Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TAMT8S1Oah9_z0PWf3XcQc44cOk.roa
File: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (raw, json)
Hash identifier: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=
Subject key identifier: 4C:03:13:F1:2D:4E:6A:1F:7F:CF:43:D6:7F:75:DC:41:CE:38:70:E9
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1F12085C40211C76252CBAE8A8B19
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TAMT8S1Oah9_z0PWf3XcQc44cOk.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56765
IP address blocks: 94.182.236.0/23 maxlen: 23
94.182.236.0/24 maxlen: 24
94.182.237.0/24 maxlen: 24
94.182.242.0/23 maxlen: 23
94.182.242.0/24 maxlen: 24
94.182.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f1:20:85:c4:02:11:c7:62:52:cb:ae:8a:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c0313f12d4e6a1f7fcf43d67f75dc41ce3870e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:be:fe:9b:22:68:e4:32:5f:f2:eb:f9:59:
d4:d9:ab:cc:5b:59:c8:45:5a:5b:59:5e:e6:9f:ea:
70:13:71:ba:af:fe:87:56:3e:84:c3:3c:d8:70:03:
06:a9:0b:7f:83:57:22:22:85:ff:a2:7e:cf:fc:3a:
e3:13:60:b5:74:a2:ed:c3:d3:bc:9c:53:c0:94:7b:
87:db:c6:ef:e7:d7:21:ea:4e:24:57:54:24:2e:ae:
8a:6b:78:da:cf:51:87:1a:6e:1a:a4:a7:6f:d5:d8:
e6:78:fa:33:e2:00:9f:ee:80:82:42:38:ca:06:c9:
6b:17:54:6f:99:00:13:47:70:ac:ca:54:8f:8d:be:
9e:84:a1:7e:df:18:5c:3c:8c:28:ef:d3:de:b0:59:
88:52:1f:ad:4f:7e:ba:67:86:a5:22:0e:a4:e6:46:
98:09:b4:e5:93:4f:9f:0d:a0:b6:43:2c:45:72:99:
63:d1:81:a4:b9:f3:58:63:9d:96:82:34:73:c3:64:
70:4e:eb:15:5b:5e:04:36:5b:06:e5:b8:d9:11:cc:
57:4e:db:a8:bf:af:0d:a7:a2:17:ea:67:19:cf:4e:
fc:50:d9:7c:1b:0e:e3:75:f4:e1:73:39:98:49:6c:
a9:6a:c0:f6:df:fa:5a:ff:d3:10:cc:0f:f8:1e:f7:
5d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:13:F1:2D:4E:6A:1F:7F:CF:43:D6:7F:75:DC:41:CE:38:70:E9
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/TAMT8S1Oah9_z0PWf3XcQc44cOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.236.0/23
94.182.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:6f:8a:2b:50:78:46:bf:1c:04:a3:6d:f3:09:bd:4b:e0:1f:
e7:e7:bc:6d:f7:32:18:c4:3e:6a:40:71:c6:f0:bd:fe:5a:1e:
2d:8b:7e:75:78:0c:da:47:27:6d:e4:a0:6d:3a:a6:16:95:26:
3e:31:cc:62:68:29:32:87:df:02:e9:cc:26:21:66:23:a4:61:
20:bb:64:a9:ed:60:a9:b3:b5:11:30:8f:b5:2b:7f:18:0b:2e:
45:92:09:2b:2a:e1:6a:cd:b5:d7:92:c3:f7:da:e8:d0:a3:20:
12:49:57:c2:94:97:4b:d7:8b:70:cf:cd:91:f7:19:dd:2d:49:
e4:39:18:78:88:c5:5b:a0:04:b7:dd:2f:71:5a:ee:5a:66:d5:
93:6e:10:0b:31:56:d1:e7:2d:15:81:a3:71:12:b0:01:02:74:
79:02:70:1b:c0:4a:5f:80:34:5f:ac:f6:54:da:c6:d9:13:20:
61:be:b0:8b:07:21:5a:b0:5a:1b:94:e9:df:51:fe:0c:fa:d0:
17:c1:7f:80:41:c9:ea:02:1d:cb:d4:b2:50:44:12:20:d7:d0:
4a:d2:56:6c:9b:a1:b9:9e:b6:7d:e0:06:6a:5f:04:a8:ee:7a:
64:b9:e2:3a:0b:d1:d9:02:0f:53:af:31:68:9f:50:9d:57:0e:
ea:a5:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net