Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1oJSVTliGzz6VABhfUjdjwvu-jI.roa
File: 1oJSVTliGzz6VABhfUjdjwvu-jI.roa (raw, json)
Hash identifier: spEX67XNXLY2i6HnJ7/ZTbYUjQloiK8Wk9sivh5JT8I=
Subject key identifier: D6:82:52:55:39:62:1B:3C:FA:54:00:61:7D:48:DD:8F:0B:EE:FA:32
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01961A4D41987AE36586FF42868E2304E36F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1oJSVTliGzz6VABhfUjdjwvu-jI.roa
Signing time: Wed 09 Apr 2025 11:26:32 +0000
ROA not before: Wed 09 Apr 2025 11:26:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 185.227.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:4d:41:98:7a:e3:65:86:ff:42:86:8e:23:04:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 9 11:26:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d682525539621b3cfa5400617d48dd8f0beefa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:5e:8c:7b:17:3b:2f:b8:e5:51:05:55:3a:
fc:1b:d5:3a:58:26:eb:4a:0b:f7:b1:0b:db:5e:7e:
62:a8:97:01:dd:e9:92:29:cd:89:88:b1:16:c7:71:
4f:9f:7a:81:83:25:9b:69:2e:73:e6:71:6a:70:10:
cf:b7:1a:21:bc:24:85:94:23:dc:02:ff:ce:c4:6e:
20:6d:31:08:10:a9:27:25:3e:22:13:47:91:37:81:
1c:52:e8:61:49:7f:c8:b1:26:31:cc:b0:d5:21:f1:
3a:8e:f3:f1:26:ed:86:87:96:ee:a3:02:ba:f7:9e:
5b:74:3c:70:f8:77:e5:63:7a:f9:03:48:13:34:15:
78:c7:06:a0:fc:f5:fd:ac:9a:ba:9a:87:a1:eb:75:
b4:9e:41:ff:1f:c0:a0:e9:1e:b8:c8:24:bd:e8:98:
a4:61:a9:c0:df:92:5d:4f:ce:2f:39:a4:4f:6d:d4:
58:ee:92:4a:ff:c8:5e:30:7f:8c:40:22:44:97:28:
61:30:85:25:77:85:b9:e8:95:a0:00:31:69:66:d8:
41:75:6e:79:9a:8e:8c:cb:ad:e7:8b:55:47:11:fd:
e7:7a:bf:c3:56:34:62:1e:bb:e3:1a:89:09:57:66:
2f:77:8e:15:67:95:f8:20:d5:94:01:84:07:3d:3d:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:82:52:55:39:62:1B:3C:FA:54:00:61:7D:48:DD:8F:0B:EE:FA:32
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1oJSVTliGzz6VABhfUjdjwvu-jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.144.0/24
Signature Algorithm: sha256WithRSAEncryption
04:56:9c:08:46:04:66:ee:ac:85:c9:12:f8:e6:94:45:67:92:
ae:1e:d1:d1:2f:24:a5:52:f6:5f:db:1a:c9:b5:60:72:2a:81:
3f:38:64:fa:6f:3f:77:5b:ef:16:c2:c9:4e:6a:ed:d1:ec:82:
b9:7d:e5:9a:ab:a5:97:d4:b4:63:05:a2:8a:a0:2a:1d:4c:bb:
8d:a3:ea:2a:e2:7a:8c:b4:22:d3:a9:eb:02:d6:48:38:cf:3e:
c4:99:0d:81:da:5d:44:45:61:f3:2a:5d:a4:a5:e5:92:d0:fd:
e2:dd:e1:9a:04:0b:2d:47:89:b1:f3:0f:a8:1a:6f:f9:93:38:
08:9d:2f:b6:80:1b:a2:ad:f3:fb:56:c4:cd:02:5f:7b:af:8b:
f0:9f:76:c7:95:54:3f:2a:92:d2:4b:6e:bd:9e:0a:7f:cc:68:
8c:2c:8c:99:a0:ae:1e:41:14:75:f6:df:86:83:3b:df:a5:f4:
d7:a8:d9:bf:06:c3:1c:20:b9:b3:c2:47:e2:be:26:bf:b1:f9:
2e:f4:06:8c:96:2c:a8:55:76:32:f1:33:37:4a:5b:8b:76:a4:
73:c9:fd:fb:8b:18:d6:e5:c8:d7:21:f3:64:61:4c:86:c1:bf:
de:bd:8b:12:71:ef:73:bc:f6:c4:7d:63:aa:1c:9b:2d:c3:0e:
86:6b:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net