Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/TlmA7hYGvfoGdT0G5jb2lRunL7s.roa
File: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (raw, json)
Hash identifier: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=
Subject key identifier: 4E:59:80:EE:16:06:BD:FA:06:75:3D:06:E6:36:F6:95:1B:A7:2F:BB
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01942746E95B4258370C9890C8A8CC28C3DE
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/TlmA7hYGvfoGdT0G5jb2lRunL7s.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207786
IP address blocks: 195.85.218.0/24 maxlen: 24
195.85.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:e9:5b:42:58:37:0c:98:90:c8:a8:cc:28:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e5980ee1606bdfa06753d06e636f6951ba72fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:29:52:3f:a7:25:ad:44:00:eb:17:45:9f:
47:3e:09:48:76:40:cc:b2:e7:8c:9b:fe:8f:d8:6d:
f9:a6:6c:cc:1f:44:9e:30:15:14:c3:27:23:3d:12:
1f:ab:a7:42:9a:f9:f5:d1:31:27:79:7a:84:37:65:
63:05:9b:42:82:0c:8a:00:38:f0:92:73:99:ea:25:
ca:cb:85:01:01:77:a8:90:9e:db:ed:e8:d1:49:6f:
e3:d4:0e:26:93:36:bd:d7:91:45:57:2c:5b:a7:06:
dd:64:32:44:6f:6f:68:4c:95:b6:9e:d4:24:01:5e:
e2:f4:0c:88:37:0a:22:6b:b1:9b:19:e9:19:b2:dd:
1c:31:47:43:61:ac:19:fb:2e:c7:a6:66:2d:68:9f:
92:d0:46:f5:da:12:92:17:e5:e2:8f:67:e8:7e:26:
85:2e:23:a5:c4:3b:ac:88:82:f9:16:a4:7d:97:a8:
3f:39:7a:e1:27:30:31:0b:0b:95:3a:b3:58:4a:65:
bc:be:bc:49:17:37:31:42:f3:42:b5:2c:69:29:05:
21:13:ce:5e:43:a7:d5:7c:05:12:2d:8f:9d:d5:c8:
f6:a4:6d:09:f7:b6:44:f0:ca:8d:d1:58:59:a8:16:
06:be:15:25:30:33:69:30:36:d8:41:c8:80:c9:16:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:59:80:EE:16:06:BD:FA:06:75:3D:06:E6:36:F6:95:1B:A7:2F:BB
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/TlmA7hYGvfoGdT0G5jb2lRunL7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.218.0/24
195.85.244.0/24
Signature Algorithm: sha256WithRSAEncryption
59:35:eb:6e:1d:72:b5:2a:87:1c:30:53:58:b5:e0:e2:d9:b7:
40:e4:98:3e:25:02:34:bd:5d:1a:95:39:88:aa:59:e1:39:f2:
f6:34:76:ef:5f:b7:6b:3c:e3:53:db:fc:19:37:38:73:f3:88:
36:64:ab:8f:4f:b1:0d:3f:6a:7a:70:cc:85:f5:99:b8:60:bc:
57:b3:bd:9d:2f:ef:94:c8:be:7c:21:d8:e6:18:38:29:29:30:
2c:eb:6b:42:ae:65:4d:8f:2d:50:65:28:1b:59:09:bd:65:85:
2d:42:b9:2e:81:20:34:e4:af:40:f3:55:d4:de:19:d8:33:46:
b2:7f:d1:df:53:88:c8:7e:24:9e:5e:12:14:7b:e2:5f:d9:04:
5b:46:2c:79:20:e2:8f:ca:ad:92:42:4c:1f:81:29:f0:93:d1:
ef:f2:41:67:7a:97:f6:67:09:2f:c7:28:a6:99:a9:f5:e6:f7:
44:bd:74:3d:5c:88:c3:50:85:5e:e1:e2:cc:24:46:16:b0:f1:
88:8d:a8:af:d3:25:61:40:38:28:68:da:8a:db:49:9a:09:51:
4e:b6:4b:b7:31:28:cb:9a:76:23:a2:0b:f5:0c:fa:7d:77:56:
92:96:d4:70:f7:3f:17:dd:62:c2:6e:21:2f:3e:18:4f:e5:e3:
86:51:ae:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net