Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/az8f5PX7dUfhI93pu-mhMPohiUw.roa
File: az8f5PX7dUfhI93pu-mhMPohiUw.roa (raw, json)
Hash identifier: PF7qRr/GcrYr8KFAg2buvtd67qe7aScIHbVhVBnD8/M=
Subject key identifier: 6B:3F:1F:E4:F5:FB:75:47:E1:23:DD:E9:BB:E9:A1:30:FA:21:89:4C
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 0195F626F03016D7CE153A2177BC6A7B01E6
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/az8f5PX7dUfhI93pu-mhMPohiUw.roa
Signing time: Wed 02 Apr 2025 10:58:21 +0000
ROA not before: Wed 02 Apr 2025 10:58:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60277
IP address blocks: 195.5.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:26:f0:30:16:d7:ce:15:3a:21:77:bc:6a:7b:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Apr 2 10:58:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b3f1fe4f5fb7547e123dde9bbe9a130fa21894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:2c:04:fb:18:b8:78:f1:60:06:53:88:48:
b2:7e:b7:3d:d2:f8:9b:71:b0:51:d2:e7:cd:ba:d1:
a7:4a:48:41:d7:6f:b8:28:41:5f:bd:98:7a:0c:87:
93:4f:81:43:03:b2:f2:4d:a4:b7:f8:d9:24:fb:9b:
0d:e7:38:5d:9b:c4:34:af:e7:3f:dd:88:32:37:57:
be:a3:4e:95:4a:29:e5:9f:a8:3e:a6:32:44:47:99:
39:61:ad:fd:ed:7a:55:07:dd:e8:f9:9b:91:09:1b:
54:4c:48:fd:de:3a:60:bb:f4:ff:3c:51:74:7d:05:
0a:36:ae:cf:dd:32:45:25:18:5a:84:14:8b:19:7d:
9e:e9:1f:f5:04:9f:c4:7a:5a:99:b1:45:2f:95:05:
53:38:71:8a:b9:98:e4:2f:d4:fe:e7:6c:f7:a9:6b:
c6:4d:3e:3b:1d:3b:bd:a7:ea:60:8a:47:92:9f:f3:
17:90:e5:59:2f:5b:bd:92:b4:4a:c5:54:e7:54:7c:
2c:05:07:20:28:b2:ca:f9:cd:00:e6:7a:6b:ec:36:
8f:0e:60:6e:1b:38:68:45:c2:27:b7:ce:c8:39:a7:
d5:9a:9b:2f:76:18:90:69:dc:fd:a0:70:f9:cb:22:
17:e3:15:97:1f:1a:13:3d:56:f2:43:4e:89:8b:e5:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3F:1F:E4:F5:FB:75:47:E1:23:DD:E9:BB:E9:A1:30:FA:21:89:4C
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/az8f5PX7dUfhI93pu-mhMPohiUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:bf:8c:30:b0:94:a8:0f:76:fc:29:7d:d8:e6:d4:16:05:97:
c6:8b:f9:50:4d:13:0c:70:f0:fa:0a:b1:ce:2d:11:ed:a3:70:
de:8d:b4:b5:d5:6a:5d:62:9c:3b:87:1b:ec:4e:b8:11:f4:d3:
f9:30:2d:bd:cf:2e:5b:31:87:98:df:07:cb:1a:5c:af:97:5b:
25:37:17:e5:9a:48:85:be:7e:09:88:b6:c6:4d:df:5b:af:d5:
b9:c7:84:a3:2e:90:aa:d6:35:34:12:be:c3:5a:ab:9e:85:8c:
c6:85:74:ea:93:03:55:d2:4c:81:97:4d:9d:d7:f3:8a:17:c3:
31:f4:76:7c:92:cb:2b:cb:0d:b3:94:4f:90:f4:8e:66:9f:71:
33:b1:96:bf:6c:5c:36:5f:31:bf:75:2e:27:3e:82:73:8c:36:
4b:eb:f8:53:85:cd:d5:aa:de:bf:01:c0:30:d9:a7:f6:12:1b:
70:eb:37:b4:89:39:c1:3c:52:2a:c7:75:46:7e:a6:55:81:b5:
2a:af:85:60:3a:e0:a9:35:ed:b3:1f:29:6b:32:26:ea:6b:af:
85:34:31:75:2a:72:28:2f:61:f4:28:4e:7b:fd:ed:3c:7e:c5:
0b:2b:22:cb:69:f9:46:a7:8d:7f:d3:92:7b:8e:c3:00:e4:9f:
13:ef:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net