bd:12:d1:48:d5:6b:da:b6:
c3:c0:eb:af:93:f0:ad:1c:85:23:cb:51:64:91:3a:d9:b3:56:
5a:48:53:46:22:fb:37:f2:e8:5e:ed:2a:e0:5f:b0:a3:c3:05:
66:7b:f1:c3:f8:5d:ae:48:ef:4c:bb:a3:10:7d:5f:bc:cf:be:
e4:6f:37:c3:80:da:7f:77:76:67:b9:63:59:c9:ff:a1:11:93:
42:f4:27:04:82:ea:7b:e6:e1:8c:bb:c4:08:e5:e4:b3:22:a9:
9d:c9:30:32:4c:9d:41:3f:5a:67:d8:91:2b:e5:cc:2c:bb:29:
e5:2d:de:86:0e:26:c8:c9:dc:a2:d0:5c:33:6a:a2:9d:ba:e1:
a6:e5:f5:a1:79:62:52:f7:05:61:24:5e:81:cd:7c:38:d4:98:
ad:10:aa:2c:50:35:55:5f:da:85:ca:7f:04:f6:3c:7f:96:93:
53:33:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net