Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iwe0kg-crqIWyp2IScMa9LxREgQ.roa
File: iwe0kg-crqIWyp2IScMa9LxREgQ.roa (raw, json)
Hash identifier: CaVzf6weXzwiNznLUpeTB+QaHcaNjVgYiVjygsUgHxg=
Subject key identifier: 8B:07:B4:92:0F:9C:AE:A2:16:CA:9D:88:49:C3:1A:F4:BC:51:12:04
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 0195F6DBBAFCBB86FF8F34D21048F51D0909
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iwe0kg-crqIWyp2IScMa9LxREgQ.roa
Signing time: Wed 02 Apr 2025 14:15:50 +0000
ROA not before: Wed 02 Apr 2025 14:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47252
IP address blocks: 155.133.36.0/23 maxlen: 24
155.133.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:db:ba:fc:bb:86:ff:8f:34:d2:10:48:f5:1d:09:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Apr 2 14:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b07b4920f9caea216ca9d8849c31af4bc511204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:3f:1b:de:4d:01:5f:76:14:b9:a6:f2:ec:
6b:9a:91:5c:36:aa:ac:58:49:89:c1:26:13:bb:3e:
3b:c1:ba:c0:a6:fe:66:25:21:16:52:30:66:0d:38:
80:bf:ee:42:60:00:ab:95:38:ea:c0:24:d8:45:75:
3b:dc:e0:84:42:cc:18:9e:99:7f:f5:fd:7c:e7:15:
82:b5:8e:f2:77:9e:72:a6:82:7a:5f:ed:9c:d3:77:
41:69:d8:ba:e6:91:24:bf:01:18:eb:89:75:d5:0e:
be:a0:00:0a:47:cc:e4:67:da:5b:3c:15:4d:c1:e7:
a2:a4:8a:d3:87:12:2b:50:65:1a:86:c2:af:6a:22:
34:3e:98:1e:32:78:4c:e9:b7:52:c9:f8:ab:4c:72:
dc:56:33:13:46:ac:c2:11:ea:db:b3:36:68:f4:db:
94:16:f1:42:fd:7a:06:c9:f4:34:55:5d:30:9d:79:
39:a5:ee:dc:47:74:c0:60:b7:ef:e7:38:f1:04:5e:
c0:00:97:fa:a1:6d:41:7b:17:93:9d:dc:4d:4f:6f:
8c:42:42:66:f2:c1:e8:54:41:f4:8c:fe:5f:28:cd:
2c:d1:d1:9a:59:fb:68:45:4c:6f:c2:e4:50:a8:6a:
5e:43:c9:3a:50:81:af:45:c6:40:ea:f5:6a:21:8d:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:B4:92:0F:9C:AE:A2:16:CA:9D:88:49:C3:1A:F4:BC:51:12:04
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iwe0kg-crqIWyp2IScMa9LxREgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.36.0/23
155.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1c:91:7d:d1:28:88:ea:d7:ed:84:93:26:5d:78:b4:0d:5a:
20:a5:4e:5d:60:37:5f:cd:2c:8e:6a:00:e2:9f:3f:96:68:8a:
a8:1e:d9:a6:92:66:85:e8:64:09:16:4e:30:43:bd:2f:dd:55:
c2:70:dc:66:ee:d7:2b:a7:55:d5:58:fc:13:6e:23:37:5c:e5:
d2:03:8e:b5:30:38:6a:d1:71:dd:80:3a:fc:32:89:60:0f:b3:
02:f9:be:b4:56:45:d7:8d:1b:38:33:b3:70:f0:56:33:00:44:
9c:92:48:0a:58:d9:08:05:9b:a0:cc:7e:1d:25:fc:dc:8d:6a:
85:01:2e:d2:29:0c:08:59:1f:d6:e5:10:c4:05:27:ec:b8:46:
56:3d:ad:c7:6d:23:b8:c6:ac:61:5c:5d:38:5e:5b:78:e0:06:
cf:48:b1:53:17:d4:8b:9a:14:98:22:0e:5b:56:95:51:51:9c:
6f:2a:76:a0:b4:89:25:aa:41:13:04:6d:47:dc:b8:9e:5e:5c:
f8:82:d3:f4:5a:f8:0f:7e:10:3b:87:32:a7:15:a3:a6:9a:3e:
db:0e:79:75:c9:b9:26:7b:29:08:09:d5:8e:85:75:10:84:0f:
ac:67:8c:fe:32:f1:e3:82:5d:62:8e:ea:8b:c0:a0:61:23:18:
14:71:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net