Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mOheAjZvIR3dWuAdDZpcmihTHzQ.roa
File: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (raw, json)
Hash identifier: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=
Subject key identifier: 98:E8:5E:02:36:6F:21:1D:DD:5A:E0:1D:0D:9A:5C:9A:28:53:1F:34
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 01942747D00A539922C5FC53F6D853F927E8
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mOheAjZvIR3dWuAdDZpcmihTHzQ.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49907
IP address blocks: 185.75.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d0:0a:53:99:22:c5:fc:53:f6:d8:53:f9:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98e85e02366f211ddd5ae01d0d9a5c9a28531f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:ed:67:37:45:13:07:7d:c3:f8:ed:ff:b4:
d8:67:95:42:b7:9e:19:49:77:76:5a:c2:c4:5c:41:
ad:59:e3:f9:fc:51:56:90:c9:ca:65:11:63:d0:bf:
93:5b:2a:d7:23:10:ce:bf:05:53:aa:7e:9f:5b:2f:
e7:86:d2:9d:d0:e6:16:4e:ef:2b:b7:e8:97:fb:36:
2b:2f:7e:78:b8:8a:81:97:03:1e:cd:10:e4:46:f4:
92:b1:37:c0:e7:63:a7:1c:61:51:7f:a8:db:04:e1:
d6:ea:ac:51:e1:42:22:ec:20:3b:fd:c4:6d:30:22:
01:18:12:e3:9b:bc:fb:6e:22:af:f9:76:c7:28:ab:
78:dc:94:0a:ab:9b:57:df:75:be:ce:4d:ea:6b:44:
b8:c4:93:54:03:96:3b:48:27:b7:b2:8f:c7:d9:69:
d5:c2:0a:03:fb:e5:d7:69:58:1b:1d:f2:54:97:7e:
fa:92:95:60:9d:11:5d:1c:b9:dc:4e:a6:66:59:d5:
9d:81:e8:6e:b6:46:79:2a:7c:cf:b6:d4:80:22:80:
1b:54:4a:da:5d:29:77:9c:99:6d:c4:ec:a4:00:3a:
db:4a:9e:3d:4c:d4:5a:cf:99:dc:ea:17:fa:16:a9:
a8:02:f8:97:9c:ad:d6:a7:0d:4a:1b:50:91:76:85:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:5E:02:36:6F:21:1D:DD:5A:E0:1D:0D:9A:5C:9A:28:53:1F:34
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/mOheAjZvIR3dWuAdDZpcmihTHzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0e:2f:bd:45:13:ce:7e:57:ec:cb:f8:8a:72:ae:c6:cc:29:
27:04:79:5f:c7:24:e1:17:a3:ef:3d:87:1c:e8:22:7d:b8:0d:
ad:d5:4b:95:fc:d6:0e:f2:95:8c:bd:4c:f3:82:89:09:67:61:
e2:ea:90:5f:1c:cc:7c:35:2d:e6:f5:04:48:24:ce:10:06:7c:
ce:12:dd:a9:51:41:7a:b5:7e:88:95:8c:05:f0:df:73:1f:fb:
e2:17:35:8c:fd:cd:f3:65:e5:0b:fe:31:19:07:58:b4:18:5c:
83:32:46:5a:f5:27:a1:65:4f:f5:82:a2:e1:61:66:0c:bb:47:
2a:f6:06:1c:7e:24:c6:43:0d:16:4e:c4:f8:99:11:e5:76:96:
24:66:d1:9d:a3:3b:a1:c7:80:8b:e8:4b:96:73:26:37:31:e8:
a8:f2:13:5b:02:ab:27:7d:1d:a6:41:d3:04:24:97:86:43:5f:
bb:25:04:d5:97:dd:16:7c:e6:30:0b:25:b8:60:7e:a9:a1:e8:
31:ea:b2:01:f8:f9:38:57:60:db:63:25:bb:99:ce:ab:95:0f:
93:21:4d:b5:55:b6:e1:c6:7e:6a:03:d5:77:16:8a:f8:5e:50:
0f:48:fb:41:c6:53:4a:2a:03:d9:d9:f8:5d:e5:9c:de:29:b0:
86:a1:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net