Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa
File: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (raw, json)
Hash identifier: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=
Subject key identifier: A0:05:51:00:A0:15:5F:D6:5D:4F:3C:74:69:CC:79:3F:23:32:4F:EA
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 01958501DD34B3C69EB558C7D0AA9E386DA2
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa
Signing time: Tue 11 Mar 2025 11:40:46 +0000
ROA not before: Tue 11 Mar 2025 11:40:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57507
IP address blocks: 158.255.192.0/20 maxlen: 24
185.152.40.0/22 maxlen: 24
185.152.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:01:dd:34:b3:c6:9e:b5:58:c7:d0:aa:9e:38:6d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Mar 11 11:40:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0055100a0155fd65d4f3c7469cc793f23324fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:19:a8:d7:80:57:97:61:99:67:bc:3c:1b:
a6:86:b9:a2:e1:f5:91:1a:3a:55:6f:89:07:06:1d:
7d:dc:f8:6e:34:67:4a:8c:92:7a:09:49:ec:ac:54:
e4:c4:6d:1a:a3:c3:63:55:ee:40:ae:cc:b5:43:45:
b9:c0:8d:3a:81:b4:5a:4d:fc:b2:b5:69:e3:5c:80:
4a:90:fd:8a:35:31:e6:07:c2:8a:17:46:22:09:4e:
65:76:44:16:18:23:11:df:31:5e:6a:b8:6f:67:41:
ef:ba:c8:0b:c2:48:9a:e1:d4:3a:7d:13:d0:a9:04:
65:91:c3:bd:e4:b9:4a:88:5f:15:c8:39:93:ef:64:
22:bb:17:f4:62:a0:49:f7:18:b0:1a:27:d7:48:95:
04:61:24:79:f4:67:65:9e:52:39:97:36:2d:77:41:
25:14:c8:de:73:db:ab:88:c9:ae:30:ae:43:be:9f:
96:02:ad:3f:7f:d4:02:58:99:43:7b:12:26:13:6e:
3c:e4:fe:d6:07:e9:d5:ee:9c:98:24:86:45:fe:33:
c5:15:a7:f6:d3:23:d6:e5:4b:db:40:d8:ff:7d:b9:
20:b3:2f:99:f0:14:d3:4a:a9:53:a0:9c:08:37:58:
70:02:e9:7e:e7:8b:7d:26:27:5a:c9:28:e5:09:71:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:51:00:A0:15:5F:D6:5D:4F:3C:74:69:CC:79:3F:23:32:4F:EA
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.192.0/20
185.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:4a:66:71:27:2f:f5:9b:4a:39:ce:43:01:a6:f8:25:0e:55:
81:6d:da:a4:89:00:66:a9:42:de:d4:03:fb:3c:be:15:6b:c2:
3a:0e:14:3f:1e:d9:05:f1:c8:00:fe:01:54:98:8d:96:6e:22:
dd:a2:02:8e:96:7f:d2:5d:a0:bb:96:c1:a9:4f:05:74:21:a6:
18:b4:77:2b:8d:6f:c9:90:b1:a3:ce:7f:cf:88:72:43:64:a7:
c5:87:3b:fc:86:53:0f:c8:a1:c4:e8:79:6c:d7:c3:b3:4f:1e:
93:94:46:40:43:46:12:bf:1d:2a:c0:ac:c3:62:98:6c:5d:c7:
c2:c5:5a:2f:58:39:c8:c7:45:0b:c0:10:48:c5:6d:da:11:0b:
3b:17:b8:67:1a:1a:97:40:be:c2:ab:4e:a1:29:e3:c4:b4:24:
0f:39:d3:0e:c0:56:37:f6:77:66:6e:58:11:8a:83:7f:02:ee:
9f:94:8e:f9:6f:ca:7b:8f:57:2e:34:be:8a:69:ae:ec:18:6d:
fd:ed:f4:0f:4a:8d:d7:6d:32:22:72:aa:2a:43:de:0c:65:f4:
45:d9:ba:93:61:6e:4b:fc:22:35:67:89:73:c3:1c:03:b4:5c:
ef:d4:c4:b7:80:cf:77:a9:ad:38:25:bd:77:36:39:8c:06:5f:
aa:8f:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net