Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa
File: 1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa (raw, json)
Hash identifier: K7IM15aCA5aTJM5sDX4rMPreikAauQh+879R4GxfzqU=
Subject key identifier: F8:3E:23:24:3F:34:EC:7F:8E:3D:46:13:0C:E4:F7:4E:EF:C9:C9:2E
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 019518C5AC25C83592E936F8CA824ED21108
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa
Signing time: Tue 18 Feb 2025 11:16:02 +0000
ROA not before: Tue 18 Feb 2025 11:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200356
IP address blocks: 5.42.197.0/24 maxlen: 24
62.182.100.0/23 maxlen: 24
193.84.18.0/24 maxlen: 24
2a02:4bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:c5:ac:25:c8:35:92:e9:36:f8:ca:82:4e:d2:11:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Feb 18 11:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83e23243f34ec7f8e3d46130ce4f74eefc9c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:3b:8e:be:74:a7:b0:5a:73:a6:0d:7c:6e:
3d:13:70:f8:f6:8c:9e:62:9f:b0:e6:d1:cf:3b:7a:
49:bf:bc:bb:5a:f1:e9:87:4f:50:86:75:3e:8a:70:
98:4e:c1:01:12:91:df:94:ca:f0:c7:99:c6:db:b4:
ee:01:4a:fd:87:ee:44:3a:1c:2b:0a:b0:be:f5:3a:
1c:39:62:8d:fb:3a:a1:da:c5:2d:36:14:24:bd:32:
9f:78:8c:fe:7d:1f:cb:7f:67:cd:7f:d5:56:ea:13:
7d:b1:9e:36:77:77:4b:2f:8a:51:11:5f:1e:45:0e:
0f:de:d4:9c:2d:90:aa:c8:f6:6e:e4:3d:cd:14:20:
b1:6f:39:0f:49:90:e8:e2:70:3f:2e:fb:2c:99:80:
45:42:ad:b7:fc:0f:28:6b:f1:8b:1e:a7:ee:6b:52:
37:e8:a3:7a:4f:8c:dd:27:2f:f7:13:8e:1b:48:11:
3e:98:7c:5a:f6:1a:89:cf:2f:94:18:f1:bc:78:68:
12:2a:ac:2e:82:76:f8:29:87:e6:56:05:cc:6a:ec:
98:6c:b7:25:84:f7:31:3c:01:0c:37:41:43:3b:5e:
90:92:bb:b8:d9:14:3c:b4:ad:44:cb:3f:79:4e:26:
99:48:84:df:58:68:d3:ec:58:cc:ed:43:d6:8d:ab:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:23:24:3F:34:EC:7F:8E:3D:46:13:0C:E4:F7:4E:EF:C9:C9:2E
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/1-D4jJD807H-OPUYTDOT3Tu_JyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.197.0/24
62.182.100.0/23
193.84.18.0/24
IPv6:
2a02:4bb::/32
Signature Algorithm: sha256WithRSAEncryption
e0:67:8d:a5:ed:a7:1c:52:04:d3:9d:33:47:f4:b3:70:c7:53:
26:57:6f:5a:2f:c1:81:47:0b:b1:d3:84:dd:ef:f4:d8:b4:48:
d2:71:9c:33:13:90:17:5f:c9:cd:2b:f5:8f:be:cc:c4:64:ac:
d8:c8:48:e1:16:4c:71:18:f8:9e:24:ef:05:5d:a8:28:7c:02:
4f:ac:75:35:00:a0:04:7d:fb:1b:80:b1:32:1d:53:f7:55:cb:
44:c8:ef:3a:03:d9:c0:92:8d:29:a1:14:18:c8:02:85:3d:d4:
70:3f:c1:15:fe:f8:5f:d3:a6:50:20:22:c0:6d:96:67:e3:b5:
92:14:f9:77:17:cc:ff:99:9f:bb:ba:1e:41:7d:3d:da:3e:70:
8a:7b:37:36:e3:f9:ab:9f:de:43:c9:2a:d3:d6:c5:a4:3e:12:
6e:5e:4e:47:2a:ad:13:c0:cb:a0:eb:58:08:be:f0:c0:22:9e:
70:f3:14:b7:77:eb:6d:e4:e9:ac:b1:00:3f:73:49:f3:b3:e0:
c4:5c:e0:84:86:b8:2c:62:d9:5a:a6:63:97:2c:20:01:2b:eb:
70:cf:7b:ba:2d:79:56:54:74:ef:9f:ac:94:02:12:3f:93:de:
cb:e3:3c:1d:74:55:38:6c:6a:2d:3e:55:25:4a:a7:4a:55:15:
0b:b6:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:48 2025 by rpki-client on console.sobornost.net