Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/D0b1nmB_L5VEWf6cceZCeBQxCQo.roa
File: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (raw, json)
Hash identifier: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=
Subject key identifier: 0F:46:F5:9E:60:7F:2F:95:44:59:FE:9C:71:E6:42:78:14:31:09:0A
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019426D9597A6F409ED7627AABF280FBAFBD
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/D0b1nmB_L5VEWf6cceZCeBQxCQo.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 90.155.112.0/24 maxlen: 24
90.155.113.0/24 maxlen: 24
90.155.114.0/24 maxlen: 24
90.155.115.0/24 maxlen: 24
90.155.116.0/24 maxlen: 24
90.155.117.0/24 maxlen: 24
90.155.118.0/24 maxlen: 24
90.155.119.0/24 maxlen: 24
90.155.120.0/24 maxlen: 24
90.155.121.0/24 maxlen: 24
90.155.122.0/24 maxlen: 24
90.155.123.0/24 maxlen: 24
90.155.124.0/24 maxlen: 24
90.155.125.0/24 maxlen: 24
90.155.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:7a:6f:40:9e:d7:62:7a:ab:f2:80:fb:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f46f59e607f2f954459fe9c71e642781431090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6b:a6:5c:3e:69:8b:69:2e:c3:08:a7:60:77:
3b:cc:f9:49:2c:ae:ff:8a:64:1b:3c:6b:e9:c6:71:
b4:fe:a9:5b:b3:bc:9c:4a:89:29:ea:46:7d:46:0e:
a6:db:0e:8b:48:26:c6:c4:96:0e:85:ed:be:8c:6e:
d6:57:85:2d:7d:05:23:78:98:7e:9f:4e:20:75:39:
71:7f:03:e0:83:db:32:b0:1e:65:c0:bd:1b:ed:7e:
30:77:9f:a3:06:b9:4e:6f:7d:f7:e6:fb:2b:5c:78:
73:7b:eb:bb:62:92:12:47:6c:be:fb:5f:af:7f:d8:
45:a4:d1:b3:bc:41:71:96:06:55:42:c7:8e:4d:0a:
63:07:9e:28:d4:58:dd:dc:09:2b:62:13:f4:05:f4:
92:3d:7e:c8:f3:b2:3f:57:26:79:25:e7:2a:0a:72:
a9:ff:5e:16:c1:54:a5:15:39:95:db:51:34:32:21:
58:86:86:6c:43:fb:b5:9b:26:d2:a2:ce:47:75:66:
3f:70:ef:11:d5:12:ee:b7:9f:b4:09:98:31:f5:be:
fc:e1:de:0f:39:49:2e:c3:c7:34:f9:88:17:11:c0:
75:1f:0d:b4:47:13:fd:53:46:ee:51:ae:8f:32:a2:
ae:56:79:64:0c:2c:a0:0a:62:57:f3:57:48:fd:04:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:F5:9E:60:7F:2F:95:44:59:FE:9C:71:E6:42:78:14:31:09:0A
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/D0b1nmB_L5VEWf6cceZCeBQxCQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.155.112.0-90.155.126.255
Signature Algorithm: sha256WithRSAEncryption
63:65:5a:62:94:94:7c:1f:73:c8:97:42:04:b9:19:8a:5d:9e:
9b:61:f0:68:f6:c8:2b:90:06:1f:9d:cc:7e:15:f1:c3:f4:b3:
74:a4:0e:f1:de:d5:da:53:26:0b:92:5a:1d:e2:b9:7e:68:83:
75:cb:5c:2d:81:2d:f3:3f:51:a2:30:16:79:cf:52:c1:b1:38:
ff:f0:61:df:d5:c2:a2:1f:ca:54:ca:0c:53:4f:f2:dc:00:de:
77:a5:55:ef:f2:ca:0b:55:f3:5c:18:e3:16:8b:65:4f:c6:f1:
67:3b:8a:88:09:78:55:bb:d9:33:a8:22:b4:31:f0:5d:96:c1:
e1:c3:4b:af:0b:88:f0:59:37:ea:1a:4a:a8:dd:b5:fb:96:93:
48:16:16:25:e5:3a:67:0f:4b:d7:0e:92:99:fa:89:29:69:b9:
4f:af:2e:0f:19:31:95:33:4e:06:bd:26:70:33:f1:81:06:f9:
7c:01:e9:4f:20:c0:97:68:c9:2f:f1:26:03:4a:42:91:07:67:
cf:0a:a7:de:a7:93:ce:35:c7:f8:47:17:0a:e5:0d:57:a0:2f:
a3:41:cf:45:3d:f9:6a:7a:51:6f:bb:5e:8f:34:2a:e8:90:9f:
63:ed:bd:78:44:09:ea:6e:aa:65:94:15:9d:5c:88:24:95:c8:
1d:3d:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net