Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_feyPcyZLDDaR52MF5n-O7adZtQ.roa
File: _feyPcyZLDDaR52MF5n-O7adZtQ.roa (raw, json)
Hash identifier: ZauzuR71GioBAzvjakkPw0/AFwzaWudhlqVex6VUfi0=
Subject key identifier: FD:F7:B2:3D:CC:99:2C:30:DA:47:9D:8C:17:99:FE:3B:B6:9D:66:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201C07AC5EA932130305EA9BDD892D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_feyPcyZLDDaR52MF5n-O7adZtQ.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215292
IP address blocks: 5.175.248.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:07:ac:5e:a9:32:13:03:05:ea:9b:dd:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdf7b23dcc992c30da479d8c1799fe3bb69d66d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:c1:b5:8d:3f:7b:70:c4:f6:b3:31:8f:6f:
91:30:af:9d:72:57:8c:e6:93:33:7c:9a:5e:05:72:
f8:71:15:ac:32:ec:2b:4c:2d:30:15:ab:bc:8a:cd:
84:68:fc:65:5a:b5:27:90:1a:c6:37:57:42:e1:e9:
86:96:b6:a7:1c:f4:00:3c:a2:dc:85:7c:9a:92:3d:
37:57:89:5f:1f:1f:99:31:c0:1b:d9:8d:af:30:72:
7a:55:3c:1c:ad:88:3e:d8:5e:0e:3d:a3:be:10:50:
d5:56:7f:02:d5:9f:b0:36:12:ab:a2:bb:a2:27:af:
8e:00:0b:11:e8:e6:e1:2b:a9:45:3f:a3:a8:4e:15:
e8:d5:7a:c1:f8:57:ba:e3:60:d3:95:0f:e6:15:32:
3f:5d:27:60:ea:67:a2:68:1f:e5:e4:5c:bf:11:b5:
0e:91:35:3b:7d:5e:8d:79:c3:91:6d:5b:13:76:00:
02:0d:64:6f:55:09:ee:29:87:9f:45:f2:46:d3:0d:
82:92:36:75:7f:f8:d0:74:0c:8e:24:b8:d4:b1:f2:
ae:7b:31:27:a7:2f:52:dd:32:51:d6:37:a8:cf:c2:
40:10:19:52:6c:d1:68:e6:0d:7f:03:00:01:ac:57:
b4:2c:54:6d:b1:2e:8e:61:3c:6e:80:37:70:40:21:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:B2:3D:CC:99:2C:30:DA:47:9D:8C:17:99:FE:3B:B6:9D:66:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_feyPcyZLDDaR52MF5n-O7adZtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.248.0/24
77.90.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d7:4e:4d:48:9a:38:4e:72:38:5e:e1:96:76:f2:27:f5:88:
33:d1:5b:87:c0:a7:8e:8e:c1:ff:93:7e:3f:e0:ad:8f:f5:ae:
4a:ce:de:49:d9:33:cd:16:e5:85:b2:ab:97:a4:42:1a:de:0e:
c8:0b:d9:b2:09:9f:79:a3:97:33:33:f6:43:d1:1b:7c:3a:f5:
38:fa:d1:16:b0:26:a0:cd:da:63:17:28:73:03:44:5c:c8:35:
e3:16:50:6b:87:a1:c6:dd:c4:03:3d:5f:38:2a:27:32:a6:c8:
fc:c0:eb:8b:da:32:14:7e:ce:20:e3:7e:c8:00:15:20:d7:10:
a4:8e:6e:0e:88:16:48:ac:b2:3c:55:fb:41:d9:c6:2e:c8:bb:
b0:35:f2:d9:f6:3d:65:9b:33:96:2f:07:87:e7:33:09:25:cb:
37:8d:3c:a4:5f:11:20:e6:8a:2d:d8:46:17:a6:c7:58:53:a7:
38:37:dc:a4:7d:4a:e8:ff:5e:7e:bb:24:39:d7:e1:f8:d6:df:
5c:08:71:a5:0e:05:c8:2e:91:f1:6d:dc:2d:8c:f5:1d:67:15:
81:f4:c7:5a:2a:6c:53:52:ae:0d:59:d6:e5:9a:e7:6d:ab:93:
eb:5a:33:47:b9:98:b8:2d:43:2a:49:e7:81:92:f6:08:4b:de:
89:92:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net