Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/teBAk8KVmP8hT8nLOicgc8K-0Kw.roa
File: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (raw, json)
Hash identifier: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=
Subject key identifier: B5:E0:40:93:C2:95:98:FF:21:4F:C9:CB:3A:27:20:73:C2:BE:D0:AC
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019589F6D6056A890E6336068C148F7B0C8B
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/teBAk8KVmP8hT8nLOicgc8K-0Kw.roa
Signing time: Wed 12 Mar 2025 10:46:49 +0000
ROA not before: Wed 12 Mar 2025 10:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60611
IP address blocks: 185.15.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:f6:d6:05:6a:89:0e:63:36:06:8c:14:8f:7b:0c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Mar 12 10:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e04093c29598ff214fc9cb3a272073c2bed0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:a4:b4:7d:49:be:54:dd:2d:b5:46:e3:34:
94:ba:9d:6c:cd:75:76:a1:7f:5d:52:3f:48:da:07:
86:8d:07:01:c2:f3:33:43:16:f5:24:27:f7:da:20:
4d:77:60:28:a1:c4:05:61:cd:30:51:10:c3:71:42:
7c:cb:02:6a:0a:25:85:80:5a:6e:cf:c3:e6:d5:f2:
da:c5:91:30:61:41:b0:de:55:00:a0:8d:9a:02:6b:
7b:27:b9:ef:e8:de:d1:ba:12:c2:48:ab:13:c7:51:
cd:d2:fe:ce:8b:7d:2d:e6:22:b1:8b:98:3a:09:c8:
9e:c2:9d:b4:af:95:0b:e0:8b:c2:44:87:66:3e:87:
41:a6:f5:bd:8c:12:28:4e:52:ac:98:87:94:49:24:
b7:d8:9a:eb:4e:f7:90:a6:9e:33:04:72:79:5c:7e:
b3:09:4f:fb:a1:04:12:fa:6f:4b:02:da:5b:00:46:
a6:63:fd:a4:25:2e:99:98:bd:2e:fb:d1:3e:c5:2b:
25:ac:d2:66:6d:bb:f1:52:ab:8e:f0:e1:ad:e9:5b:
ab:50:77:82:a6:69:01:17:fb:cc:ee:c7:eb:5c:41:
e1:3d:d9:30:d6:dd:83:fe:bf:da:1a:18:7a:d3:cd:
66:80:2c:17:9b:ae:f3:6e:e1:33:53:77:c9:55:ee:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:40:93:C2:95:98:FF:21:4F:C9:CB:3A:27:20:73:C2:BE:D0:AC
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/teBAk8KVmP8hT8nLOicgc8K-0Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f6:72:6e:70:1a:12:21:fb:07:15:27:b4:8b:8e:06:ab:ad:
73:93:e1:5b:d5:3a:17:72:77:a8:fa:b0:16:d7:6d:9c:d3:7c:
ec:54:07:2b:5e:f1:ca:8c:0c:1b:99:07:71:4b:00:d6:10:64:
5a:2f:25:be:d4:ef:ab:14:57:56:f8:f5:9b:9f:d7:ab:d9:b8:
c1:ae:d1:f9:5b:0b:57:4a:71:73:00:58:b1:64:55:00:c7:f6:
f3:b8:61:d1:19:80:27:8a:c7:56:14:fc:de:bb:9a:b2:41:e2:
a6:66:c1:c7:9f:25:f5:6d:93:bf:85:33:cc:39:8a:60:4e:28:
50:9c:c5:e1:78:b8:5d:bf:4f:7d:62:82:ea:6d:7e:6d:13:95:
b9:2b:fe:b3:d6:20:fd:00:f5:7a:75:af:e9:f5:91:2c:2a:41:
9a:56:1b:9a:89:81:96:0b:58:c1:fb:95:24:d3:51:b3:db:50:
49:5a:9a:3f:62:4a:b5:e9:87:47:bf:05:f6:5a:f6:c5:5e:32:
cd:dc:3c:0f:93:6f:45:1b:af:4f:7a:e8:ac:7b:a8:73:18:9a:
38:82:03:5c:b6:ce:0b:ea:05:ee:64:a8:03:e2:64:d9:17:bf:
07:c8:7f:e9:80:aa:50:d8:fb:27:c7:37:2e:97:26:a3:4e:6c:
66:b2:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net