Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/TOInyVBFZ29DxCH5Hz91KFjRkv0.roa
File: TOInyVBFZ29DxCH5Hz91KFjRkv0.roa (raw, json)
Hash identifier: 1HxYLosFyiepF2xCdMAL0QnFNZ36uK46iHqxZ8byih8=
Subject key identifier: 4C:E2:27:C9:50:45:67:6F:43:C4:21:F9:1F:3F:75:28:58:D1:92:FD
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019424B368CEA7777BBF359D873EA97C0837
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/TOInyVBFZ29DxCH5Hz91KFjRkv0.roa
Signing time: Thu 02 Jan 2025 01:48:45 +0000
ROA not before: Thu 02 Jan 2025 01:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210301
IP address blocks: 185.146.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:68:ce:a7:77:7b:bf:35:9d:87:3e:a9:7c:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jan 2 01:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce227c95045676f43c421f91f3f752858d192fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:59:13:c1:f9:33:10:b6:19:d0:49:13:2c:
02:0c:bf:ed:fe:ab:11:af:10:b0:d1:c8:a5:b3:f1:
b6:69:d5:e8:cd:de:bf:e1:db:32:5a:b7:ce:52:06:
3d:63:06:31:9c:c4:be:90:fb:0e:ba:8a:5d:82:ff:
78:c0:0b:d3:e3:cb:b5:c2:b6:ac:33:6a:d0:aa:f4:
73:65:c9:d0:50:44:77:b0:e6:ff:80:9f:33:37:18:
cd:e4:ca:85:b7:d0:f3:fa:01:60:82:bb:5e:3d:81:
fb:8b:ca:df:f5:d7:15:25:cd:08:63:e7:58:fb:26:
d1:42:6d:0c:f0:c7:02:df:bf:43:a7:2a:85:f7:00:
48:37:28:bf:c9:ab:23:f7:e2:c2:0b:28:0b:99:73:
4a:63:b6:61:da:d0:72:05:a5:bb:b8:99:15:61:f2:
b4:74:8f:a6:05:b0:34:a3:5d:0c:64:76:97:4d:e5:
51:9a:0a:2a:ba:07:10:34:6b:53:89:47:a5:ff:14:
7b:d2:45:2b:19:51:f9:c3:03:0d:60:5b:f2:1b:5b:
6c:61:44:32:86:78:fd:3c:d4:a6:07:bb:a4:74:ee:
44:8b:a4:9c:e7:fa:9d:51:8b:92:6b:62:02:05:5d:
2f:1b:5e:92:05:12:f2:46:7a:b5:d0:96:03:45:79:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:27:C9:50:45:67:6F:43:C4:21:F9:1F:3F:75:28:58:D1:92:FD
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/TOInyVBFZ29DxCH5Hz91KFjRkv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.227.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e8:b7:05:ad:bc:9b:71:eb:3e:21:41:ef:ef:58:cd:22:71:
0d:3b:6e:0f:69:f6:40:92:27:e0:d6:e0:f4:82:9b:31:89:f1:
53:4e:29:26:d4:88:9f:08:2a:f1:7d:70:54:db:53:92:30:3b:
6e:4c:3b:d7:80:e7:60:4b:02:94:75:41:fd:a8:3c:ec:83:a4:
6b:06:c6:21:10:09:18:0a:dc:5a:3a:a7:cb:27:c8:1e:5a:d5:
6c:91:cf:33:c9:7e:ee:df:08:57:05:db:9f:39:0a:30:4c:e4:
22:be:e2:dc:a8:5e:76:4f:1c:9a:b9:44:0c:41:78:49:4a:c2:
3e:02:b5:14:22:98:bd:f1:d6:a1:4a:20:37:cb:dc:d9:6f:32:
3f:ba:ee:85:58:f1:38:dc:5b:59:09:5c:2c:23:21:c3:34:27:
41:99:99:de:67:b4:57:c4:a5:bf:ba:88:ce:ee:16:5f:30:05:
10:f6:29:fa:af:84:cb:5d:00:4b:46:7b:4f:d0:77:d1:01:7a:
d8:a2:a0:2f:4b:7f:a0:df:e5:4a:94:61:e3:99:3a:9c:5f:2f:
0c:ec:ad:84:0f:ad:1a:e5:e1:e5:04:87:37:c0:90:4a:1d:3d:
da:25:aa:25:05:b3:25:e5:70:c3:25:4f:4a:f9:2a:38:21:29:
38:93:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net