Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k95By77eFq9DUWDwAb2291FRlyU.roa
File: k95By77eFq9DUWDwAb2291FRlyU.roa (raw, json)
Hash identifier: WlhA285guc6rmeOF/ooSW+4g229q4Nxr6KNEoGDiRR8=
Subject key identifier: 93:DE:41:CB:BE:DE:16:AF:43:51:60:F0:01:BD:B6:F7:51:51:97:25
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0195E2784DBECF711EA4D24D80C044877B3D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k95By77eFq9DUWDwAb2291FRlyU.roa
Signing time: Sat 29 Mar 2025 15:14:49 +0000
ROA not before: Sat 29 Mar 2025 15:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e2:78:4d:be:cf:71:1e:a4:d2:4d:80:c0:44:87:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 29 15:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93de41cbbede16af435160f001bdb6f751519725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:ef:6d:7b:1d:4a:50:16:07:ca:03:e4:82:
d1:bb:c1:a3:a4:b9:d2:f2:e4:76:43:5a:d7:5a:dc:
18:a7:01:d7:3a:3b:f3:7b:30:8b:25:de:1c:02:e8:
cd:dc:83:8f:69:31:f8:d2:3f:c9:79:af:29:3f:21:
a8:80:07:68:9d:79:11:34:d9:d0:c2:23:95:41:db:
91:56:79:19:bb:13:26:40:4f:8d:96:78:4d:dc:61:
2d:e8:ce:e5:11:68:bd:98:e3:bc:76:07:d7:e5:4e:
e7:65:a1:43:3a:23:bd:a8:a2:2c:38:29:c0:be:8d:
2f:25:93:30:e6:8d:24:00:dd:68:60:07:bb:3f:16:
3a:5e:f1:0c:4e:ca:95:a0:a6:9e:b7:1e:c6:dd:ed:
25:38:0e:6b:3f:40:dd:a1:df:65:b1:2c:28:4f:9f:
f4:18:65:10:39:76:4a:de:d0:1f:c5:e3:b1:10:31:
d9:d1:d2:90:79:2b:5f:7b:52:e4:7f:2e:61:f3:3b:
b3:de:dc:0e:f6:e0:7c:ef:f0:8d:5f:ba:51:e7:69:
4d:7e:8b:7c:5d:92:16:68:ce:1b:a5:bc:47:b0:04:
ea:a5:1a:43:55:06:2b:48:1e:17:e0:e8:9c:e2:23:
e9:20:66:a8:9d:18:d8:6d:e8:0c:b2:f1:4a:17:c5:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:41:CB:BE:DE:16:AF:43:51:60:F0:01:BD:B6:F7:51:51:97:25
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k95By77eFq9DUWDwAb2291FRlyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
90:38:67:d2:f9:d3:a4:e9:25:5d:99:2f:d6:09:f0:e3:f5:f9:
49:c6:ba:1f:f3:69:85:34:35:a2:3f:fc:3b:f6:ff:3e:7f:78:
47:48:8f:c0:b7:38:f3:d0:55:c2:b0:bd:53:f9:c9:3c:d1:04:
d6:f7:3c:07:79:4f:38:4f:eb:9a:37:96:19:c9:b3:1c:15:ef:
a5:33:8b:84:88:31:58:7b:e1:d6:9f:33:9b:b6:bf:60:6c:a7:
df:fd:bc:3a:6b:69:a2:0a:a6:a1:68:ab:b2:d0:2c:4f:7f:32:
ff:c7:e7:ba:b8:eb:ae:85:2b:6a:e5:0b:b5:9d:50:e5:94:15:
b8:d8:ae:0a:aa:92:84:80:e2:77:2e:c0:be:46:76:6a:44:8f:
8d:9e:69:93:07:3e:5e:2f:a4:22:26:90:0b:f9:29:8a:f7:9f:
1f:5a:be:bd:1a:0a:e0:c4:d1:ea:72:83:c1:1d:93:9f:b7:40:
1c:e9:d2:0a:4a:e1:2b:4e:6a:20:fe:da:b5:ed:ea:c1:6b:db:
56:6c:23:5e:f7:98:8a:7a:f8:1f:6e:b0:d9:97:19:02:c8:5b:
35:6f:cd:b1:f5:31:72:63:1d:23:bf:33:ec:ba:87:5d:85:41:
8a:bf:5d:cc:73:11:5b:18:77:e6:29:43:26:cf:4a:a5:0e:28:
b4:15:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net