Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/0T5ioKjx83-tTr3Mt9le068JcTQ.roa
File: 0T5ioKjx83-tTr3Mt9le068JcTQ.roa (raw, json)
Hash identifier: W8RCmNZUMfFbxdN1LMLcVYrh7MEw9Ur5XcdnTWf1Txo=
Subject key identifier: D1:3E:62:A0:A8:F1:F3:7F:AD:4E:BD:CC:B7:D9:5E:D3:AF:09:71:34
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 0194252126B43708C020EBC95D3A6C26FEFF
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/0T5ioKjx83-tTr3Mt9le068JcTQ.roa
Signing time: Thu 02 Jan 2025 03:48:36 +0000
ROA not before: Thu 02 Jan 2025 03:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202063
IP address blocks: 185.55.48.0/22 maxlen: 22
185.55.50.0/24 maxlen: 24
185.55.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:26:b4:37:08:c0:20:eb:c9:5d:3a:6c:26:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Jan 2 03:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d13e62a0a8f1f37fad4ebdccb7d95ed3af097134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:54:5e:6e:b4:38:ca:aa:24:06:bd:ac:09:
86:70:2c:64:1b:38:55:ea:52:df:2b:b2:65:8c:9e:
c3:3c:63:35:03:c7:51:1c:8c:37:cd:dc:cd:17:8c:
b3:1f:d4:f7:52:e7:3f:c1:22:67:c1:84:b4:b6:2c:
51:a7:98:ad:7c:70:94:eb:b5:b7:a8:4b:ec:9b:96:
af:bf:78:cf:92:fa:1c:bf:64:13:5f:8f:47:43:74:
e9:e6:40:29:be:1d:fa:c8:ae:cd:50:5c:fa:85:11:
d6:e6:d2:2a:7b:37:08:78:5c:d2:7e:25:19:f2:b7:
bf:b7:df:92:1b:d1:44:82:56:00:39:9c:b6:cd:5a:
03:c4:ee:40:a7:00:f5:b3:d0:e2:03:fa:6a:9b:41:
cc:2a:c7:e9:ce:01:d9:62:c8:15:c1:0a:e4:b2:5e:
9c:7e:29:5c:f5:ab:fc:61:e7:ac:9a:97:ce:d7:b2:
13:43:cf:2f:e2:af:98:9b:36:03:e0:f2:ab:6a:24:
5c:31:cd:9f:ec:7a:26:71:32:d1:05:26:06:92:33:
3b:fa:65:ee:1f:95:61:c4:28:c7:12:17:9c:ad:47:
d1:8e:87:83:d1:44:af:1c:03:b6:df:fe:a4:79:9f:
79:50:12:53:11:5f:e1:ad:01:3f:93:7c:58:d6:f7:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3E:62:A0:A8:F1:F3:7F:AD:4E:BD:CC:B7:D9:5E:D3:AF:09:71:34
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/0T5ioKjx83-tTr3Mt9le068JcTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.48.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:bc:7e:b6:dd:00:94:6f:5c:51:56:99:3d:09:9c:45:3d:e1:
4a:f9:87:bb:3a:32:34:2f:ab:e4:b6:5a:02:9a:aa:ef:1d:2c:
76:67:06:93:6b:1d:4b:71:aa:1f:01:4a:03:bd:7f:34:9a:bf:
8f:de:b6:33:d0:45:c1:37:90:96:9b:05:ba:ce:25:41:fe:c1:
ac:18:88:c3:67:c2:90:28:91:33:a0:e6:f5:ee:b8:35:82:45:
29:1a:29:fb:92:a1:ba:f6:41:ac:7b:cd:d3:89:f9:c8:10:67:
b4:a9:ac:38:3e:31:2f:a1:ce:58:7d:90:cb:b7:94:15:f3:53:
d8:75:98:6f:d8:09:54:c3:55:0f:9b:ff:ea:bb:42:42:d5:b9:
2d:40:0e:46:54:9c:b2:92:5a:c3:3a:c7:c1:23:d4:8f:85:d3:
a1:c6:27:50:22:1f:99:e0:0f:13:84:65:22:5f:b3:62:c2:b0:
9b:ea:c2:47:ea:14:bf:79:77:a3:bd:bc:31:46:dc:3f:ca:07:
f0:b8:fd:7d:80:d2:a9:2d:a4:dd:80:ad:76:31:6e:0e:4d:98:
eb:89:90:aa:e5:05:3d:96:6d:13:d2:69:0e:b6:2e:cc:cb:16:
9a:7a:d8:92:2a:e5:4e:9a:60:0a:4a:08:18:40:0f:86:cd:d8:
02:4a:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net