Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa
File: tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa (raw, json)
Hash identifier: x3MqStSpB4AHpyiqWuAgIrBK5ybLesbTtKI3yKep0ZQ=
Subject key identifier: B6:02:61:1F:15:81:F6:4D:67:0F:43:FE:B8:1B:9D:D5:28:10:8F:D4
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 019426D8BBFB0A1992645476B7A18EBB5445
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa
Signing time: Thu 02 Jan 2025 11:48:45 +0000
ROA not before: Thu 02 Jan 2025 11:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 185.147.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:bb:fb:0a:19:92:64:54:76:b7:a1:8e:bb:54:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jan 2 11:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b602611f1581f64d670f43feb81b9dd528108fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b8:5b:7b:18:ae:66:5d:a7:43:09:d1:51:4f:
c1:0a:70:84:c7:db:96:6e:0e:02:ac:55:0b:bd:72:
b7:6f:a0:1f:e4:34:d6:44:bc:6e:28:ec:ef:56:5f:
ae:20:fe:52:b6:6b:37:0e:b0:32:d5:dd:92:55:a9:
97:dc:e0:ce:a6:b4:a8:79:d2:96:03:45:0f:98:35:
91:4a:03:bb:b4:46:26:d0:cf:d7:34:fb:7f:67:0d:
76:8e:af:20:88:8f:83:4d:e1:26:7f:68:7b:18:b6:
75:1c:a2:19:e9:73:2a:bc:83:e6:fd:46:3d:2c:30:
f5:84:1e:a6:e5:c5:98:d5:69:c0:46:4a:44:4f:2e:
bf:24:c4:25:89:39:8b:7c:14:a0:d4:e9:73:97:17:
80:27:f2:f8:0a:bf:92:79:8f:67:fe:a8:4d:ec:9c:
9d:c4:41:84:fb:a0:ef:b5:4c:7a:35:a5:96:fa:bf:
ec:07:75:88:f5:20:1c:6e:4a:3b:d4:b3:3e:85:ab:
a9:82:6a:0a:30:55:7f:94:20:1f:cc:84:bb:a6:1e:
cb:1c:89:41:ce:6a:f1:c9:dd:dd:51:0b:60:35:92:
6b:ab:ee:e8:a5:31:e6:28:ed:4d:94:ba:f8:3f:be:
ba:78:46:37:0f:6e:23:d9:a0:5e:da:bd:44:5f:da:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:02:61:1F:15:81:F6:4D:67:0F:43:FE:B8:1B:9D:D5:28:10:8F:D4
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/tgJhHxWB9k1nD0P-uBud1SgQj9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.55.0/24
Signature Algorithm: sha256WithRSAEncryption
11:79:a1:2d:33:1b:06:cf:28:61:f9:b8:01:13:08:25:41:90:
aa:b2:53:5f:e8:4e:4d:74:7d:e1:e1:c2:fc:f7:51:4b:1e:4f:
ba:86:a2:16:35:90:d2:27:2e:df:cb:0b:60:4b:95:74:ab:ec:
0f:dd:ac:47:9b:c5:6a:60:41:bf:7c:6d:6f:1f:93:54:9e:40:
b3:c6:00:6a:22:7e:ff:28:b5:4b:e7:b1:4f:e0:4d:9a:17:5e:
02:7b:37:2d:c6:c6:39:f5:20:18:e7:20:fa:3a:78:a6:10:98:
86:71:f8:97:e4:71:81:93:57:8f:68:a0:a4:c9:b1:9e:1f:c9:
f0:19:4a:88:ad:ee:f1:7b:1c:67:1b:4d:0d:87:74:ae:b4:c9:
90:a7:9f:5d:30:3e:c7:ee:aa:e0:e0:2f:0b:71:54:03:72:5e:
e3:c2:81:36:9e:94:a2:1c:2d:ec:62:bb:ad:e3:7b:18:8e:26:
35:9a:a4:01:95:34:50:63:aa:c3:b8:ea:6b:1f:ec:69:93:7d:
b3:2c:d7:d2:df:71:90:34:b1:1a:b8:81:2b:26:51:98:80:ee:
66:ad:c8:30:70:74:d2:7e:0c:80:9e:c9:d9:99:35:53:7d:88:
36:cc:79:c8:7f:f8:6b:b8:69:9e:26:9a:2f:db:69:e3:9e:82:
45:a0:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net