Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/TtL1ROIX4qoe3FCQrbezbJvdiQE.roa
File: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (raw, json)
Hash identifier: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=
Subject key identifier: 4E:D2:F5:44:E2:17:E2:AA:1E:DC:50:90:AD:B7:B3:6C:9B:DD:89:01
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 0194258EAC8A86274295E3CA1D36824815A3
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/TtL1ROIX4qoe3FCQrbezbJvdiQE.roa
Signing time: Thu 02 Jan 2025 05:48:14 +0000
ROA not before: Thu 02 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203441
IP address blocks: 185.132.224.0/22 maxlen: 22
193.105.103.0/24 maxlen: 24
2a03:a660::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ac:8a:86:27:42:95:e3:ca:1d:36:82:48:15:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jan 2 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ed2f544e217e2aa1edc5090adb7b36c9bdd8901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:d5:d9:14:5b:14:15:ef:b5:94:09:f7:d3:
83:fc:e5:35:c3:34:de:86:a1:1b:58:57:38:1a:c0:
ae:74:aa:81:b3:9d:5d:ca:ae:b3:fc:d7:38:6d:3f:
33:40:31:d3:c4:c9:07:3d:23:f7:0c:9e:94:6c:f3:
c3:fc:41:25:9a:26:a9:33:73:c2:2d:6e:ea:8d:64:
eb:dc:50:07:b7:67:4a:9f:c3:6c:af:e7:e1:06:28:
b3:66:22:45:00:f9:2b:2c:a5:9c:1e:d7:a5:85:63:
0d:c3:41:16:27:11:d9:3c:f2:84:36:98:b6:ca:b4:
35:cd:ba:4e:95:23:fd:0e:99:59:cf:e1:b5:e8:89:
fe:d7:65:b3:21:bb:46:f2:aa:e8:5d:35:03:41:2a:
78:23:e1:ad:ad:31:1b:33:fc:9a:45:f7:39:ad:39:
fe:d5:78:54:63:92:ca:a0:26:30:ff:24:0e:f9:1b:
0a:41:a5:0f:ba:6d:ba:28:69:47:53:e9:a6:dc:41:
f1:85:6f:94:55:8c:1e:8b:79:89:0e:82:32:54:29:
8a:1e:22:0d:c3:c8:c0:6b:1c:1e:d4:54:d8:c2:a0:
17:82:9d:29:60:6a:4f:4b:75:8a:70:9d:a7:ce:4f:
8a:05:a0:e4:ec:a8:ed:e7:6f:a0:5d:7f:ff:eb:65:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D2:F5:44:E2:17:E2:AA:1E:DC:50:90:AD:B7:B3:6C:9B:DD:89:01
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/TtL1ROIX4qoe3FCQrbezbJvdiQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.224.0/22
193.105.103.0/24
IPv6:
2a03:a660::/32
Signature Algorithm: sha256WithRSAEncryption
ad:bf:9b:db:e8:9b:4b:a7:c4:1e:21:68:45:a6:96:d1:4f:d8:
82:6d:54:1b:51:9c:d2:57:74:51:e5:65:e7:10:8a:ed:90:22:
a9:11:a0:8d:55:dd:d2:d7:14:3f:f2:c7:6b:79:19:f3:2a:8d:
42:ed:10:aa:70:e0:86:11:95:07:ad:66:e6:3c:8e:a0:f5:4e:
b8:75:48:d2:58:ee:64:c7:61:c6:eb:15:0a:d2:3b:52:eb:f6:
cb:2c:80:68:3e:6c:53:7d:f3:0f:9b:90:8d:b9:b4:27:34:2d:
a5:4b:8e:c7:2d:33:d1:9f:62:4d:1b:cd:61:f3:a1:2f:38:b9:
84:c5:21:40:11:03:58:5d:76:fa:64:f6:e8:2e:13:59:62:f3:
81:ed:e3:e7:68:13:f6:52:48:32:0e:41:b7:f0:d4:7f:46:25:
22:15:ad:90:43:6b:71:3f:7f:81:9b:c1:ea:5d:3f:53:18:eb:
f3:11:9f:0d:3c:47:e4:8a:3c:52:70:e0:5e:8d:02:b7:eb:8f:
13:d3:ed:5b:3e:e3:ff:9a:40:76:b9:29:7c:4f:2c:bc:72:11:
5d:4a:92:23:19:7d:82:ca:14:5c:83:5e:76:9a:37:03:c3:98:
58:be:ac:83:bb:2f:ff:03:47:38:c0:81:e2:18:62:4b:e2:97:
b0:0c:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net