Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/I59p0fVLaIr89_ldEZwoF2MoYFE.roa
File: I59p0fVLaIr89_ldEZwoF2MoYFE.roa (raw, json)
Hash identifier: FdQSWnL3ElGU7Qil0yNzTyWdhStFMv7BqktZ0+6IJ5M=
Subject key identifier: 23:9F:69:D1:F5:4B:68:8A:FC:F7:F9:5D:11:9C:28:17:63:28:60:51
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 01942220138C5AECDC3E30F4455BC618651C
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/I59p0fVLaIr89_ldEZwoF2MoYFE.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52157
IP address blocks: 5.100.188.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:8c:5a:ec:dc:3e:30:f4:45:5b:c6:18:65:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239f69d1f54b688afcf7f95d119c281763286051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:1c:66:19:30:9a:b7:f8:a0:0a:fa:8d:4c:
0a:d6:f7:13:13:25:bc:f1:36:91:4e:d1:f9:ab:1c:
3f:56:22:b0:d0:85:9e:8b:de:16:1b:77:00:a8:22:
7a:2a:b8:9b:2f:0b:e9:d9:68:0e:8b:e5:c9:6a:cf:
1e:48:98:b5:62:57:9e:ef:5f:31:a5:da:84:7c:65:
61:b1:72:8b:19:ef:78:40:8b:78:3f:b3:f0:37:bd:
4e:62:c5:b4:e4:2d:d4:a3:91:03:c8:4d:99:e3:3f:
46:99:94:47:53:75:d5:9a:5a:0e:21:65:e6:89:cf:
b7:94:30:97:ff:96:ce:d4:54:40:7e:58:47:d7:14:
49:5d:a0:64:33:d1:35:d6:18:b0:86:72:fd:fc:c9:
00:e6:45:36:8c:4b:0a:84:12:a0:e8:b6:63:86:93:
e4:a8:30:57:88:1d:8c:fa:b2:26:fd:46:13:f6:d0:
57:74:a2:c4:e4:a9:74:1a:16:9c:2e:72:6c:80:7e:
27:2f:23:ca:1a:61:fe:3e:64:ea:5a:72:02:06:d1:
84:83:ef:5d:0a:6d:c1:9f:55:a1:1e:0b:a6:b5:1b:
3a:06:c7:f5:26:97:dc:45:e9:28:45:a2:89:19:b5:
8d:53:e9:58:8c:c0:55:b0:50:0c:ee:b5:6d:8b:55:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:69:D1:F5:4B:68:8A:FC:F7:F9:5D:11:9C:28:17:63:28:60:51
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/I59p0fVLaIr89_ldEZwoF2MoYFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.188.0/22
Signature Algorithm: sha256WithRSAEncryption
90:7f:77:01:4f:13:f9:b2:b9:dd:e1:87:8f:bb:8f:1a:c2:d3:
62:0d:d2:0e:f6:e1:63:9e:5b:a6:46:8f:a5:e6:4c:3f:7c:f3:
f8:69:c7:47:3f:7c:01:f0:64:4b:54:cb:e5:4b:3c:70:c4:80:
7d:2e:ed:e2:da:15:a3:2f:c4:08:8d:94:00:55:e3:94:0d:ab:
4e:f8:f3:aa:a2:e3:f9:a9:b7:ae:5a:de:a9:8a:04:ef:f1:9d:
29:f3:f7:87:80:89:dd:e2:9b:c7:78:df:ea:52:f4:65:9f:84:
e8:84:d6:2f:3a:1f:45:ef:0d:b8:c1:7c:ec:01:c5:cf:b4:7d:
d5:d6:db:b9:74:91:cb:38:8c:b1:b7:d6:cf:99:da:d9:63:30:
b5:cb:89:16:98:b2:63:c9:c6:a8:55:d1:10:39:69:fe:5f:77:
f5:40:fa:cf:ad:6c:0e:78:aa:67:3d:f4:67:22:66:39:c3:4d:
65:79:b0:88:00:27:fd:53:86:e6:f9:af:fe:9b:6c:46:94:a0:
fd:57:67:64:ee:12:00:1d:83:91:1b:8f:a4:28:80:b9:0a:5b:
c9:d8:ed:df:10:ae:8f:0b:d0:ea:7c:b4:89:db:3c:2c:96:05:
b2:91:59:25:1f:3b:9a:7a:0a:ae:9d:11:cf:5d:3e:c0:5a:75:
62:0d:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:22:15 2025 by rpki-client on console.sobornost.net