Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa
File: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (raw, json)
Hash identifier: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=
Subject key identifier: 4D:D2:C7:2A:56:73:8E:B1:29:0E:85:7E:B2:C1:A8:F9:9A:15:15:D4
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521E9BF7A0590A5B1875BE4CB3BD6EC
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1257
IP address blocks: 185.56.212.0/22 maxlen: 24
185.57.168.0/22 maxlen: 24
188.65.152.0/21 maxlen: 24
193.41.118.0/23 maxlen: 24
193.138.74.0/24 maxlen: 24
193.254.192.0/23 maxlen: 24
195.78.36.0/24 maxlen: 24
2a01:4400::/32 maxlen: 48
2a02:5120::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e9:bf:7a:05:90:a5:b1:87:5b:e4:cb:3b:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd2c72a56738eb1290e857eb2c1a8f99a1515d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:2d:a7:e6:3b:fe:07:5b:97:1e:6f:69:b9:
ab:d5:7b:5e:1b:32:15:32:82:7c:49:0c:62:56:1a:
3c:2e:c4:ed:3b:75:7c:1c:62:f0:16:b0:e8:f8:a3:
0a:b4:ba:d5:ec:7c:a8:8b:7e:bb:24:f7:c6:db:b8:
7a:a3:92:be:07:4e:d1:fd:2c:09:0a:28:dc:56:48:
17:c0:9a:4f:43:52:6f:3c:25:f2:ef:83:1f:33:f5:
ec:cb:bb:ca:8e:72:50:dd:84:3a:8b:78:52:3b:a4:
17:4b:0c:f2:80:c6:12:20:58:83:3e:b8:08:a0:e8:
78:8b:b2:28:c2:52:8e:88:00:48:50:a1:74:e7:31:
95:3b:2a:f4:dc:37:fb:c9:c1:be:8d:ff:53:ad:02:
fb:63:d6:a0:84:6b:87:e1:56:b6:e1:f0:64:ba:24:
c0:b0:ed:b2:64:02:43:02:5c:6f:fa:54:0a:b4:ac:
c6:f6:b8:d4:5b:75:97:f0:ff:ef:8e:c0:14:6e:5a:
55:0e:5b:a6:17:ba:04:4d:48:6d:fd:ed:06:53:de:
bb:82:fc:17:83:08:91:bc:7a:5e:87:d8:bd:b1:8f:
0c:e8:1c:72:6d:5c:1d:6b:ad:e9:dc:bf:df:8a:3f:
b6:d2:e6:3d:f0:5e:d3:b5:f7:fc:e9:7f:c9:55:5f:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:C7:2A:56:73:8E:B1:29:0E:85:7E:B2:C1:A8:F9:9A:15:15:D4
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.212.0/22
185.57.168.0/22
188.65.152.0/21
193.41.118.0/23
193.138.74.0/24
193.254.192.0/23
195.78.36.0/24
IPv6:
2a01:4400::/32
2a02:5120::/32
Signature Algorithm: sha256WithRSAEncryption
85:47:b6:df:e1:45:2b:25:83:ed:fc:aa:e7:3b:13:f4:9d:aa:
59:30:be:8a:46:1c:47:0f:1d:4c:43:84:6e:e3:d4:9c:23:92:
69:38:02:e7:3a:bb:34:51:ba:15:0f:3c:18:f3:e1:69:74:e2:
7f:7b:9f:c7:97:13:7a:41:28:63:ea:64:b6:91:33:37:6e:f1:
ae:fd:60:8d:c6:7a:0e:3c:ce:00:94:e1:f6:d8:00:9b:ec:55:
50:ec:32:aa:32:67:ca:34:5a:88:31:6c:7b:d1:8e:03:db:6b:
22:84:28:17:72:9e:be:83:53:b7:b2:cf:93:c9:e8:e2:a7:0e:
94:18:aa:2f:54:4e:76:18:6c:1a:b3:f0:69:fa:b2:20:0d:63:
32:26:7e:4e:99:41:04:21:ba:5b:35:ff:d0:3a:dc:e9:95:91:
61:d7:aa:5d:79:cb:5a:86:43:d7:e9:c7:ff:5f:5a:a9:aa:93:
af:3a:1a:7b:19:57:a6:10:d7:31:11:0a:10:e8:65:d7:3d:2e:
a0:af:64:10:0a:4d:5a:7d:9d:e4:d2:c7:ca:71:b3:38:7e:03:
84:66:e1:18:46:2f:8b:4b:cf:a3:ea:ac:17:7a:ff:12:08:b6:
76:ca:cb:1b:98:9c:0a:f9:c3:4c:0e:56:01:d9:2f:f9:13:1d:
e7:2a:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net