Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/tVUvr-ir835qPuLKFyOdFFNBgL0.roa
File: tVUvr-ir835qPuLKFyOdFFNBgL0.roa (raw, json)
Hash identifier: 34yMqH+CkcVuhbR3epYX5ZLAzD+wDx846iBlOveXl40=
Subject key identifier: B5:55:2F:AF:E8:AB:F3:7E:6A:3E:E2:CA:17:23:9D:14:53:41:80:BD
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0195F91619F7596DDFF3A5587DBBA0B8B3E8
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/tVUvr-ir835qPuLKFyOdFFNBgL0.roa
Signing time: Thu 03 Apr 2025 00:38:49 +0000
ROA not before: Thu 03 Apr 2025 00:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.247.59.0/24 maxlen: 24
89.42.215.0/24 maxlen: 24
188.241.192.0/24 maxlen: 24
195.128.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f9:16:19:f7:59:6d:df:f3:a5:58:7d:bb:a0:b8:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Apr 3 00:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5552fafe8abf37e6a3ee2ca17239d14534180bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:2d:77:1d:9a:3b:be:d3:73:d5:02:89:9a:
9f:b3:99:ec:da:eb:91:6c:ee:f0:4d:fb:36:8d:f2:
27:6c:16:6f:20:d9:5b:77:0b:b3:dc:b6:f5:5c:67:
8e:82:b9:50:a2:d1:f6:b9:2d:e4:1c:56:f8:0a:03:
33:72:aa:ba:f2:68:32:1f:42:0f:99:c5:8d:0c:3f:
b2:e8:e1:4d:c7:49:ec:2e:01:ce:cf:d6:db:1e:39:
69:09:a5:a8:52:e2:7b:b2:f9:2e:c1:de:e9:9e:53:
29:06:d0:a9:03:d4:87:92:6e:05:e4:bc:f5:85:bc:
d9:32:a6:32:3c:7a:10:f3:07:29:16:f5:30:f1:b6:
e1:64:05:aa:af:58:a5:be:04:1b:79:5f:fd:eb:ae:
b2:32:9c:86:13:be:7c:e3:7c:52:fb:34:ca:44:c5:
aa:9e:5b:92:0f:6a:80:05:f2:1d:f1:10:5a:7e:ba:
ea:a7:48:71:26:44:df:55:ea:cf:de:4d:c1:bc:b2:
37:51:20:ff:0d:02:46:cf:49:73:58:de:90:0e:ea:
d2:9d:7f:76:40:f4:fa:95:ef:33:cb:d3:e5:b6:b5:
38:74:64:9e:c9:08:3c:66:64:b1:1c:2f:4e:4d:e5:
22:ce:eb:be:13:4d:1e:42:50:8f:a5:e4:f9:3a:27:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:2F:AF:E8:AB:F3:7E:6A:3E:E2:CA:17:23:9D:14:53:41:80:BD
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/tVUvr-ir835qPuLKFyOdFFNBgL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
89.42.215.0/24
188.241.192.0/24
195.128.136.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cc:b0:a7:bd:ab:1b:4a:14:32:90:a2:bd:2b:6f:39:de:53:
b2:4d:35:4d:58:9d:34:79:a4:26:ba:76:8c:54:ca:7b:4b:5e:
90:0a:e8:c2:88:00:d8:f3:4f:3f:37:5b:e3:ec:9c:be:7d:11:
b7:6e:28:5d:2e:c0:43:22:89:e9:4b:9b:14:11:0f:6b:b6:78:
27:35:6a:24:b3:8d:7b:3f:d8:15:ba:b8:1b:82:04:92:bd:9d:
dc:c6:74:26:df:2d:04:13:9d:9f:32:07:00:63:0c:8c:87:02:
33:22:0a:33:b0:d3:38:be:4c:1c:5c:f7:3c:7a:a0:12:67:d0:
14:1d:8e:2a:8e:12:b8:a3:22:72:d7:c2:94:2c:8a:78:37:9e:
b3:c5:3d:0f:92:7f:9f:23:cb:43:24:f3:a8:ec:9b:9d:d1:7a:
fd:04:6b:3a:97:5b:04:6c:31:09:97:e2:ed:9f:cb:0d:5f:52:
c2:ed:80:55:1a:0f:aa:30:d8:fe:2f:3c:4b:8d:3c:78:fc:64:
f3:6d:b7:25:30:a4:98:e6:6b:de:8a:ad:7a:0e:04:f8:c8:ca:
54:f4:09:14:15:dc:67:aa:0c:5a:b6:f5:1c:59:ff:d5:b4:85:
26:c3:ac:f1:25:23:82:50:85:79:d1:b1:fb:44:a3:d5:8c:32:
a2:57:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:45 2025 by rpki-client on console.sobornost.net