Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/75LTo_jTlCg81UcwDjwfJUQMDKk.roa
File: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (raw, json)
Hash identifier: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=
Subject key identifier: EF:92:D3:A3:F8:D3:94:28:3C:D5:47:30:0E:3C:1F:25:44:0C:0C:A9
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019518D53DC288B83B17C883FC56FC3FA7D5
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/75LTo_jTlCg81UcwDjwfJUQMDKk.roa
Signing time: Tue 18 Feb 2025 11:33:02 +0000
ROA not before: Tue 18 Feb 2025 11:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50877
IP address blocks: 176.32.56.0/21 maxlen: 21
185.112.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:d5:3d:c2:88:b8:3b:17:c8:83:fc:56:fc:3f:a7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Feb 18 11:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef92d3a3f8d394283cd547300e3c1f25440c0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:51:96:b7:75:4f:36:17:85:4e:67:2a:28:
3f:24:34:cc:d7:bb:bd:db:bb:b2:1e:ee:8e:4e:a4:
96:bc:f5:56:d5:34:bf:72:a5:91:55:5b:4d:e7:ec:
dd:f8:08:9d:14:94:08:78:97:10:23:7a:d6:89:30:
7f:d5:ea:94:39:3e:4b:01:60:48:cb:77:31:dd:f6:
73:81:ba:2a:49:5c:ff:b3:59:28:84:5e:fd:27:3c:
c1:fd:7f:04:22:db:85:7e:03:fa:1a:2e:ff:71:b9:
45:c9:72:3a:5f:c8:cd:a5:9b:56:d8:d0:92:39:50:
88:ff:46:18:d3:ee:b0:80:ef:d8:a0:18:b0:69:f0:
96:47:b5:33:f0:42:88:ad:c0:3c:a2:c8:c2:f0:2d:
94:82:ca:f4:6a:7f:67:8b:ad:78:9a:5c:19:02:84:
c7:1e:2b:3c:5d:13:28:23:25:de:b7:9c:28:68:ab:
37:d8:5c:f0:2c:96:1a:22:a5:b1:10:92:bd:7f:e4:
70:81:c7:e4:85:c6:90:58:64:78:f5:f8:40:df:96:
48:66:56:21:83:7d:87:ef:90:be:1d:69:ca:b0:a8:
97:84:ef:45:ec:3d:b2:fe:ae:9c:3a:5c:3b:79:ad:
67:ff:7f:a2:b1:df:27:96:32:1f:05:26:4a:ea:73:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:92:D3:A3:F8:D3:94:28:3C:D5:47:30:0E:3C:1F:25:44:0C:0C:A9
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/75LTo_jTlCg81UcwDjwfJUQMDKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.56.0/21
185.112.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0e:95:a0:4b:fe:42:a9:58:7f:46:40:cf:a0:ad:7d:02:8f:
dd:26:29:5f:f4:fd:69:a9:29:15:e2:9d:5c:5a:43:d3:48:79:
8f:ef:cf:db:f0:01:cc:74:19:f8:88:c7:9f:63:17:dd:c9:d6:
07:5f:7e:7f:42:15:af:e2:14:7d:1b:95:2d:6b:53:6c:50:5d:
25:3a:2f:90:1a:80:ab:59:f7:f2:d2:3b:ec:32:19:d5:e1:25:
8b:1b:b6:ee:68:6b:8b:c3:cc:e6:4a:1a:71:b6:51:af:e3:f8:
8a:4d:99:04:af:b3:e4:f2:91:89:74:61:86:32:2c:b8:7e:47:
41:21:3b:cf:86:82:ca:04:c4:9c:bb:1d:f0:75:46:bd:e8:bc:
84:ad:4e:b8:0b:1c:b0:9c:f6:9c:44:4b:6c:db:e0:c6:19:02:
e2:02:71:98:c0:e3:ef:6e:a1:f7:4b:3c:dc:7e:36:a7:05:7f:
fb:6e:eb:b2:c7:43:dc:06:08:30:ac:72:a4:d2:dc:25:74:3b:
dc:d4:12:c8:b8:6d:0b:b4:75:31:bc:c1:85:ae:9b:39:ec:a6:
d4:94:7a:70:e4:a9:cf:15:27:7a:1f:bb:73:62:0e:cb:6b:df:
00:7b:5e:56:96:62:8d:fc:0d:48:77:a7:02:2c:43:ea:f9:a7:
a9:33:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net