Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/aaSIhAJHCTwygtdFuXnOQPW6bY4.roa
File: aaSIhAJHCTwygtdFuXnOQPW6bY4.roa (raw, json)
Hash identifier: wv3RWyn/0THt7bCTdq/aMs2HWBM2MxgNANY6nblHNaA=
Subject key identifier: 69:A4:88:84:02:47:09:3C:32:82:D7:45:B9:79:CE:40:F5:BA:6D:8E
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBAC0B92251CC7C4D0B32B3BE5FAC
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/aaSIhAJHCTwygtdFuXnOQPW6bY4.roa
Signing time: Wed 02 Apr 2025 14:15:49 +0000
ROA not before: Wed 02 Apr 2025 14:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3169
IP address blocks: 155.133.62.0/23 maxlen: 23
185.60.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:ba:c0:b9:22:51:cc:7c:4d:0b:32:b3:be:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a488840247093c3282d745b979ce40f5ba6d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:60:ce:bc:46:95:e0:87:94:b8:6a:1c:55:
dd:c8:b3:35:79:28:c6:1d:e5:f4:bd:3d:8c:53:3b:
c1:f5:1a:60:6b:55:3e:bd:88:fe:a8:d5:3a:7b:94:
cd:7e:d5:bd:77:6f:d3:9b:da:5a:ec:46:0b:c6:46:
08:56:df:b1:a6:b0:73:57:4c:2f:d4:84:8d:28:08:
f2:17:e6:67:c4:ec:48:50:61:ad:29:e9:5d:39:89:
15:72:41:9c:2a:79:aa:6b:1a:34:bd:2a:ea:92:fe:
ae:b5:03:fa:6d:1d:22:d7:9e:67:13:18:42:7b:3d:
3b:b2:90:3c:ac:14:e4:d3:07:c3:01:c4:68:5c:bc:
c3:03:b3:8b:67:3b:bf:75:ca:aa:c5:06:81:3f:54:
8b:0e:e9:ab:e5:d3:32:92:4d:32:e8:98:bf:c5:9a:
d1:63:04:18:ec:85:44:cb:c2:b1:f7:01:1e:12:fd:
1f:2a:64:78:b9:d3:bd:54:c4:c5:47:e7:c8:08:dd:
03:a0:c3:65:90:96:1a:5a:f1:99:70:12:dc:51:82:
72:b1:8b:2f:3e:6e:28:d7:f6:15:78:d5:8e:d9:99:
66:24:92:f6:53:d0:fb:5a:a2:78:b8:49:d9:57:91:
92:88:ed:9c:88:22:b6:e5:2b:cf:16:89:a7:6c:47:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:88:84:02:47:09:3C:32:82:D7:45:B9:79:CE:40:F5:BA:6D:8E
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/aaSIhAJHCTwygtdFuXnOQPW6bY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.62.0/23
185.60.231.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e6:eb:03:c6:2c:0e:e7:99:69:1f:00:11:22:b6:1f:5c:4a:
46:96:43:65:49:c7:a7:02:d9:11:b5:3b:1f:ac:ba:a6:bd:32:
ac:37:1b:9a:d4:1d:a8:d3:da:a2:e3:bb:7f:a5:fa:07:5c:24:
ff:ad:4a:9a:14:a4:26:85:21:2c:1e:f9:51:6c:91:b9:fc:11:
f0:98:bb:88:2d:0d:56:f0:70:4c:b6:df:9d:69:a8:9a:33:a6:
59:c9:06:c0:f2:83:53:6b:cf:41:08:9b:d8:9e:39:61:f5:42:
25:dc:42:1e:7a:dd:80:d3:a0:33:fa:d4:21:26:02:e6:00:8d:
76:48:5a:7d:f0:f9:dc:3b:31:eb:ac:83:15:88:05:79:fb:e3:
6c:08:9b:41:0e:99:62:54:fe:8d:74:fc:84:ad:24:77:e3:1a:
83:f9:ff:9f:8a:08:ee:e5:eb:c1:7b:b0:34:3c:dd:a2:66:8b:
cd:0d:9b:51:98:72:6e:05:5c:49:a8:e5:37:f1:a6:72:e1:34:
da:41:6f:4b:05:2f:24:16:4c:9f:6b:95:8b:be:39:43:a3:b6:
f1:09:3a:b9:b4:d4:89:23:ef:d9:48:37:05:94:72:0c:4e:3d:
32:f7:2c:01:cb:c2:23:4f:18:f8:e9:3b:48:6f:a0:42:f8:1f:
88:38:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net