Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eKIy7ViVpKa9G_NzF9IIbXTYYWo.roa
File: eKIy7ViVpKa9G_NzF9IIbXTYYWo.roa (raw, json)
Hash identifier: epsY2ePorO/HluF5/vhdybPdVcltXkf+MwN+4x81nC8=
Subject key identifier: 78:A2:32:ED:58:95:A4:A6:BD:1B:F3:73:17:D2:08:6D:74:D8:61:6A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019625092B6AB9DAF9887C7C1DBC0E029045
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eKIy7ViVpKa9G_NzF9IIbXTYYWo.roa
Signing time: Fri 11 Apr 2025 13:27:59 +0000
ROA not before: Fri 11 Apr 2025 13:27:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 5.231.47.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:09:2b:6a:b9:da:f9:88:7c:7c:1d:bc:0e:02:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 13:27:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a232ed5895a4a6bd1bf37317d2086d74d8616a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:43:a7:6c:86:98:06:bc:45:4f:33:c0:a7:
f7:da:2a:ee:1b:76:58:e8:35:4a:2a:68:16:10:7c:
38:a9:4d:7e:8b:d6:79:0b:53:47:79:5f:88:c3:50:
b2:e6:fc:45:51:1b:d4:fe:b8:15:10:0e:7a:0b:a1:
43:26:d1:0f:3b:59:06:a4:5e:58:7a:57:94:ab:74:
72:3e:74:ca:8f:de:22:42:c0:7e:29:5b:c8:0a:c5:
c0:c3:8f:e9:59:59:f6:64:0f:2c:c0:b7:4a:19:56:
be:ae:37:1a:3a:f4:c9:99:60:7f:8e:59:75:6e:53:
72:1e:86:4f:c8:e3:ad:2a:01:62:36:48:a2:9b:fe:
0f:c2:09:d4:e5:3d:43:71:00:5d:6c:b9:6a:a0:a5:
29:de:45:61:5d:ef:a9:81:0f:37:eb:07:fc:23:e5:
4e:26:ab:30:e1:7e:e6:e9:db:28:1a:8c:35:f8:68:
b4:00:c0:60:ee:19:e8:09:a5:eb:33:57:ee:dd:25:
d4:9c:fe:b8:b2:f9:4a:c3:4b:d3:c7:92:32:d8:6a:
73:77:3c:09:e5:37:63:e5:e3:ee:d2:d3:ee:4e:3e:
52:a6:55:63:b0:fa:df:91:28:cc:ab:85:b7:be:0d:
67:61:d6:3a:52:e0:e9:ac:42:24:8f:44:04:ea:43:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:32:ED:58:95:A4:A6:BD:1B:F3:73:17:D2:08:6D:74:D8:61:6A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eKIy7ViVpKa9G_NzF9IIbXTYYWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.47.0/24
77.90.37.0/24
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e8:4c:e2:8e:ca:04:96:91:8e:dd:63:6e:e9:03:a9:bf:34:
60:08:4e:63:0b:0e:91:57:9b:b0:a6:49:1e:e3:91:0e:72:08:
c8:f0:82:df:8f:27:11:47:81:53:54:0e:7c:45:5a:bd:39:b7:
72:f6:89:0b:f2:fa:bc:2c:17:89:da:30:5a:05:9a:be:d9:ce:
9e:bd:30:4b:8a:0a:9e:6c:03:c5:01:40:3c:31:42:40:78:20:
f3:84:05:01:21:25:a0:74:ba:c0:36:03:6b:8f:64:16:8d:75:
c4:a3:46:96:74:b2:0c:84:bb:fb:68:35:e3:34:ae:92:6b:f0:
91:ed:6a:cf:d3:a7:f4:74:3d:a5:3a:b3:e8:bd:85:48:77:5f:
71:ae:72:20:f0:53:58:9d:77:16:7c:23:5c:83:71:2c:fc:cd:
86:99:3f:8d:9c:5b:0f:ab:0f:56:02:6c:82:cf:a8:d0:d0:16:
8d:b6:0f:b1:68:38:93:22:b8:66:db:f3:41:b8:b8:56:4a:ea:
10:0e:b5:b4:19:f5:43:91:8a:51:13:7c:e9:2d:6b:5b:49:c0:
51:21:a0:fa:8b:08:7e:4f:42:0a:c4:d3:5b:80:47:a8:6e:c2:
16:e8:ff:75:1e:7e:f6:d5:ed:04:9d:4b:b0:7f:38:a0:87:f1:
23:25:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net