Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/sRpgMS5rykA5fxygTnmzWxlNSfM.roa
File: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (raw, json)
Hash identifier: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=
Subject key identifier: B1:1A:60:31:2E:6B:CA:40:39:7F:1C:A0:4E:79:B3:5B:19:4D:49:F3
Certificate issuer: /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial: 019425FC530EECEAFA9F2EFF8B17CC40CC85
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/sRpgMS5rykA5fxygTnmzWxlNSfM.roa
Signing time: Thu 02 Jan 2025 07:48:00 +0000
ROA not before: Thu 02 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56803
IP address blocks: 91.201.56.247/32 maxlen: 32
91.201.56.252/32 maxlen: 32
185.195.71.0/24 maxlen: 24
2a05:ad00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:53:0e:ec:ea:fa:9f:2e:ff:8b:17:cc:40:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Validity
Not Before: Jan 2 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b11a60312e6bca40397f1ca04e79b35b194d49f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:42:42:a3:bb:1a:55:69:9c:22:65:f3:37:
50:35:58:f6:55:34:f7:57:32:47:a5:6a:42:37:69:
02:ff:44:e6:18:71:7b:6f:23:54:53:58:f9:fc:15:
e8:e6:1f:48:f4:ce:8c:15:64:80:39:77:dd:28:57:
b4:82:8b:53:6c:36:e7:b4:78:1f:3a:49:8c:3a:1d:
a9:36:59:d7:a7:a8:ae:4c:a9:80:ab:ad:fb:60:8f:
b3:a5:f0:47:60:12:cf:c3:72:31:b0:47:27:30:74:
e9:e9:7d:0f:1d:79:4f:38:ec:10:16:17:0a:fa:fc:
fc:46:3a:04:98:80:f6:f8:9b:20:a1:46:8f:d6:8b:
8c:ec:4d:16:ed:7e:5f:e4:f8:a1:ba:0a:a3:bf:be:
3a:e7:31:9e:73:f0:43:22:e5:03:76:82:99:d4:58:
40:7f:2f:25:cc:6c:ba:13:54:96:73:a1:cc:c0:02:
bc:c8:6d:42:fb:af:b7:71:f8:46:be:69:9a:a6:f7:
eb:e4:db:b6:66:dc:55:4f:f9:19:b3:53:bd:26:bf:
74:7b:32:2e:0c:0b:f4:fc:32:80:7a:1f:fe:f4:fa:
ad:10:67:4c:67:8a:4f:4a:49:14:0b:fa:77:a6:b2:
6d:a1:ce:bb:15:d4:e9:90:f4:3d:e9:3b:ea:d2:b1:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1A:60:31:2E:6B:CA:40:39:7F:1C:A0:4E:79:B3:5B:19:4D:49:F3
X509v3 Authority Key Identifier:
keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/sRpgMS5rykA5fxygTnmzWxlNSfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.56.247/32
91.201.56.252/32
185.195.71.0/24
IPv6:
2a05:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:f0:75:f8:98:19:90:94:18:d6:20:80:d2:68:e4:15:8d:38:
fc:df:00:69:30:d4:81:bf:39:bf:e6:3c:f5:bd:15:0b:31:9c:
c3:3d:c6:19:00:39:9e:fc:f1:6f:bb:c7:b7:e6:a6:7a:ab:21:
20:74:50:29:29:31:ef:3b:b2:c4:e9:23:9e:f1:dd:fa:5d:c3:
5c:bd:90:e9:16:9a:78:82:20:72:c5:44:1a:8c:ac:49:4c:62:
16:d2:10:28:55:d7:09:e8:cc:a3:f5:7e:b3:2c:3a:3f:7b:c3:
c8:ae:0a:35:30:26:eb:9d:78:ab:b2:86:5d:a5:db:92:a1:19:
d6:6a:0e:63:18:94:da:15:50:06:13:0c:c3:5f:0a:47:94:95:
6b:0b:e5:c2:47:38:33:6b:ec:f1:d1:87:fc:72:4f:4d:de:06:
18:37:eb:ec:60:a7:a9:b4:5a:2a:71:e9:84:0e:6b:20:db:0c:
89:38:0a:70:17:08:ef:4a:7d:71:21:a3:eb:46:19:c8:72:9d:
9a:b3:78:36:16:f0:0d:01:ac:e9:80:19:7c:6a:17:2c:4d:fa:
ad:35:9d:22:e7:07:4a:f6:0f:fe:f5:d3:7a:bc:42:ee:97:d8:
90:97:fa:0e:e8:74:2f:c1:44:58:b9:14:98:e2:bf:f7:e3:ff:
aa:50:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net