Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TCIisEpaJGPSfIZ5wAWiLDIFF_w.roa
File: TCIisEpaJGPSfIZ5wAWiLDIFF_w.roa (raw, json)
Hash identifier: RRw6UI7xGdVUOwZOFY+13nDg/SPdUIg5nJOQGNtGOFM=
Subject key identifier: 4C:22:22:B0:4A:5A:24:63:D2:7C:86:79:C0:05:A2:2C:32:05:17:FC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CA4F85001F4B9385C8F8F28771313
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TCIisEpaJGPSfIZ5wAWiLDIFF_w.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 5.182.72.0/22 maxlen: 24
45.136.32.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
45.149.117.0/24 maxlen: 24
45.149.118.0/24 maxlen: 24
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
92.114.83.0/24 maxlen: 24
141.98.36.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.44.28.0/22 maxlen: 24
185.94.248.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
185.128.192.0/22 maxlen: 24
185.150.80.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.198.108.0/22 maxlen: 24
185.230.0.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
193.39.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a4:f8:50:01:f4:b9:38:5c:8f:8f:28:77:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c2222b04a5a2463d27c8679c005a22c320517fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:f4:21:b0:7d:9f:f6:9b:91:cb:b5:da:fe:
38:96:eb:10:0d:43:9b:de:4a:52:bd:6b:50:bc:69:
52:a7:59:ac:20:7c:b8:60:af:1c:9c:d1:c2:a4:69:
12:92:90:dc:04:d5:c8:d7:64:7a:56:91:87:cf:69:
b5:06:1c:96:d2:8b:94:0d:32:e7:41:36:a2:9e:ea:
a6:82:e4:1c:bc:25:65:23:42:bd:ac:36:a3:95:ab:
47:81:b5:c4:88:61:81:cf:ec:80:c6:e7:a8:5c:7c:
95:75:40:90:b2:e5:30:6d:70:5a:89:33:a3:4c:18:
e6:c1:bc:d6:a2:df:25:02:0c:30:3a:55:af:f8:0f:
82:a2:c7:da:88:66:cc:c8:94:a5:5e:a7:a2:7f:b1:
41:c6:21:52:4c:21:86:b7:a3:05:2a:f3:99:ef:59:
15:de:40:c7:b3:32:b2:d4:22:a7:63:0a:be:31:fe:
d8:cc:bf:a3:86:5a:3d:90:00:8d:79:6c:2e:bf:63:
49:56:e1:e0:eb:17:f4:14:88:a5:0e:70:84:91:97:
20:6e:a8:57:88:0c:43:14:48:d8:46:e0:45:b5:c4:
50:38:ed:6d:f7:3d:cf:ff:24:1c:3b:61:34:de:a9:
f4:4a:7d:82:4e:4b:d1:3d:b0:e4:05:01:f3:44:0a:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:22:B0:4A:5A:24:63:D2:7C:86:79:C0:05:A2:2C:32:05:17:FC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/TCIisEpaJGPSfIZ5wAWiLDIFF_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.136.32.0/22
45.146.224.0/22
45.149.117.0-45.149.118.255
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
141.98.36.0/22
141.98.52.0/22
185.44.28.0/22
185.94.248.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.128.192.0/22
185.150.80.0/22
185.151.176.0/22
185.198.108.0/22
185.230.0.0/22
185.248.208.0/22
193.39.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e3:eb:2b:af:6c:98:c8:f1:67:b9:0a:95:d8:a8:03:f7:49:
ec:dd:17:29:9e:b1:38:20:56:61:40:a1:91:b3:68:e9:ca:64:
9e:0d:97:f7:57:5f:bc:7e:09:02:5a:8e:18:07:5e:a9:7c:24:
94:3d:68:ec:dc:b4:e6:16:e3:8b:5d:a4:ed:8a:2b:1a:3b:b3:
fb:e0:69:74:4d:0d:b1:5a:69:e1:fc:00:1e:f5:da:c3:24:f2:
75:b3:5e:2e:17:ab:9e:26:bd:8b:df:68:ab:44:36:fb:4b:b5:
9a:45:59:c4:fb:17:7a:6a:10:58:14:14:6f:c8:66:67:92:1d:
1e:1d:bc:c3:74:02:e6:94:bb:2d:7b:ff:8a:ff:8a:81:86:f5:
3a:e1:8b:bc:ed:b9:7f:c1:5c:4e:12:ba:b6:39:2a:41:b1:6d:
e3:e7:21:39:31:2c:16:67:09:f3:0f:03:45:89:42:cb:55:36:
f9:f4:c2:dc:b2:07:ef:26:47:91:44:03:08:6b:73:5d:42:4f:
10:8b:96:1c:6f:4a:9b:32:e6:ab:12:7b:b0:e6:20:70:21:73:
d9:ae:7a:63:ab:4f:23:ec:44:49:38:d6:97:b3:8f:19:73:fa:
61:9c:18:ef:61:e6:d4:94:e5:8e:f6:5b:93:fc:04:4b:9b:69:
ea:c5:fb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:59 2025 by rpki-client on console.sobornost.net