Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa
File: 0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa (raw, json)
Hash identifier: cbQqhS8rCleS/cZGOp49BraWBlvDlSz9avYU2nr/DSU=
Subject key identifier: D2:D4:41:F4:E0:82:F7:16:AC:ED:EE:8C:54:7F:05:26:7D:09:6B:77
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 01942067DAA071E7C02DCC36EA062B1077BC
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208728
IP address blocks: 89.255.207.0/24 maxlen: 24
185.223.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:da:a0:71:e7:c0:2d:cc:36:ea:06:2b:10:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d441f4e082f716acedee8c547f05267d096b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:af:60:aa:40:a1:63:64:17:35:fc:d9:5f:
bb:5e:01:2c:ad:c2:84:d8:fa:21:2f:20:5f:68:18:
db:ee:01:1f:3b:12:85:f1:e7:40:8d:1b:3a:34:3e:
69:22:9e:89:3e:55:a2:10:55:4b:70:9a:ff:d8:2f:
78:99:8e:44:73:9a:7d:20:9e:6c:4b:59:93:ef:33:
4c:d2:e6:b8:a8:4f:2b:cc:0b:87:e7:14:ba:15:b2:
2f:85:fa:35:3f:65:ff:da:cc:f3:0a:b8:35:2f:17:
af:d4:86:a8:aa:e1:40:7b:4a:28:bc:ec:b6:60:99:
bb:dc:99:ef:56:ec:69:7b:1d:90:de:69:df:f4:d9:
26:28:c4:f9:9e:4e:75:8f:ce:2c:e2:bb:b8:6f:97:
46:c3:b7:ba:67:07:23:41:57:8d:09:1e:6b:15:ee:
79:2b:c1:ba:9c:bc:21:d7:23:e4:d7:12:2c:c5:a2:
c3:6e:5f:f9:70:c1:af:17:1a:8d:84:23:bd:9d:13:
5f:cb:fd:7d:72:1d:f4:1d:b9:72:b2:9a:31:75:da:
0e:ba:d7:6e:b2:08:36:33:39:18:6f:d9:ce:a1:34:
c2:a5:35:6b:9f:f9:81:58:03:bb:46:1f:b1:d3:58:
05:68:c2:a7:08:7a:28:33:6f:f4:e4:35:ab:bc:49:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:41:F4:E0:82:F7:16:AC:ED:EE:8C:54:7F:05:26:7D:09:6B:77
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/0tRB9OCC9xas7e6MVH8FJn0Ja3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.255.207.0/24
185.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4e:00:f0:58:a9:d5:b9:ac:0f:af:9a:b9:0d:0a:3b:57:74:
8e:ad:57:4c:3b:0d:22:0b:96:fd:8b:f5:19:38:73:95:fd:78:
1c:2b:f0:da:e1:c7:94:37:19:19:42:39:81:6d:8f:b2:78:fe:
fc:eb:be:5c:31:a5:37:68:ff:c4:e6:5c:0d:d1:9a:2b:cc:bb:
4e:88:5a:a9:3b:68:16:8a:05:d0:3d:1c:33:92:ed:d0:fc:a4:
79:cc:7e:5b:56:2f:a9:39:96:ea:21:e6:f3:7d:78:fc:ae:60:
13:7d:f8:43:6f:ee:32:63:42:fa:b7:2e:ea:12:04:01:91:90:
d2:ff:3d:6b:8d:28:c4:59:0d:f9:51:d5:2a:06:3c:93:91:22:
f4:04:84:f6:dc:50:9b:43:c8:f5:3c:c8:bc:35:b3:f2:00:3c:
56:1b:65:09:cc:5f:3c:9d:82:3d:2b:14:7c:2a:50:1b:ae:07:
62:31:d1:0f:ea:0c:99:58:d2:f8:02:4d:cf:96:8d:8e:73:5c:
0e:b2:76:8d:5a:1f:9f:a1:17:dc:5c:6a:51:ab:69:fc:21:76:
19:25:f8:b1:3d:e7:4d:62:6e:d3:73:6e:89:d4:d8:9e:35:d0:
a5:7e:56:31:6d:aa:4b:37:9b:fe:e2:dc:f7:ba:9d:f5:99:e3:
10:63:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net