Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/4JmdsvBatEpFanHBLwN8tE53B0o.roa
File: 4JmdsvBatEpFanHBLwN8tE53B0o.roa (raw, json)
Hash identifier: rZ4Y8EU6soeJCyiHjLhVB0iARab8gRMfLlwRpZ6KFuk=
Subject key identifier: E0:99:9D:B2:F0:5A:B4:4A:45:6A:71:C1:2F:03:7C:B4:4E:77:07:4A
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBBE7027E6572E743ADAA9BB98F05
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/4JmdsvBatEpFanHBLwN8tE53B0o.roa
Signing time: Wed 02 Apr 2025 14:15:50 +0000
ROA not before: Wed 02 Apr 2025 14:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201427
IP address blocks: 155.133.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:bb:e7:02:7e:65:72:e7:43:ad:aa:9b:b9:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0999db2f05ab44a456a71c12f037cb44e77074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:ad:ee:5f:d2:f7:1c:71:01:75:53:af:b2:
57:5f:7c:39:92:2b:96:3c:fc:fa:78:f4:33:dc:be:
7e:a9:9b:db:0e:6a:bd:98:9d:c2:af:d5:69:c2:cf:
ae:f0:4a:94:80:6c:b2:28:c5:00:ba:be:9c:1c:02:
c2:3d:c2:30:c9:e1:81:aa:7f:9d:91:15:89:4c:a1:
1d:86:3a:ca:a4:c8:db:86:84:f8:12:1a:87:33:01:
20:ef:cc:7c:62:23:a1:96:8b:d0:75:7b:42:dc:5b:
12:92:dc:4f:a8:06:9b:88:19:ca:79:5a:1e:78:2d:
0b:87:3c:64:b1:55:18:fb:9e:2b:90:08:b4:65:f2:
78:6a:73:71:bc:49:6a:c0:78:b3:07:56:57:5d:65:
14:69:5f:35:a5:3b:39:9e:51:31:e7:6e:21:e1:bf:
cd:f6:7e:d4:12:71:c6:b9:a3:b1:be:9b:41:d3:ca:
4e:24:19:62:02:8e:7f:b4:34:e3:9f:74:57:f0:72:
70:a1:f0:9c:45:a3:54:53:15:70:01:fd:9c:54:a7:
3a:8e:ff:c7:ed:c1:fa:ba:5c:8f:73:5f:ec:c3:fc:
2e:18:dd:aa:a6:de:59:a2:8a:0f:a2:90:5f:0e:f5:
f0:03:32:3c:09:57:de:fe:08:81:37:26:bc:df:79:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:9D:B2:F0:5A:B4:4A:45:6A:71:C1:2F:03:7C:B4:4E:77:07:4A
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/4JmdsvBatEpFanHBLwN8tE53B0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.96.0/21
Signature Algorithm: sha256WithRSAEncryption
98:77:4f:42:9b:e4:df:b4:0d:bb:7e:35:ad:e9:7f:1b:38:58:
c3:6c:cf:11:91:33:c3:a6:b7:e6:49:7a:5d:5b:f8:1a:78:b8:
a7:49:cc:43:65:5e:cd:5a:70:e4:73:66:52:d1:55:e3:f1:fc:
16:45:b1:95:47:77:1a:02:56:58:69:37:20:dd:7d:29:23:77:
dc:bb:eb:cb:cc:61:73:80:f8:96:5d:24:fb:34:ea:0a:d7:e7:
36:35:3c:38:d2:94:3f:26:69:52:49:68:68:e1:6c:2d:c2:62:
4a:a7:39:62:3d:97:5a:fb:4f:28:6e:9a:7d:32:ed:36:55:bb:
76:66:7b:53:bf:08:5b:90:2e:d3:cb:54:8e:4f:39:7b:f3:8a:
3a:c2:7b:eb:f3:fa:3b:4c:c2:78:f0:f0:a9:d4:54:19:cd:10:
bd:9e:c3:e6:15:9a:a4:2e:ee:74:8b:4e:39:ef:e6:81:57:12:
af:0d:e8:4a:04:67:47:ee:2f:1b:47:81:1f:91:05:56:a4:b5:
86:0a:02:f5:66:1a:94:21:8b:fa:37:ec:fb:b3:6a:7a:a8:f0:
38:bb:31:34:70:ec:85:d9:47:89:44:d4:fd:3d:e8:9c:ab:04:
ab:09:27:35:61:50:3c:49:57:e8:7c:55:c5:97:96:17:e7:68:
bc:47:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net