Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/oXaw6fDaPf-aCFWq6--7fP8PfNo.roa
File: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (raw, json)
Hash identifier: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=
Subject key identifier: A1:76:B0:E9:F0:DA:3D:FF:9A:08:55:AA:EB:EF:BB:7C:FF:0F:7C:DA
Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial: 019423D7439B25D144A73BA6615ECCD2ECF4
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/oXaw6fDaPf-aCFWq6--7fP8PfNo.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56687
IP address blocks: 185.154.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:43:9b:25:d1:44:a7:3b:a6:61:5e:cc:d2:ec:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a176b0e9f0da3dff9a0855aaebefbb7cff0f7cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:d9:a6:68:bd:cb:81:78:8c:f2:05:a2:b7:
4b:99:16:53:fb:13:05:46:fa:b5:d8:a1:bc:59:6f:
c0:29:58:c2:22:fc:4e:c7:91:56:0f:e4:01:08:db:
51:7a:ae:83:9c:97:cf:92:10:3e:07:32:91:70:51:
ec:4f:eb:3e:3a:2e:b2:32:53:80:5c:4d:e3:c1:f1:
fe:7b:9e:c0:38:43:b3:f1:26:87:ab:95:72:2c:ca:
33:49:ec:60:ff:88:45:f3:23:e3:49:b5:b8:3f:70:
34:b2:2b:19:cf:d6:b3:f0:08:f4:54:23:3a:8f:50:
99:d9:95:5f:fa:5a:b3:87:38:03:3e:2d:b2:a3:ba:
36:15:75:dd:6b:24:82:64:f3:f4:81:c4:58:29:18:
6e:24:53:6e:ba:69:df:f8:e3:2a:f4:f8:24:7a:af:
48:2c:ed:ee:23:65:35:46:15:9c:b1:6d:aa:11:90:
01:10:44:be:18:80:63:e6:5f:f7:03:c6:8e:42:7d:
5f:7e:cc:60:91:8b:62:eb:8f:ee:54:d7:55:0a:df:
1e:c4:8b:bc:c6:95:55:0a:b4:96:98:a6:1f:52:ec:
c1:51:3e:9a:25:1b:4e:93:36:51:76:4f:c6:ec:a6:
12:c9:d5:c5:6e:b4:44:a9:ba:ec:bd:50:73:86:10:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:B0:E9:F0:DA:3D:FF:9A:08:55:AA:EB:EF:BB:7C:FF:0F:7C:DA
X509v3 Authority Key Identifier:
keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/oXaw6fDaPf-aCFWq6--7fP8PfNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cb:f4:ed:49:32:7b:7a:bf:56:d4:f9:89:eb:c6:bd:2f:42:
ae:1f:92:56:77:9c:47:a4:c7:77:8e:e6:60:fc:5a:24:59:5b:
0a:2f:39:5c:42:32:c5:ba:d0:56:e0:bd:32:a2:10:cf:bc:63:
80:9d:08:7d:d7:86:96:84:61:ef:f9:c6:0e:86:8f:5b:5e:8c:
ce:28:05:ac:c0:07:fa:45:72:66:38:c1:8f:b0:5c:c6:ed:17:
68:0a:ed:40:ce:39:e6:76:75:9e:7e:41:06:a7:5c:db:6f:f7:
6e:21:18:ec:ce:b4:3a:24:2c:fa:42:f5:39:c8:a2:9d:ad:ed:
41:6c:b8:bf:5a:85:f3:00:57:0d:56:db:4c:3f:20:a3:ab:5e:
94:81:bc:18:1f:ac:0a:8f:e3:90:cd:0e:62:6b:e0:8f:01:54:
0c:b8:44:b6:65:e2:37:70:c2:72:79:68:72:e7:3a:09:83:42:
08:88:56:e9:50:fc:dc:86:c3:58:f1:7f:8a:53:9c:3f:b0:f6:
3c:08:bd:76:6b:b4:5d:78:cd:7f:3b:c1:5c:7e:f3:da:18:e3:
e5:bb:36:6b:cf:cf:7d:d4:8a:ac:16:0f:d9:00:dd:af:fc:04:
2c:9b:2a:2e:67:be:ab:44:27:09:f1:0b:6d:3c:f3:39:aa:3a:
53:d4:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net